Hello, I just came across this document.
https://www.susecon.com/doc/2015/sessions/TUT19343.pdf If you look at page 8, that diagram imply that kerberos provider can only be used against active directory back end. However, this Redhat article below recommended the solution above for an IPA setup. See the third page from the bottom. http://people.redhat.com/steved/Summits/Summit13/Summit_Handout13.pdf Would anyone be able to comment about the inconsistency? Both articles come from a reliable source, so not sure how to make of it. Regards, William -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
