SSSD / sssd

#4084 Unable to join root AD domain with AD child domain account
Closed: wontfix by pbrezina. Opened by bpf.

Closed: wontfix
Reopen Issue

Unable to join an Active Directory root domain while supplying child domain credentials in any manner:

  • NETBIOS\samaccountname
  • samaccountname@CHILD.ROOT.COM

Joining the directory with root domain account works and enumeration works as expected thereafter. Changing the child domain account UPN to that of the root domain (from CHILD.ROOT.COM to ROOT.COM) also does not work.

Child domain account is provisioned access via ACL within Active Directory on both default join container as well as testing with specific OU DN. Functionality exists on Microsoft Windows clients from XP -> 10

Hi,

which toll are you using to join the domain, adcli or net ads join or something different? Can you send the complete command line with the debug output of the tool (add -v for adcli or -d 10 for net ads join).

bye,
Sumit

No activity in this ticket -> candidate to close

Metadata Update from @thalman:
- Issue tagged with: Canditate to close

Thank you for taking time to submit this request for SSSD. Unfortunately this issue was not given priority and the team lacks the capacity to work on it at this time.

Given that we are unable to fulfill this request I am closing the issue as wontfix.

If the issue still persist on recent SSSD you can request re-consideration of this decision by reopening this issue. Please provide additional technical details about its importance to you.

Thank you for understanding.

Metadata Update from @pbrezina:
- Issue close_status updated to: wontfix
- Issue status updated to: Closed (was: Open)

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/5048

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.
Metadata
None

Candidate to close

None
None
High
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.