<div dir="ltr"><div>Also doing trust manually (as explained here <a href="http://www.freeipa.org/page/Active_Directory_trust_setup">http://www.freeipa.org/page/Active_Directory_trust_setup</a>) the command fail in the same mode: # ipa trust-add --type=ad <a href="http://MYDOMAIN.COM">MYDOMAIN.COM</a> --trust-secret Shared secret for the trust: ipa: ERROR: Cannot find specified domain or server name ==> /var/log/httpd/access_log <== 192.168.0.65 - - [08/Sep/2015:17:50:21 +0200] "POST /ipa/session/json HTTP/1.1" 200 185 ==> /var/log/httpd/error_log <== [Tue Sep 08 17:50:22.183939 2015] [:error] [pid 4265] ipa: INFO: [jsonserver_session] <a href="mailto:admin@IPA.MYDOMAIN.COM">admin@IPA.MYDOMAIN.COM</a>: trust_add(u'<a href="http://MYDOMAIN.COM">MYDOMAIN.COM</a>', trust_type=u'ad', trust_secret=u'********', all=False, raw=False, version=u'2.112'): NotFound ==> /var/log/samba/log.winbindd-idmap <== [2015/09/08 17:50:22.178007, 1] ../source3/winbindd/idmap.c:202(idmap_init_domain) idmap range not specified for domain * [2015/09/08 17:50:22.178984, 1] ../source3/winbindd/idmap.c:202(idmap_init_domain) idmap range not specified for domain * [2015/09/08 17:50:22.179771, 1] ../source3/winbindd/idmap.c:202(idmap_init_domain) idmap range not specified for domain * [2015/09/08 17:50:22.179863, 1] ../source3/winbindd/idmap.c:202(idmap_init_domain) idmap range not specified for domain * </div>:( Morgan </div><div class="gmail_extra"> <div class="gmail_quote">2015-09-08 15:21 GMT+02:00 Alexander Bokovoy <<a href="mailto:abokovoy@redhat.com" target="_blank">abokovoy@redhat.com</a>>: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On Tue, 08 Sep 2015, Morgan Marodin wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> I've solved this error, reading this forum: <a href="https://www.redhat.com/archives/freeipa-users/2015-July/msg00247.html" rel="noreferrer" target="_blank">https://www.redhat.com/archives/freeipa-users/2015-July/msg00247.html</a> But now when I try to trust to my Active Directory I see these errors: -------------------- # ipa trust-add --type=ad <a href="http://mydomain.com" rel="noreferrer" target="_blank">mydomain.com</a> --admin Administrator --password Active Directory domain administrator's password: ipa: ERROR: CIFS server communication error: code "-1073741258", message "The connection was refused" (both may be "None") Here my logs: -------------------- ==> /var/log/httpd/error_log <== Failed to connect host 192.168.0.65 on port 135 - NT_STATUS_CONNECTION_REFUSED Failed to connect host 192.168.0.65 (<a href="http://srv01.ipa.mydomain.com" rel="noreferrer" target="_blank">srv01.ipa.mydomain.com</a>) on port 135 - NT_STATUS_CONNECTION_REFUSED. [Tue Sep 08 15:01:50.859313 2015] [:error] [pid 2221] ipa: INFO: [jsonserver_kerb] <a href="mailto:admin@IPA.MYDOMAIN.COM" target="_blank">admin@IPA.MYDOMAIN.COM</a>: trust_add(u'<a href="http://mydomain.com" rel="noreferrer" target="_blank">mydomain.com</a>', trust_type=u'ad', realm_admin=u'Administrator', realm_passwd=u'********', all=False, raw=False, version=u'2.112'): RemoteRetrieveError ==> /var/log/samba/log.192.168.0.65 <== [2015/09/08 15:01:50.833128, 1] ../source3/auth/user_krb5.c:164(get_user_from_kerberos_info) Username IPA\admin is invalid on this system </blockquote> This is your problem. Does your system have SSSD actually running? List of ports that smbd should be listening on on IPA master: # netstat -nltup|grep smbd tcp 0 0 <a href="http://0.0.0.0:135" rel="noreferrer" target="_blank">0.0.0.0:135</a> 0.0.0.0:* LISTEN 12420/smbd tcp 0 0 <a href="http://0.0.0.0:139" rel="noreferrer" target="_blank">0.0.0.0:139</a> 0.0.0.0:* LISTEN 12417/smbd tcp 0 0 <a href="http://0.0.0.0:445" rel="noreferrer" target="_blank">0.0.0.0:445</a> 0.0.0.0:* LISTEN 12417/smbd tcp 0 0 <a href="http://0.0.0.0:1024" rel="noreferrer" target="_blank">0.0.0.0:1024</a> 0.0.0.0:* LISTEN 12422/smbd tcp6 0 0 :::135 :::* LISTEN 12420/smbd tcp6 0 0 :::139 :::* LISTEN 12417/smbd tcp6 0 0 :::445 :::* LISTEN 12417/smbd tcp6 0 0 :::1024 :::* LISTEN 12422/smbd -- / Alexander Bokovoy </blockquote></div> -- <div class="gmail_signature">Morgan Marodin email: <a href="mailto:morgan@marodin.it" target="_blank">morgan@marodin.it</a> mobile: +39.3477829069 </div> </div>