FreeIPA supports trusts with AD (mostly in AD -> IPA direction, the other direction will be ready when #3125 is closed).
When the full AD trust is ready, the implemented interface shall be also used to create trust with other FreeIPA DCs.
Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1185854
#3125 is a pre-requisite for this work, which by it's own is a stretch. This RFE will thus rather land in later release.
Metadata Update from @mkosek: - Issue assigned to someone - Issue set to the milestone: FreeIPA 4.5 backlog
Metadata Update from @abbra: - Issue close_status updated to: None - Issue set to the milestone: Global Catalog and IPA-IPA trust (was: FreeIPA 4.5 backlog)
Notes: - IPA ID range detection needs to be added to allow pulling ID range info from an IPA deployment to be trusted. Right now just apply the same lookup as in AD case and this is not pulling the right range.
Login to comment on this ticket.