I can see all the users (domain and local) with getent passwd
But the login from the cli of another linux server works only with local users:
Incidentally, my Windows client is not a domain member. Because devices that cannot be a domain member should also have access (my work computer for example), access must also work via user name and password. I will dig a little deeper and maybe ask in a FreeIPA forum. SMB and FreeIPA seems to be a special thing anyway. If I find out anything, I'll post here again.