Issue #5746: [RFE] Implement trust-add pre-check procedure - freeipa

freeipa

#5746 [RFE] Implement trust-add pre-check procedure

Opened 8 years ago by abbra. Modified 7 years ago

When establishing trust to AD, there are multiple possible ways to fail, especially if a shared secret is used to set up a trust to AD.

Implement a pre-check procedure that could take a name of trusted domain, method to establish trust, optional arguments, and perform various checks to identify potential problems.

- when shared secret is used, make sure AD side has proper trust half created: forest trust or external trust, not realm trust
- make sure DNS domains available in the AD forest do not overlap with IPA realm domains
- make sure DNS used by AD side can resolve IPA masters via SRV records

Metadata Update from @abbra:
- Issue assigned to abbra
- Issue set to the milestone: FreeIPA 4.5 backlog

7 years ago

Metadata

Assignee

abbra

Tags

None

Blocking

None

Depending on

None

Priority

normal

Milestone

FreeIPA 4.5 backlog

None

affects_doc

None

source

None

knownissue

None

type

defect

blockedby

None

test_case

None

component

IPA

blocking

None

on_review

keywords

None

test_coverage

None

reviewer

None

external_tracker

None

rhbz

todo

tester

None

changelog

None

design

None

freeipa

Source Code

#5746 [RFE] Implement trust-add pre-check procedure Opened 8 years ago by abbra. Modified 7 years ago

Close issue as:

Metadata

#5746 [RFE] Implement trust-add pre-check procedure

Opened 8 years ago by abbra. Modified 7 years ago