Hello everyone, an update on this, what I have tried so far:
1 I create a replica without ad-trust, in an attempt to create a new trust, but it fails with internal errors, as shown in the first post.
2 Attempt, this time i create a new ipa server 4.9.6, this time trust succeeded, but just as before any replica attempt show the following "Replica DNS records could not be added on master: Insufficient access: Insufficient 'add' privilege to add the entry"
The replica always succeed but none of them can see/add trusted object, only the SID is show like this S-1-5-21-1928197126-2662744289-614098342-1854
Any idea where the problem could it be? or how to debug this further. Thanks in advance