With relation to SSSD 1.15.3's

[RFE] Short name input format with SSSD for users from all domains when domain autodiscovery is used or when SSSD acts as an IPA client for server with IPA-AD trusts

https://pagure.io/SSSD/sssd/issue/3001

I read this to mean that in my

unix.domain.com domain managed by IPA, with a one way trust into AD at domain.com

I can now login with:

ssh lsimpson@server.unix.domain.com

instead of what I currently do with

ssh lsimpson@domain.com@server.unix.domain.com

(and my /etc/sssd/sssd.conf has

[sssd]

domains = unix.domain.com
)

Am I reading that correctly, or do I have it wrong?

Is there any config that needs to happen to implement this? Do I need to remove the domains= from sssd.conf?

Cheers

L.

------
"The antidote to apocalypticism is apocalyptic civics. Apocalyptic civics is the insistence that we cannot ignore the truth, nor should we panic about it. It is a shared consciousness that our institutions have failed and our ecosystem is collapsing, yet we are still here — and we are creative agents who can shape our destinies. Apocalyptic civics is the conviction that the only way out is through, and the only way through is together. "

Greg Bloom @greggish https://twitter.com/greggish/status/873177525903609857