Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a MOSS 2007 server in an environment with both a two way cross forest trust and a two way external trust. Users in the forest-trusted forest happily show up in peoplepicker, but I get nothing out of the external trust.

I've tried a variety of different options for the peoplepicker-searchadforests property with no luck. SSP can import the profiles okay, and I've logged on as the service account and verified I can query users in the external domain.

Has anyone successfully configured sharepoint to query users via a two-way external trust? Is there something I'm missing?

UPDATE

The external trust has been changed to a forest trust and still has the same issue. Network Monitor is showing the LDAP query occurring against the remote DC and responses being returned, but there's still nothing showing up in peoplepicker.

share|improve this question

2 Answers 2

Yes, I have done it in the past. Had to set the peoplepicker-searchadforests even though you are not supposed to have to do that with two way trusts.

share|improve this answer
    
Thanks JD - I've been reduced to using Network Monitor on the WFE to make sure the LDAP queries are going through. peoplepicker-searchadforests seems to trigger queries to the correct servers, and I can see the LDAP response coming back, but Sharepoint appears to be ignoring it. –  Sam May 12 '11 at 1:43
up vote 0 down vote accepted

The hosts file on the WFE was edited to redirect DC queries to a local DC replica, and this worked. Unsure if the problem was due to incompatibility with the remote (Server 2003) DCs, or some issue with the VPN.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.