I have active directory as dc1.ad.domainname and dc2.ad.domainname
I also have freeipa at ipa1.ipa.domainname and ipa2.ipa.domainname
both of them seem to work fine independently, I then created a trust and set smb min and max to 2. from the server 2k12 side  the trust validates and from the ipa side i can kinit user@ad.domainname but thats where the working ends. I can not login to webinterface as ad it says my session has expired and to relogin. wbinfo status shows ad as offline
both ldap dns records for ipa and ad look correct
[root@ipa1 ~]# wbinfo -n 'AD\Domain Admins'
failed to call wbcLookupName: WBC_ERR_DOMAIN_NOT_FOUND
Could not lookup name AD\Domain Admins


[root@ipa1 ~]# ipa --version
VERSION: 4.5.0, API_VERSION: 2.228

[root@ipa1 ~]# sssd --version
1.15.2
 attached below is the log.wd.ad
I am happy to provide any more information and thank anyone who can help me solve this, have been beaten up for a bit on it.

https://gist.github.com/anonymous/36d1a48cf1a1116b116f9ce911d91d8a