KDC not works in configuration with trusted domain

[Rowland Penny]

On Wed, 11 Oct 2017 00:18:33 +0400
Evgeny Sinelnikov <sin at altlinux.org> wrote:

> 
> Something interesting - found ldb request to reproduce this problem
> without server:
> 
> [root at samba-dc ~]# ldbsearch -H
> /var/lib/samba/private/sam.ldb.d/CN\=CONFIGURATION\,DC\=ADM72\,DC\=LOCAL.ldb
> -b CN=Partitions,CN=Configuration,DC=adm72,DC=local
> '(&(objectClass=crossRef)(systemFlags:1.2.840.113556.1.4.803:=2))'
> nCName systemFlags -d0

I repeat, as you seem to have missed it, do not search in or alter
anything in sam.ldb.d, only search in sam.ldb. If a record isn't found
and you think it should exist, use '--cross-ncs' with the ldb tool.

Rowland