MS Client Referrals

[Shawn Emery]

Folks,

I'm trying to configure server-side client referralsupport with no
success. I've configured two AD domains example.com and example1.com
with the following attributes:

example1.com:
OS: w2k8 R2
Two-way trust of example.com
Trust type: external
Transitivity: no
UPN suffix: example.com
Authentication: domain-wide

example.com:
OS: w2k3
Two-way trust of example1.com
Trust type: external
Transitivity: no
UPN suffix: example1.com
Authentication: domain-wide

RFC 6806 states that if the client can not be found in the global name
service then return principal unknown else return wrong realm if the
canonicalize KDC option is set. From network trace output I see that the
client is setting the canonicalize flag, but the principal unknown error
code is returned instead of wrong realm. Can someone please verify my
configuration above or provide input on how to diagnose this further?

Regards,

Shawn.
--