<html> <head> <meta http-equiv="content-type" content="text/html; charset=utf-8"> </head> <body bgcolor="#FFFFFF" text="#000000"> <tt>Hello.</tt><tt> </tt><tt> </tt><tt>Wanted to first take a quick moment to thank everyone for their contributions on making this such a slick packaging and integration of components. FreeIPA is a welcome system</tt><tt> that has been needed for a LONG time.</tt><tt> </tt><tt> </tt><tt>I'm running into some trouble in completing my AD-trust setup</tt><tt>.</tt><tt> </tt><tt> </tt><tt>I've followed the guide here: <a class="moz-txt-link-freetext" href="http://www.freeipa.org/page/Active_Directory_trust_setup">http://www.freeipa.org/page/Active_Directory_trust_setup</a></tt><tt> </tt><tt> </tt><tt>but am not finding the command '</tt><tt>ipa trust-fetch-domains "ad_domain"'.</tt><tt> </tt><tt> </tt><tt>What concerns me is the statement "</tt> <meta http-equiv="content-type" content="text/html; charset=utf-8"> <tt>With this command running successfuly, IPA will get information about trusted domains and will create all needed identity ranges for them." - does this imply that if this command is NOT run that the creation of the mentioned identity ranges does not occur?</tt><tt> </tt><tt> </tt><tt> </tt><tt>The following command in the guide (ipa trustdomain-find "ad_domain") also does not exist, but what appears to be a variant of it (ipa trust-find) does return these results:</tt><tt> </tt><tt>=====</tt><tt> </tt><tt>[root@ca1-infra-ipa1 ~]# ipa trust-find </tt><tt> </tt><tt>---------------</tt><tt> </tt><tt>1 trust matched</tt><tt> </tt><tt>---------------</tt><tt> </tt><tt> Realm name: ad.XXXXX.com</tt><tt> </tt><tt> Domain NetBIOS name: AD</tt><tt> </tt><tt> Domain Security Identifier: S-1-5-21-754923713-4108838501-2041013861</tt><tt> </tt><tt> Trust type: Active Directory domain</tt><tt> </tt><tt>----------------------------</tt><tt> </tt><tt>Number of entries returned 1</tt><tt> </tt><tt>----------------------------</tt><tt> </tt><tt>=====</tt><tt> </tt><tt>[root@ca1-infra-ipa1 ~]# ipa trust-show "ad.XXXXX.com"</tt><tt> </tt><tt> Realm name: ad.XXXXX.com</tt><tt> </tt><tt> Domain NetBIOS name: AD</tt><tt> </tt><tt> Domain Security Identifier: S-1-5-21-754923713-4108838501-2041013861</tt><tt> </tt><tt> Trust direction: Two-way trust</tt><tt> </tt><tt> Trust type: Active Directory domain</tt><tt> </tt><tt>[root@ca1-infra-ipa1 ~]# </tt><tt> </tt><tt>=====</tt><tt> </tt><tt> </tt><tt>I'm just wanting to confirm whether or not the 'trust-fetch-domains' command that's listed in the guide is essential to complete the AD trust setup or if it's simply providing an informational output.</tt><tt> </tt><tt> </tt><tt>Thanks,</tt><tt> </tt><tt>-Chris</tt><tt> </tt> <meta http-equiv="content-type" content="text/html; charset=utf-8"> <meta http-equiv="content-type" content="text/html; charset=utf-8"> </body> </html>