I talked to Dmitri Pat at Red Hat Summit and he says they have it on the road map but have IdM act as the primary data store for credentials, but they need people (manpower) who can help them develop it.

On Tue, May 21, 2019 at 4:14 AM Dirk Streubel via FreeIPA-users < freeipa-users@lists.fedorahosted.org> wrote:

Hello Lucas,

take a look at this thread:

https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahoste...

I have the same problem and the answer is no.

Maybe i'm wrong, this would be great.

Regards

Dirk _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahoste...

Yes, it would be awesome, as i use Freeipa as the responsible for handling user and groups information, it would be nice to trust this to AD ad i just want to use it to authentication.

What should be the workaround about this? sync users and groups to AD?

Thanks.

Actually, i think there should be someway to sync everything to AD programatically, as i have more than 10k users, 390 groups, 1400 linux hosts using sssd i can't migrate my environment to AD as primary data, than i should by MS cal licenses also. This is a mess, i'll look for a workaround somehow.

Thanks for the help guys.

On ti, 28 touko 2019, LUCAS GUILHERME DIEDRICH via FreeIPA-users wrote:

Does anyone know if this still valid?

https://docs.fedoraproject.org/en-US/Fedora/17/html/FreeIPA_Guide/managing-s...

You should really look into the official documentation.

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/htm... https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/htm...