>
> That choise was made several years ago and I can't remember, I tried with
id_provider = ad and sssd failed
> to
> start, don't know why ATM.
>
> However
INFINERA.COM has id_provider = ad already and it has the same problem, is
there something more
> that needs to be adjusted?
It's hard to say without more details.
If you have right keytab + dnf is configured properly then it should be enough
to use following configuration:
[domain/$AD_DOMAIN]
id_provider = ad
use_fully_qualified_names = True
Any idea how do (cross) id lookups in Windows? I want to make sure the cross realm really
works.