Shouldn't the replica be seen as a master. I know that the trust does not have to be set up twice but should the samba configuration considering ad trust not be identical to the master? What about the trust-specific DNS entries?
Regards, Ronald -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project