#Install replica using --add-agents options ipa-replica-install -w *** -n pytest.test -r PYTEST.TEST -P admin --setup-dns --forwarder= --add-agents [root@master ~]# ipa topologysegment-find Suffix name: domain ----------------- 1 segment matched ----------------- Segment name: master.pytest.test-to-replica3.pytest.test Left node: master.pytest.test Right node: replica3.pytest.test Connectivity: both ---------------------------- Number of entries returned 1 ---------------------------- [root@master ~]# ipa server-show Server name: replica3.pytest.test Server name: replica3.pytest.test Managed suffixes: domain Min domain level: 0 Max domain level: 1 Enabled server roles: DNS server, NTP server [root@master ~]# ipa server-show Server name: master.pytest.test Server name: master.pytest.test Managed suffixes: domain, ca Min domain level: 0 Max domain level: 1 Enabled server roles: CA server, DNS server, NTP server, AD trust agent, AD trust controller [root@master ~]# ipa trust-add --two-way=true Realm name: pne.qe Active Directory domain administrator: administrator Active Directory domain administrator's password: ----------------------------------------------- Added Active Directory trust for realm "pne.qe" ----------------------------------------------- Realm name: pne.qe Domain NetBIOS name: PNE Domain Security Identifier: S-1-5-21-2202318585-426110948-4011710778 Trust direction: Two-way trust Trust type: Active Directory domain Trust status: Established and verified [root@master ~]# id aduser1@pne.qe uid=1261605281(aduser1@pne.qe) gid=1261605281(aduser1@pne.qe) groups=1261605281(aduser1@pne.qe),1261602139(adunigroup1@pne.qe),1261601559(adgroup1@pne.qe),1261601629(adgroup2@pne.qe),1261600513(domain users@pne.qe) [root@replica3 ~]# id aduser1@pne.qe id: aduser1@pne.qe: no such user