[Freeipa-users] Re: ldap provider variables for AD trust

[Rob Crittenden]

iulian roman via FreeIPA-users wrote:
>  Hello, 
>  
>  I have some old clients (sssd 1.9) for which I need to use ldap provider in sssd.conf.
> Does anyone know how ldap_search_base variables should look like in order to resolve the
> AD users ? 
>  With the default settings, it does resolve the posix users/groups from IPA but not the AD
> users. 
I believe you need to use the compat tree: cn=compat,dc=example,dc=test

rob