ipa trust-add fails to setup trust between AD and IPA with "IPA Error 4016"

Solution Unverified - Updated -


  • When creating an AD Trust the following error occurs in the GUI:
IPA Error 4016: RemoteRetrieveError
CIFS server communication error: code "3221225473", message "{Operation Failed} The requested operation was unsuccessful." (both may be "None")
  • The following error appears in /var/log/httpd/error_logwhen debug is turned on:
smb_krb5_trace_cb: [23886] 1623158790.390958: Received error from KDC: -1765328370/KDC has no support for encryption type


  • Red Hat Enterprise Linux 8.4
  • IPA/IdM
  • Active Directory

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content