RESOLUTION 1:
Add keytab entries for services in both domains to the same keytab file, that would take care of accepting the credentials.
RESOLUTION 2:
Go to Active Directory, find the account created by setup-mod_auth_vas, click "security", add "crossforest_domain\Domain Users", and check "Allow to Authenticate".
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center