Hi,
I have been trying to Make Debian Stretch work with Redhat [free]IPA server for a cross domain trust. I have RHEL7.5 clients, Ubuntu18LTS clients and Centos7.5 all fo which are using sssd 1.16. Debian stretch has 1.15 and fails on a cross forest environment while the other 3 all work over 100,000's of ssh login tests. Adding 1.16.3 from unstable fixes this issue so eith add a backport or upgrade Stretch to sssd 1.16 regards Steven Jones B.Eng (Hons) Technical Specialist - Linux RHCE Victoria University ITS, Level 8 Rankin Brown Building, Wellington, NZ 6012 0064 4 463 6272