Hi, for the entries stored on AD side, the compat tree creates entries on demand, and only when specific search filters are used (the same ones as posix-compliant systems would use) . You can find the list of supported search filters in RFC 2307 (rfc2307#section-5.2 <https://datatracker.ietf.org/doc/html/rfc2307#section-5.2>).
This means for instance that in order to find the AD user [email protected] on the compat tree, your search filter should look like (&(objectClass=posixAccount)([email protected])) Once this search filter has been used, the compat tree is populated and the entry can be found. It implies that if you run id [email protected], the compat tree will also be populated with the entry for [email protected]. Hope this clarifies, flo On Mon, Aug 23, 2021 at 9:08 AM iulian roman via FreeIPA-users < [email protected]> wrote: > I have tried with that one already, but unfortunately it does not resolve > the trusted AD users. > _______________________________________________ > FreeIPA-users mailing list -- [email protected] > To unsubscribe send an email to [email protected] > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/[email protected] > Do not reply to spam on the list, report it: > https://pagure.io/fedora-infrastructure >
_______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
