'net ads join' to child domain fails when using -U admin@forestroot since Samba 4.5. Patch will follow.
Created attachment 15033 [details] patch for 4.10
Created attachment 15034 [details] patch for 4.9
Created attachment 15035 [details] patch for 4.8
Turns out, "net ads join" with -U FORESTROOT\admin and FO.REST.ROOT\admin was still failing, new patchset to follow soon.
Created attachment 15048 [details] patch for 4.10
Created attachment 15049 [details] patch for 4.9
Comment on attachment 15048 [details] patch for 4.10 LGTM
Comment on attachment 15049 [details] patch for 4.9 LGTM
Karolin, please add to 4.9 and 4.10. Thanks!
(In reply to Guenther Deschner from comment #9) Pushed to autobuild-v4-{10,9}-test.
(In reply to Karolin Seeger from comment #10) Pushed to both branches. Closing out bug report. Thanks!