On 14 August 2018 at 01:38, Hacker Sword via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:
Hi Alex,

>The documentation is only conflicting if you are using it in a
conflicting way.



> The choice of Kerberos library is important. Samba AD DC with MIT Kerberos still is broken regarding trust to FreeIPA.

Pardon my ignorance, I am just going by the documentation as is w/ no prior knowledge ... where in the documentation is that specified?
The two main documentation pages I see when googling "freeipa AD trust" are:

https://www.freeipa.org/page/Active_Directory_trust_setup
https://www.freeipa.org/page/Windows_authentication_against_FreeIPA


I believe that the canonical documentation for FreeIPA is now the RedHat 7 documentation. These two very elegant URLs are the best documentation at the moment:

https://access.redhat.com/articles/1586893

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/linux_domain_identity_authentication_and_policy_guide/index

Cheers
L.