<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 12px; font-family: Calibri, sans-serif;"><div>Hi,</div><div><br></div><div>So, after I got the ipa-adtrust-install working, I tried to create a trust between our freeipa cluster, and a new AD machine. </div><div><br></div><div>It seemed to run ok, and gave an output, but in the ui under trusts, there is nothing.</div><div><br></div><div><div>[root@freeipa1-01 httpd]# ipa trust-add --type=ad ad.genops --admin Administrator</div><div>Active Directory domain administrator's password:</div><div>--------------------------------------------------</div><div>Added Active Directory trust for realm "ad.genops"</div><div>--------------------------------------------------</div><div> Realm name: ad.genops</div><div> Domain NetBIOS name: AD</div><div> Domain Security Identifier: S-1-5-21-1113268607-2619903336-2585939669</div><div> SID blacklist incoming: S-1-5-20, S-1-5-3, S-1-5-2, S-1-5-1, S-1-5-7, S-1-5-6, S-1-5-5, S-1-5-4, S-1-5-9, S-1-5-8, S-1-5-17, S-1-5-16, S-1-5-15, S-1-5-14, S-1-5-13, S-1-5-12, S-1-5-11, S-1-5-10,</div><div> S-1-3, S-1-2, S-1-1, S-1-0, S-1-5-19, S-1-5-18</div><div> SID blacklist outgoing: S-1-5-20, S-1-5-3, S-1-5-2, S-1-5-1, S-1-5-7, S-1-5-6, S-1-5-5, S-1-5-4, S-1-5-9, S-1-5-8, S-1-5-17, S-1-5-16, S-1-5-15, S-1-5-14, S-1-5-13, S-1-5-12, S-1-5-11, S-1-5-10,</div><div> S-1-3, S-1-2, S-1-1, S-1-0, S-1-5-19, S-1-5-18</div><div> Trust direction: Trusting forest</div><div> Trust type: Active Directory domain</div><div> Trust status: Established and verified</div></div><div><br></div><div><div>[root@freeipa1-01 httpd]# ipa trust-fetch-domains ad.genops</div><div>ipa: ERROR: no matching entry found</div></div><div><br></div><div>Any pointers as to where to start looking? It seems to have added the id range for AD, as well as the Default Trust View. Just not the actual trust. I can see the trust has been created on the AD side fine.</div><div><br></div><div>FreeIPA 4.2 on CentOS 7</div><div>Windows 2012R2</div><div><br></div><div>TIA</div><div><br></div><div>Darren.</div><div><br></div></body></html>