[andrew.meyer@freeipa01 ~]$ sudo ipa group-add-member ad_admins_external --external 'MEYER-AD\Domain Admins'
[member user]:
[member group]:
Group name: ad_admins_external
Description: ad.meyer.local admins external map
External member: S-1-5-21-2117027177-2554619188-4034396183-512, S-1-5-21-2117027177-2554619188-4034396183-1106
Member users: andrew.meyer
Member groups: ad_admins
Member of groups: ad_admins, ipausers
Indirect Member groups: ad_admins_external
Failed members:
member user:
member group: MEYER-AD\Domain Admins: invalid 'trusted domain object': no trusted domain matched the specified flat name
-------------------------
Number of members added 0
-------------------------
[andrew.meyer@freeipa01 ~]$