I have 2 windows domains each in their respective forest. The forests are connect through a two-way forest-wide trust, the forest level is windows 2003
On the client side: client in forest A wants to get userinfo from a user in forest B but the client wants to query only DC's in forest A (without giving domain.A or domain.B as base DN)
Probably I don't understand ldap correctly so is this possible at all?
Is there a way to get user.domain.B info when querying a dc.domain.A when there is a two-way trust?
example ldap query: ldapsearch -x -h dc.domain.A -p 3268 -D dcadmin@domain.A -w password "(sAMAccountName=user.domain.B)"
On the client in forest A I can do following: ldapsearch on the dc in forest B asking info about a user in forest B (using global catalog) ldapsearch on the dc in forest A asking info about a user in forest A (using gc)
ldapsearch on the dc in forest A asking info about a user in forest B while specifying domain.B as baseDN. this gives a referral error: result: 10 referral text: 0000202B: RefErr: DSID-031006E0, data 0, 1 access points ref 1: domain.B
I don't want to specify the domain using so if I query the GC from domain.A asking about a user from domain.B it just shows nothing found.
thanks for any info.
