Hello,
I am working on setting up FreeIPA with AD integration and seem to be running into an issue.  Its possible that I am also doing something wrong.

I am setting it up to talk to MS Windows Server 2012r2.  Following directions on https://www.freeipa.org/page/Active_Directory_trust_setup 

I have not edited the /etc/krb5.conf ( I figured that needed to happen on the client machines.) 

I am actually at this step:
https://www.freeipa.org/page/Active_Directory_trust_setup#Create_external_and_POSIX_groups_for_trusted_domain_users

I am getting the following error:

[andrew.meyer@freeipa01 ~]$ sudo ipa group-add-member ad_admins_external --external 'MEYER-AD\Domain Admins'
[member user]: 
[member group]: 
  Group name: ad_admins_external
  Description: ad.meyer.local admins external map
  External member: S-1-5-21-2117027177-2554619188-4034396183-512, S-1-5-21-2117027177-2554619188-4034396183-1106
  Member users: andrew.meyer
  Member groups: ad_admins
  Member of groups: ad_admins, ipausers
  Indirect Member groups: ad_admins_external
  Failed members: 
    member user: 
    member group: MEYER-AD\Domain Admins: invalid 'trusted domain object': no trusted domain matched the specified flat name
-------------------------
Number of members added 0
-------------------------
[andrew.meyer@freeipa01 ~]$ 

What am I doing wrong?