Ok, so here’s the solution I found almost by accident…
If I specify the domain search order to ‘ad.domain:ipa.domain’ -> the clients can now resolve the external users
If, for whatever reason, the search order is empty, the clients are back to ipa-only resolve…
Hope it helps someone
😊
Sébastien Toulmonde
Linux Engineering | ITS Linux CC
M +32 (0)475 49 81 45
Connect with us on: