Goal

• As an administrator, I want to resolve users and groups from a trusted RHEL IdM domain on IdM-enrolled clients in my RHEL IdM domain.
• As an administrator, I want to be able to use users and groups from a trusted RHEL IdM domain to define HBAC and SUDO rules in my RHEL IdM domain.

Acceptance Criteria

• After a trust between two RHEL IdM domains is established, SSSD on IdM server should be able to resolve known users and groups from the trusted RHEL IdM domain
• After a trust between two RHEL IdM domains is established, SSSD on IdM client should be able to resolve known users and groups from the trusted RHEL IdM domain
• After a trust between two RHEL IdM domains is established, trusted users can login to the IdM systems in the trusting domain, subject to HBAC rules
• After a trust between two RHEL IdM domains is established, trusted users can be subjected to SUDO rules in the trusting domain