Ok, thanks for the clarification. 

So  there is *no* possibility to serve AIX completely... 
There goes the use-case for our Unix admins - np ;-)



On Wed, Jul 25, 2018 at 1:56 PM Alexander Bokovoy <abokovoy@redhat.com> wrote:
On ke, 25 heinä 2018, Pieter Baele via FreeIPA-users wrote:
>Is it somehow possible to have the uid field
>in cn=users,cn=compat,dc=accnix,dc=infrabel,dc=be without the domain
>extension?
No, it is *not* possible. The whole idea of compat tree is to trigger
lookups only when @ad.domain is present, otherwise it will be very
inefficient in terms of performance.

--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland