Bug 998502

Summary:	Transitive Trusts with Active Directory support for FreeIPA
Product:	[Fedora] Fedora	Reporter:	Jaroslav Reznik <jreznik>
Component:	Changes Tracking	Assignee:	Jaroslav Reznik <jreznik>
Status:	CLOSED CURRENTRELEASE	QA Contact:
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	20	CC:	abokovoy
Target Milestone:	---	Keywords:	Tracking
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:
Clones:	1008209 1008210 (view as bug list)		Environment:
Last Closed:	2013-12-18 14:00:29 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1008209, 1008210

Description Jaroslav Reznik 2013-08-19 13:03:54 UTC

This is a tracking bug for Change: Transitive Trusts with Active Directory support for FreeIPA
For more details, see: http://fedoraproject.org//wiki/Changes/IPAv3TransitiveTrusts

FreeIPA will support transitive trusts with Active Directory

Comment 1 Alexander Bokovoy 2013-08-27 03:20:18 UTC

I'm on vacation and will only be able to work fully on the feature starting September.

Comment 2 Jaroslav Reznik 2013-09-17 11:34:09 UTC

Alexander, 
what's the current state of this Change?

Comment 3 Alexander Bokovoy 2013-09-17 11:45:16 UTC

Couple bugs identified and being fixed on FreeIPA and SSSD sides. Patches for FreeIPA side are on review on the upstream mailing list.

We are scoping out Global Catalog parts (i.e. log-in as IPA user to Active Directory machines) due to time shortage before F20 release. Transitive trusts for complex AD forests accessing IPA resources will be supported.

Comment 4 Jaroslav Reznik 2013-10-11 08:42:14 UTC

This message is a reminder that Fedora 20 Accepted Changes 100%
Completed Deadline is on 2013-10-15 [1].

All Accepted Changes has to be code complete and ready to be
validated in the Beta release (optionally by Fedora QA). Required
bug state at this point is ON_QA.

As for several System Wide Changes, Beta Change Deadline is a
point of contingency plan, all incomplete Changes will be 
reported to FESCo for 2013-10-16 meeting. In case of any
questions, don't hesitate to ask Wrangler (jreznik).

[1] https://fedoraproject.org/wiki/Releases/20/Schedule

Comment 5 Alexander Bokovoy 2013-10-11 08:57:08 UTC

Since FreeIPA 3.3.2 was released last week and is now available in Fedora 20, moving the bug to ON_QA status.

As stated in the comment 3, feature was reduced to "Access to FreeIPA resources from multi-domain Active Directory forests".

Comment 6 Jaroslav Reznik 2013-12-18 14:00:29 UTC

Closing this bug as this Change was delivered in Fedora 20 release. Please, reopen in case of any issues you encounter regarding this Change completion.