Alternative UPN & Forest Trust.

Question

Hi all!
I have 3 domain:
main.local
child.main.local (child of main.local)
test.local (new forest)
In "main.local", under Active Directory Site & Services, i defined 2 UPN:
"mycorp.com" & "child.mycorp.com"
I used "mycorp.com" as alternative upn for users in "main.local"
Then I used "child.mycorp.com" as alternarive upn for users in "child.main.local"
Now I'd like to trust "main.local" with "test.local" and use users in "*.main.local" with their alternative upn.
Example:
[email protected] should login in test.local with it's upn.
[email protected] shoud login in test.local with it's upn.
* 02/26/2014 correction.
I made a Forest Transitive Trust with one direction and all routed UPN suffix are  enable and don't have conflict, but I can't logon using *.mycorp.com Alternative UPN.
Where I had my mistake?

Answer 1

Hi, Vivian,
I'm sorry, I should post my question after sleeping...
Just few hints.
I'm working with Windows Server 2012 R2 and it's a lab/test environment.
I read both articles you link about hundred time in last few days and all my configuration are like described.
I'l try to recap my situation and be more clear:
Forest A:
Domain: main.local (Parent)
Alternarive UPN: mycorp.com, child.mycorp.com
Domain: child.main.local (Child)
Alternative UPN: *came from parent domain"
Forest B:
Domain: test.local
Alternarive UPN: none.
Transitive Forest Trust between A & B Onedirection (Users in A can login/authenticate in B).
user1 is in Forest A/main.local
user2 is in Forest A/child.main.local
If I try to logon in "Forest B/test.local"as: MAIN\user1 or [email protected] everything it's ok and I can logon.
If I try to logon as: [email protected] it return me that user do not exist or password is wrong.
If I try to logon as: [email protected] it return me that user do not exist or password is wrong.
In "Active Directory Domain & Trust" under the propertie of the trust, under "Name Suffix Routing":
*.main.local (Enabled)
*.mycorp.com (Enabled)
But as I wrote, I can't logon using "*.mycorp.com" as suffix in truster domain, only "*.main.local" or "DOMAIN\user".