49.2. Setting the global domain resolution order on an IdM server

Prerequisites

• You have configured a trust with an AD environment.

Procedure

• Use the ipa config-mod --domain-resolution-order command to list the domains to be searched in your preferred order. Separate the domains with a colon (:).

  [user@server ~]$ ipa config-mod --domain-resolution-order='ad.example.com:subdomain1.ad.example.com:idm.example.com'
  Maximum username length: 32
  Home directory base: /home
  ...
    Domain Resolution Order: ad.example.com:subdomain1.ad.example.com:idm.example.com
  ...

Verification

• Verify you can retrieve user information for a user from the ad.example.com domain using only a short name.

  [root@client ~]# id <ad_username>
  uid=1916901102(ad_username) gid=1916900513(domain users) groups=1916900513(domain users)