Up to now the LSA server on a DC only support some wellknown sids, the builtin domain and the account domain, but not the translation views detailed in MS-LSAT 22.214.171.124 which are required to support trusts.
Created attachment 13993 [details]
Patch for 4.8 cherry-picked from master
Pushed to autobuild-v4-8-test.
Pushed to v4-8-test.
Closing out bug report.