[SSSD-users] cross domain authentication

Hi Team, in a previous post i setup SSSD to successfully integrate two forests The problem is: Forest A has many Subdomains, in sssd.conf i configured the subdomain this machine is joined to i.e. subdomainA.ForestA.COM whenever i try to login using a user from SUBDOMAINB on FORESTA i get this error "kdc policy rejects transited path" everything in the log seems normal except only this error and then login is denied. in My krb5.conf I only configured the default domain for SUBDOMAINA.FORESTA.COM I didn't find this error when i was trying to search the list for anyone got this before. what could be the problem here? i'm using the latest sssd on RHEL 6.6 Thanks Karim