FreeIPA 2-way trust with MS AD

[Yuri Krysko]

Hello,

I know if the past (late 2018) there was a question about not enough clarity as to what is actually a 2-way trust between FreeIPA and MS AD. Technically, there does not seem to be any difference between 1-way and 2-way trusts. Question: is there a more concrete timeline when you guys plan to implement capability for IdM users to login to MS resources?

Thanks,
Yuri

[Rob Crittenden]

Yuri Krysko via FreeIPA-users wrote:
> Hello,
>
> I know if the past (late 2018) there was a question about not enough
> clarity as to what is actually a 2-way trust between FreeIPA and MS AD.
> Technically, there does not seem to be any difference between 1-way and
> 2-way trusts. Question: is there a more concrete timeline when you guys
> plan to implement capability for IdM users to login to MS resources?

Nothing more than it's being worked on, as it has been for the past
several years. It's particularly challenging because the changes span
multiple large projects that we influence but don't control so some
needed changes come faster than others.

rob

[Yuri Krysko]

Thanks, Rob!

On 9/11/20, 1:46 PM, "Rob Crittenden"  wrote:

Yuri Krysko via FreeIPA-users wrote:
    > Hello,
    > 
    >  
    > 
    > I know if the past (late 2018) there was a question about not enough
    > clarity as to what is actually a 2-way trust between FreeIPA and MS AD.
    > Technically, there does not seem to be any difference between 1-way and
    > 2-way trusts. Question: is there a more concrete timeline when you guys
    > plan to implement capability for IdM users to login to MS resources?

Nothing more than it's being worked on, as it has been for the past
    several years. It's particularly challenging because the changes span
    multiple large projects that we influence but don't control so some
    needed changes come faster than others.

rob