freeipa

#6021 External trust with root domain is transitive
Closed: Fixed Opened by lryznaro.

Closed: Fixed
Reopen Issue

Setup: available ad.domain with child.ad.domain, install IPA

How to reproduce:
1. ipa trust-add --type=ad ad.domain --admin Administrator --password --range-type ipa-ad-trust --external
2. ipa trustdomain-find ad.domain

Expected result: trustdomain-find command should return only ad.domain, because external trust is non-transitive

Actual result: trustdomain-find command returns both ad.domain and child.ad.domain

Linked to Bugzilla bug: https://bugzilla.redhat.com/show_bug.cgi?id=1365546 (Red Hat Enterprise Linux 7)

master:

  • 9b3819ea94d3fd8e866d38ccba2051446d057ecd trust: make sure external trust topology is correctly rendered

Metadata Update from @lryznaro:
- Issue assigned to abbra
- Issue set to the milestone: FreeIPA 4.4.1
Metadata
None
None
None
Low
defect
Trusts
0
yes
lryznaro
https://git.fedorahosted.org/cgit/freeipa.git/tree/ipatests/test_integration/test_trust.py#n343
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.