How to allow trusted AD users to login with Secondary UPN suffix on IPA server and IPA client?

Solution Verified - Updated 2025-05-19T06:43:54+00:00 -

Issue

AD trust is created with xyz.com. However the primary suffix on AD server side is set as abc.tc.examle instaed of xyz.com. How to allow AD users to login in this format as well - # ssh @abc.tc.example

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Here are the common uses of Markdown.

Code blocks

~~~
Code surrounded in tildes is easier to read
~~~

Links/URLs

[Red Hat Customer Portal](https://access.redhat.com)