Hi, I wonder if it is possible to configure a FreeIPA client to assume that clients logging in are from a trusted AD domain, instead of having those users to type `username@ad_domain` when logging in. I know I could have the user synchronisation approach so that users coexist on both systems, but a trust without sync is less complex, and I will have almost no FreeIPA users - I just want to join linux clients to FreeIPA for better management of linux resources. Any tips on if it is possible at all to do this?

Best, Francis _______________________________________________ FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho... Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

On 6 Apr 2022, at 19:01, Florence Blanc-Renaud <flo(a)redhat.com&gt; wrote:  Hi, you can have a look at "Configuration options for using short names to resolve and authenticate users and groups" [1] in RHEL 8 guide "Configuring and managing Identity Management". flo [1] https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/... > On Wed, Apr 6, 2022 at 10:29 AM Francis Augusto Medeiros-Logeay via FreeIPA-users <freeipa-users(a)lists.fedorahosted.org&gt; wrote: > Hi, > I wonder if it is possible to configure a FreeIPA client to assume that clients logging in are from a trusted AD domain, instead of having those users to type `username@ad_domain` when logging in. > I know I could have the user synchronisation approach so that users coexist on both systems, but a trust without sync is less complex, and I will have almost no FreeIPA users - I just want to join linux clients to FreeIPA for better management of linux resources. > Any tips on if it is possible at all to do this? > > Best, > Francis > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org > To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org > Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho... > Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure