Hi all,

we have a problem with our dsfw domain login since we was forced to set up a edir to ad sync, the problem is when users that has been synced to the 2008r2 ad is trying to do a domain login to dsfw domain they are unable to login with error message "bad user name or password".
If trying to do a kinit user@dsfwdomain.ad gives throws error "kinit(v5): Client's entry in database has expired while getting initial credentials"
I guess that the sync is overwriting something in edir like a guid or something.
Any suggestions?

Sles10sp4 oes2sp3