Error while trying to use AD for service acct Authentication from subdomain/child domain

hi

we setup subdomain/child domain , have developers trying authenticate using parent ad service account they're getting error - see below:

"the principalcontext, is:  000004dc: ldaperr: dsid-0c090752, comment: in order perform operation successful bind must completed on connection., data 0, v2580"

source sample used:

using system.directoryservices.accountmanagement;

namespace consoleapplication1
{
    class program
    {
        static void main(string[] args)
        {
            var domain = "parent.ad.dev.local:389";
            using (var pc = new principalcontext(contexttype.domain, domain, "dc=child,dc=parent,dc=local", contextoptions.simplebind, "svc account", "password svc acct"))
            {
                var user = userprincipal.findbyidentity(pc, "test.user1");
            }
        }
    }
}

service account on parent domain , test.user1 account on child.
works if change or remove child information , use parent information , use if parent domain not subdomain/child.

if have guidance on appreciated thank you...

hi,

does subdomain account need admin rights in order complete bind , continue?

>>>in opinion, yes, need admin rights run it.

is possible permission on service acct failing because it's not binding first?

>>>maybe

will work adding parent domain service acct subdomain group , making group part of subdomain admin group?

>>>i think ok.

best regards,

jay

---

please remember mark replies answers if , unmark them if provide no help.
if have feedback technet subscriber support, contact tnmff@microsoft.com.

Windows Server  >  Directory Services