AACC on a trusted domain

[sfitzg]

Has anybody implemented AACC where the AACC servers are on a trusted domain rather than on the same domain as the users?

I am looking for any tricks, tips or other information on how to configure the agents in an AACC SIP environment. My problem is that when trying to add the domain account for the user, CCMA returns an error returning the domain users. Logs say the domain server is not available even though it would appear a full two-way trust exists.

Specifically I am looking for fireall ports that need to be open between the domains and any specific administration requirements for this type of environment.

[sfitzg]

Got it all working once the customer had opened the appropriate firewall ports for LDAP an kerberos and provided my login with rights to browse AD. A bit of trial and error as the AACC domain is firewalled from the customers domain but got there in the end.