6.7. Enabling Web UI login for Active Directory users
To enable Web UI login for Active Directory users, define an ID override for each Active Directory user in the Default Trust View.
Procedure
To define an ID override for
ad_user@ad.example.com:[admin@server ~]$ ipa idoverrideuser-add 'Default Trust View' ad_user@ad.example.com