hi everyone,
I'm having IPA with one-way trust to AD and it all seems to be working okey.
What I would like to see is, a ssh which work off kerberos for AD's users logins, and also same for cifs clients to Samba.
I'm reading up on OK_AS_DELEGATE but still it's not clear to me whether separate services needs to be created(then configured) for that (as I do not see anything regarding ssh nor cifs after plain trust setup). I'm trying(hoping it's possible) to do it without web/gui.
Would you know of a doc/howto showing a process of getting sshd/samba to use kerberos for AD members?
many thanks, L.
freeipa-users@lists.fedorahosted.org