We have managed to establish a FreeIPA / Windows 2003R2. However domain and forest functional level has to be set to max on that platform which i believe is 2003 anyways. I know when I was first attempting the trusts, on a new 2003r2 DC and the forest functional level was set to 2000, the trust wouldn't establish and with IPA and the process would die.
Everything "seems" to be working so far, so I would also like to know as well if 2008 is a requirement 100%? Thanks Aly On Wed, Jun 19, 2013 at 8:50 AM, Brian Lee <[email protected]> wrote: > Has anyone successfully set up trusts between 2003 R2 and FreeIPA? I > noticed the documentation mentions 2008 R2 as a prerequisite. Unfortunately > our organization has not completed the migration to 2008 R2 yet. I know, > we're a little behind the curve on that, but fortunately Windows servers > aren't my responsibility ;-) > > If the Kerberos realms are separate between Active Directory and FreeIPA, > why does the domain controller need to be Windows 2008 R2 for an external > trust? From what I understand, there is no difference in an external trust > in Windows NT4, Active Directory 2003, 2008 R2 or Windows 2012. > > Thanks in advance for any input or experiences with this configuration! > > _______________________________________________ > Freeipa-users mailing list > [email protected] > https://www.redhat.com/mailman/listinfo/freeipa-users >
_______________________________________________ Freeipa-users mailing list [email protected] https://www.redhat.com/mailman/listinfo/freeipa-users
