summaryrefslogtreecommitdiffstats
path: root/ipalib/plugins/trust.py
diff options
context:
space:
mode:
Diffstat (limited to 'ipalib/plugins/trust.py')
-rw-r--r--ipalib/plugins/trust.py8
1 files changed, 8 insertions, 0 deletions
diff --git a/ipalib/plugins/trust.py b/ipalib/plugins/trust.py
index 35e75d8ed..4302c3ac3 100644
--- a/ipalib/plugins/trust.py
+++ b/ipalib/plugins/trust.py
@@ -670,6 +670,14 @@ sides.
error=_('only "ad" is supported')
)
+ # Detect IPA-AD domain clash
+ if self.api.env.domain.lower() == trusted_realm_domain.lower():
+ raise errors.ValidationError(
+ name=_('domain'),
+ error=_('Cannot establish a trust to AD deployed in the same '
+ 'domain as IPA. Such setup is not supported.')
+ )
+
# If domain name and realm does not match, IPA server is not be able
# to establish trust with Active Directory.