Hi Team,
 
in a previous post i setup SSSD to successfully integrate two forests
 
The problem is:
Forest A has many Subdomains, in sssd.conf i configured the subdomain this machine is joined to i.e. subdomainA.ForestA.COM
 
whenever i try to login using a user from SUBDOMAINB on FORESTA i get this error
"kdc policy rejects transited path"
 
everything in the log seems normal except only this error and then login is denied.
 
in My krb5.conf I only configured the default domain for SUBDOMAINA.FORESTA.COM
 
I didn't find this error when i was trying to search the list for anyone got this before.
what could be the problem here?
 
i'm using the latest sssd on RHEL 6.6
 
Thanks
Karim