https://bugzilla.suse.com/show_bug.cgi?id=1196224 https://bugzilla.suse.com/show_bug.cgi?id=1196224#c15 Samuel Cabrero changed: What |Removed |Added ---------------------------------------------------------------------------- Severity|Critical |Normal --- Comment #15 from Samuel Cabrero --- Andreas, could you please attach the full winbindd child logs at log level 10 to check how winbindd acquires the initial credentials? I have deployed a similar environment and in my case the credentials cache immediately after login contains a ticket for 'krbtgt/ACHILD.AFOREST.AD@AFOREST.AD'. Did you disable enterprise principals due to comment #2? They should be enabled. What kind of AD trust exists between the parent and child domains? Is it a standard parent-child trust (two-way and transitive)? Also, what is the output of:

$ wbinfo --trusted-domains --verbose

-- You are receiving this mail because: You are on the CC list for the bug.