On pe, 03 heinä 2020, Vinícius Ferrão via FreeIPA-users wrote:
Hello,
I have two FreeIPA servers with AD trust enabled. Usually I do everything
on the IPA #1 server, but I just observed that SIDs aren’t resolved on the
replica, is it normal?
I’m attaching a picture of the issue to illustrate it.
If this is not right, someone can help with debugging steps?
I observed that I can’t do getent passwd ferrao on the replica either.
Only on master:
[root@ipa1 ~]# getent passwd ferrao
[1]ferrao@ad.example.com:*:1499401105:1499401105:Vinícius
Ferrão:/home/ferrao:
[root@ipa2 ~]# getent passwd ferrao
Looks like the second server is neither trust controller nor trust
agent.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland