<html dir="ltr"> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <style id="owaParaStyle" type="text/css">P {margin-top:0;margin-bottom:0;}</style> </head> <body ocsi="0" fpstyle="1"> <div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">Hello,<br> <br> I can't seem to set up or find decent documentation on either cross-domain or pass through authentication. I have tried kerberos cross realm, and saslauthd.<br> <br> I have two different scenarios I would like to potentially accomplish.<br> <br> 1. FreeIPA domain of a.example.tld pass through authentication to FreeIPA domain b.example.tld<br> 2. FreeIPA a.example.tld needs to pass through authentication to our enterprise ldap<br> <div><br> What is the correct documentation to be following? Should I be trying to achieve this via an openldap pass through or a kerberos cross realm trust?<br> <br> Any thoughts or wisdom would be appreciated.<br> <br> Thanks,<br> <div style="font-family:Tahoma; font-size:13px"> <div class="BodyFragment"><font size="2"><span style="font-size:10pt"> <div class="PlainText">-Ian Muñoz<br> Computational Scientist<br> Oregon State University<br> </div> </span></font></div> </div> </div> </div> </body> </html>