active-directoryldapkerberosfreeipa

How can I configure a trust between two FreeIPA servers?


FreeIPA has built-in commands to set up a trust relationship with an Active Directory server. Is there also a way to configure a trust with another FreeIPA server?

I want to simulate the scenario where personal users are authenticated through a corporate (LDAP + Kerberos) directory but service accounts and NPAs are kept in a local Kerberos realm.


Solution

  • No, right now FreeIPA does not support trust with another FreeIPA deployment.