50.3. IdM 서버에서 ID 보기에 대한 도메인 확인 순서 설정

1. AD(Active Directory) 하위 도메인1.ad.example.com
2. AD root 도메인 ad.example.com
3. IdM domain idm.example.com

절차

1. domain- resolution -order 옵션을 설정하여 ID 보기를 만듭니다.

   [user@server ~]$ ipa idview-add ADsubdomain1_first --desc "ID view for resolving AD subdomain1 first on client1.idm.example.com" --domain-resolution-order subdomain1.ad.example.com:ad.example.com:idm.example.com
   ---------------------------------
   Added ID View "ADsubdomain1_first"
   ---------------------------------
   ID View Name: ADsubdomain1_first
   Description: ID view for resolving AD subdomain1 first on client1.idm.example.com
   Domain Resolution Order: subdomain1.ad.example.com:ad.example.com:idm.example.com

   Copy to Clipboard Toggle word wrap

2. IdM 호스트에 ID 보기를 적용합니다.

   [user@server ~]$ ipa idview-apply ADsubdomain1_first --hosts client1.idm.example.com
   -----------------------------------
   Applied ID View "ADsubdomain1_first"
   -----------------------------------
     hosts: client1.idm.example.com
   ---------------------------------------------
   Number of hosts the ID View was applied to: 1
   ---------------------------------------------

   Copy to Clipboard Toggle word wrap

검증

1. ID 보기의 세부 정보를 표시합니다.

   [user@server ~]$ ipa idview-show ADsubdomain1_first --show-hosts
     ID View Name: ADsubdomain1_first
     Description: ID view for resolving AD subdomain1 first on client1.idm.example.com
     Hosts the view applies to: client1.idm.example.com
     Domain resolution order: subdomain1.ad.example.com:ad.example.com:idm.example.com

   Copy to Clipboard Toggle word wrap

2. subdomain1.ad.example.com 도메인에서 짧은 이름만 사용하여 사용자에 대한 사용자 정보를 검색할 수 있는지 확인합니다.

   [root@client1 ~]# id <user_from_subdomain1>
   uid=1916901106(user_from_subdomain1) gid=1916900513(domain users) groups=1916900513(domain users)

   Copy to Clipboard Toggle word wrap