Which command establishes a trust between a FreeIPA domain and an Active Directory domain?

Which command establishes a trust between a FreeIPA domain and an Active Directory domain?

• A. ipa trust-add --type ad addom --admin Administrator --password
• B. ipa ad join addom -U Administrator -w
• C. net ad ipajoin addom -U Administrator -p
• D. trustmanager add --domain ad: //addom --user Administrator -w

Answer: (A)

The command that establishes a trust between a FreeIPA domain and an Active Directory domain is indeed the one formatted as "ipa trust-add --type ad addom --admin Administrator --password." This command specifically uses the FreeIPA tools designed for managing trusts, indicating a well-defined mechanism to set up and manage a trust relationship. When using this command, the `--type ad` option clearly specifies the type of trust being created, which in this case is with Active Directory. The parameters provided, such as `--admin` for the administrative user and `--password`, define the credentials necessary to authenticate and create the trust. This fits perfectly with the intended functionality of establishing a secure and controlled relationship between the two domains, allowing for user and group synchronization and authentication across different directory services. The other options do not correctly achieve the task of establishing a trust in the context of FreeIPA and Active Directory. They either reference commands that do not align with FreeIPA's syntax or purpose, or they pertain to different functionalities, such as joining a system to a domain rather than establishing a trust relationship.

The command that establishes a trust between a FreeIPA domain and an Active Directory domain is indeed the one formatted as "ipa trust-add --type ad addom --admin Administrator --password." This command specifically uses the FreeIPA tools designed for managing trusts, indicating a well-defined mechanism to set up and manage a trust relationship.

When using this command, the --type ad option clearly specifies the type of trust being created, which in this case is with Active Directory. The parameters provided, such as --admin for the administrative user and --password, define the credentials necessary to authenticate and create the trust. This fits perfectly with the intended functionality of establishing a secure and controlled relationship between the two domains, allowing for user and group synchronization and authentication across different directory services.

The other options do not correctly achieve the task of establishing a trust in the context of FreeIPA and Active Directory. They either reference commands that do not align with FreeIPA's syntax or purpose, or they pertain to different functionalities, such as joining a system to a domain rather than establishing a trust relationship.