Domain trust between two different domains with same alias name

Question

Domain trust between two different domains with same alias name

Arunkumar K 0

There are two domains domaina.local and domainb.local but the domain alias name for both domain is testabc.

Now wanted to create a trust between these tow domains.

Need your valuable suggestion whether this is feasible or not.

1 answer

Your answer

Answer 1

Thameur-BOURBITA 36,261 Moderator

Hi @Arunkumar K •

It's not recommended because the kerberos authentication cross forest will failed because due a conflict on name suffix routing applied on the forest trust.

Name Suffixes Routing controls routing of authentication traffic. When an user account attempts to authenticate using kerberos protocol on a service installed in other trusted forest, the Name Suffix Route applied on the forest trust is used to direct authentication requests to the trusted forest in order to establich kerberos authentification.

FIGURE 1-14

Name Suffix Routing

I recommend you to avoid to use the same DNS suffix between two trusted forests.

Please don't forget to accept helpful answer

Arunkumar K 0 Reputation points

2023-12-14T14:24:00.1533333+00:00

Hi Thameur-BOURBITA, Thank for your quick answer but the thing is domain suffix is different but the domain prefix is same. In both domaina and domainb the prefix is test. Test\user1. If both domains are having same domain prefix is it possible to create trust.
Thameur-BOURBITA 36,261 Reputation points Moderator

2023-12-14T14:35:36.6566667+00:00

@Arunkumar K •

You can create the trust if the DNS domain suffix is different. But if you keep the same prefix test\user on both domain , a user from domaina try to acces to access domainb , he will not be able to be routing to domainb. In this case you can create a additional suffix for each domain , and ask user use UPN user1@domaina.local instead of test\user1

Please don't forget to accept helpful answer
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Thameur-BOURBITA 36,261 Reputation points Moderator

2023-12-21T09:55:41.8966667+00:00

Hi @Arunkumar K •

Just checking if there is any progress.

Please don't forget to accept helpful answer
Thameur-BOURBITA 36,261 Reputation points Moderator

2023-12-26T10:18:11.4133333+00:00

Hi @Arunkumar K •

Just checking if there is any progress.

Please don't forget to accept helpful answer and close this thread

Share via

Domain trust between two different domains with same alias name

1 answer

Your answer