Skip to content

SSH login for users, which belong to different AD domains in different trusted forests. #8686

@idealissst

Description

@idealissst

What I try to achieve is: I want users from second active domain be able to login to the same linux server.

In my specific situation, I have 2 domains, which is located in different forests and have mutual trust between them.
I succesfully configured single active directory domain and was able to configure mapping to specific groups. I thougt allowing the user from different(second) domain would be as easy as adding this user to the group I map(from first domain).
However, I wasn't able to login. After that I tried to add manual configurations to sssd so it would be able to discover second domain, but I failed.

Maybe somebody could provide a guide/reference on how should such configuration look like? This would really help me with my issue.

EDIT: For context, I use AD 2025.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions