<div dir="ltr"><div>Thanks for your responses Alexander, Dimitri and Gerardo. It appears further debugging will be unnecessary: I reinstalled on RHEL 7 and the trust established without issue:</div><div> </div><div> </div><div>----</div><div>[root@kwtpocidm001 ~]# ipa trust-add --type=ad mhatest.local --admin Administrator --password<br></div><div>Active directory domain administrator's password:<br>------------------------------------------------------<br>Added Active Directory trust for realm "MHATEST.LOCAL"<br>------------------------------------------------------<br> Realm name: MHATEST.LOCAL<br> Domain NetBIOS name: MHATEST<br> Domain Security Identifier: S-1-5-21-2226261992-3934846357-352671753<br> SID blacklist incoming: S-1-0, S-1-1, S-1-2, S-1-3, S-1-5-1, S-1-5-2, S-1-5-3, S-1-5-4, S-1-5-5, S-1-5-6, S-1-5-7, S-1-5-8, S-1-5-9, S-1-5-10,<br> S-1-5-11, S-1-5-12, S-1-5-13, S-1-5-14, S-1-5-15, S-1-5-16, S-1-5-17, S-1-5-18, S-1-5-19, S-1-5-20<br> SID blacklist outgoing: S-1-0, S-1-1, S-1-2, S-1-3, S-1-5-1, S-1-5-2, S-1-5-3, S-1-5-4, S-1-5-5, S-1-5-6, S-1-5-7, S-1-5-8, S-1-5-9, S-1-5-10,<br> S-1-5-11, S-1-5-12, S-1-5-13, S-1-5-14, S-1-5-15, S-1-5-16, S-1-5-17, S-1-5-18, S-1-5-19, S-1-5-20<br> Trust direction: Two-way trust<br> Trust type: Active Directory domain<br> Trust status: Established and verified<br>[root@kwtpocidm001 ~]#<br></div><div>----</div><div> </div><div> </div><div>Now onto the next hurdle :-)</div><div> </div><div><br> </div><div class="gmail_quote">On Thu, Sep 11, 2014 at 12:31 AM, Alexander Bokovoy <span dir="ltr"><<a href="mailto:abokovoy@redhat.com" target="_blank">abokovoy@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;padding-left:1ex;border-left-color:rgb(204,204,204);border-left-width:1px;border-left-style:solid"><span>On Thu, 11 Sep 2014, Traiano Welcome wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;padding-left:1ex;border-left-color:rgb(204,204,204);border-left-width:1px;border-left-style:solid">
Hi List<br>
<br>
I've been following the AD integration guide for IPAv3 here:<br>
<a href="http://www.freeipa.org/page/Howto/IPAv3_AD_trust_setup" target="_blank">http://www.freeipa.org/page/<u></u>Howto/IPAv3_AD_trust_setup</a><br>
However, when I reach the "Add trust with AD domain" step I get the<br>
following error:<br>
<br>
---<br>
[root@ipa ~]# ipa trust-add --type=ad mhatest.local --admin Administrator<br>
--password<br>
Active directory domain administrator's password:<br>
ipa: ERROR: CIFS server communication error: code "-1073741801",<br>
message "Memory allocation error" (both may be "None")<br>
---<br>
<br>
... And I'm at a loss for how to interpret this :-) Details on my setup:<br>
</blockquote></span>
Please follow<br>
<a href="http://www.freeipa.org/page/Howto/IPAv3_AD_trust_setup#Debugging_trust" target="_blank">http://www.freeipa.org/page/<u></u>Howto/IPAv3_AD_trust_setup#<u></u>Debugging_trust</a><br>
to provide useful debugging information.<span><br>
<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;padding-left:1ex;border-left-color:rgb(204,204,204);border-left-width:1px;border-left-style:solid">
- Windows 2008 R2 AD DC<br>
- CentOS Linux 6.5 IPA server (installed from yum repos)<br>
</blockquote></span>
Ideally you'd need to use RHEL 7 or CentOS 7 for trusts as IPA version<br>
3.3 is more mature in this regard.<span><font color="#888888"><br>
<br>
-- <br>
/ Alexander Bokovoy<br>
</font></span></blockquote></div><br></div>