There are essentially two parts to this question. I have a FreeIPA domain
example.com with a few Fedora domain members. On each of these domain members, I'm able to sign in as a domain user without having to specify the domain name. For example, at the logon prompt I can enter "
username" instead of "
firstname.lastname@example.org". Once logged in, I'm able to use the
id command to verify that I've logged in as a domain user, as opposed to a local one. The convenience of this feature is undeniable, but I don't understand why it works. So my first question is, why does this work?
Secondly, I've recently added a new Fedora machine to the domain, but I discovered that when I try to log on to it, I must specify the domain name at the logon prompt. The question here becomes, what must I do to replicate the functionality of the existing machines?
A quick glance through the sssd.conf man page lead me to the "
default_domain_suffix" option, but adding this to my new server's sssd.conf did not introduce the desired functionality. Also, this option is not present in my old servers' sssd.conf to begin with.