[Freeipa-users] Register IPA-Clients within AD domain

Alexander Bokovoy abokovoy at redhat.com
Wed Mar 29 09:06:56 UTC 2017


On ke, 29 maalis 2017, Ronald Wimmer wrote:
>Hi,
>
>the documentation states "[...] Client machines do not need to be in 
>the same domain as FreeIPA servers. For example, FreeIPA may be a 
>domain ipa.example.com and clients in domain clients.example.com, 
>there just need to be a clear mapping between DNS domain and Kerberos 
>realm. [...]"
>
>Can clients be registered properly if the clients.example.com domain 
>is an existing Active Directory domain which - of course - already has 
>_kerberos entries in DNS?
Read http://www.freeipa.org/page/V4/IPA_Client_in_Active_Directory_DNS_domain
There are also higher level description at http://rhelblog.redhat.com/2016/07/13/i-really-cant-rename-my-hosts/


-- 
/ Alexander Bokovoy




More information about the Freeipa-users mailing list