9.9. Creating a trust agent

Procedure

1. On an existing trust controller, run the ipa-adtrust-install --add-agents command:

   [root@existing_trust_controller]# ipa-adtrust-install --add-agents

   The command starts an interactive configuration session and prompts you for the information required to set up the agent.

2. Restart the IdM service on the trust agent.

   [root@new_trust_agent]# ipactl restart

3. Remove all entries from the SSSD cache on the trust agent:

   [root@new_trust_agent]# sssctl cache-remove

4. Verify that the replica has the AD trust agent role installed:.

   [root@existing_trust_controller]# ipa server-show new_replica.idm.example.com
   ...
   Enabled server roles: CA server, NTP server, AD trust agent