On 23.07.19 16:06, Ronald Wimmer via FreeIPA-users wrote:
On 23.07.19 16:03, Alexander Bokovoy wrote:
> On ti, 23 heinä 2019, Ronald Wimmer wrote:
>> On 23.07.19 15:19, Alexander Bokovoy wrote:
>>> netdom trust ad.mydomain.at /domain:linux.mydomain.at
>>> /enabletgtdelegation:Yes /verbose
>>
>> I think you are right. This way a domain controller is contacted.
>> But still, I get an "Access is denied.". Presumably I would need an
>> AD admin to issue that particular command...
>
> Yes, you need credentials of a someone who can modify forest trusts.
>
I delegated that task to our AD guys. We will see if the issue is
resolved afterwards.
After issuing the netdom command TGT delegation is working again. Thank
you very much for your valuable input Mr. Bokovoy!
Cheers,
Ronald