Cannot see POSIX attributes from Active Directory via IPA-AD trust

Solution Verified - Updated -

Issue

We are experiencing problems with LDAP access from IPA servers in IPA-AD scenario with one-way trust (Win 2012). Trust itself works fine. I can do kinit with user@EXAMPLE.TT , I can run id and getent passwd user@example.tt and I can use user@example.tt for ssh.

I have set attributes in AD for user@EXAMPLE.TT and they are available in the Global Catalog service. Problem is, that I am not getting uid from AD but SSSD assigns a new one from the ID range associated with the trust.

Environment

RHEL 7.2 IDM configuration with trust to Active Directory established

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.