[Freeipa-users] cross-forest trust, client system cannot id AD users.