Up to now the LSA server on a DC only support some wellknown sids, the builtin domain and the account domain, but not the translation views detailed in MS-LSAT 3.1.1.1 which are required to support trusts.
Created attachment 13993 [details] Patch for 4.8 cherry-picked from master
Pushed to autobuild-v4-8-test.
Pushed to v4-8-test. Closing out bug report. Thanks!