<div dir="ltr">Thanks Jason, but those documents need AD as the primary authenticator. This is not the case for us. </div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Mar 23, 2017 at 11:46 AM, Jason B. Nance <span dir="ltr"><<a href="mailto:jason@tresgeek.net" target="_blank">jason@tresgeek.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div style="font-family:lucida console,sans-serif;font-size:10pt;color:#000000"><div style="font-family:lucida console,sans-serif;font-size:10pt;color:#000000"><div><span class=""><blockquote style="border-left:2px solid #1010ff;margin-left:5px;padding-left:5px;color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt"><div><div dir="ltr"><div>We are primarily linux/osx shop and we currently have FreeIPA/IDM (ver 4.2) as our master. I will need to add a handful of windows machines and been trying to figure out how to authenticate our windows users with FreeIPA/IDM. Is this even possible? I know Global Catalogs may not happen anytime soon (sad face).  I'm open to -all- ideas, even if it is a paid solution (not sure if centrify and the likes can sync up to FreeIPA/IDM). </div></div></div></blockquote> </span><div style="color:#000000;font-family:'lucida console',sans-serif;font-size:10pt;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:#ffffff">I would start here:</div><div style="color:#000000;font-family:'lucida console',sans-serif;font-size:10pt;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:#ffffff"><br></div><div style="color:#000000;font-family:'lucida console',sans-serif;font-size:13.3333px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:#ffffff"><a href="https://www.freeipa.org/page/Windows_authentication_against_FreeIPA" target="_blank">https://www.freeipa.org/page/<wbr>Windows_authentication_<wbr>against_FreeIPA</a></div><div style="color:#000000;font-family:'lucida console',sans-serif;font-size:13.3333px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:#ffffff"><br></div><div style="color:#000000;font-family:'lucida console',sans-serif;font-size:13.3333px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:#ffffff"><a href="https://www.freeipa.org/page/Implementing_FreeIPA_in_a_mixed_Environment_(Windows/Linux)_-_Step_by_step" target="_blank">https://www.freeipa.org/page/<wbr>Implementing_FreeIPA_in_a_<wbr>mixed_Environment_(Windows/<wbr>Linux)_-_Step_by_step</a></div> <div><br></div></div></div></div></div></blockquote></div><br></div>