Joining SSSD to domains in different forests

Solution Verified - Updated -


  • SSSD trusted domain support currently only includes retrieving information from domains within the same Active Directory Resource Forest. That being said, SSSD can be configured to resolve users and groups from more than one AD forest by configuring a domain for each forest in the SSSD configuration file.

NOTE: If expecting to use only shortnames(user, instead of user@domain) then user/group objects will be resolved in order of the domain sections specified in sssd.conf


  • Red Hat Enterprise Linux 7

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In