On ti, 23 heinä 2019, Ronald Wimmer via FreeIPA-users wrote:
Unfortunately, when I try the following on an affected windows machine
it does not work:
C:\> netdom trust linux.mydomain.at /domain:ad.mydomain.at
/EnableTGTDelegation:
Yes /verbose
Establishing a session with \\ipa1.linux.mydomain.at
Reading LSA domain policy information
Deleting the session with \\ipa1.linux.mydomain.at
Access is denied.
The command failed to complete successfully.
Am I using netdom the right way? What are your thoughts?
I think it should be the
other way around, e.g.
netdom trust ad.mydomain.at /domain:linux.mydomain.at /enabletgtdelegation:Yes /verbose
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland