samba - Dec 2012 - logon Samba workstation domain with Active Directory trustdom account issue

Hello samba list,

I'm close to be able to make this work but I just need a bit help. Here is
the situation:

- Windows 2008 R2 x64 Domain Controller: domain ES01

- Samba 3.4.3 Domain Controller:domain ES02

- Windows Seven Workstation (SSO4): on domain ES02

- Window Xp Workstation (SSO2): on domain ES01

We put a both side trust relationship and seems to work regarding command
"net rpc trustdom list".

*[root at localhost ~]# net rpc trustdom list*
*Enter root's password:*
*Trusted domains list:*
*
*
*ES01                S-1-5-21-1816646249-803782145-3669927669*
*
*
*Trusting domains list:*
*
*
*ES01                S-1-5-21-1816646249-803782145-3669927669*


Now, here is the issue:

We can logon domain ES01 with Windows account from Windows Xp Workstation
(normal use)
We can logon domain ES01 with Samba account from Windows Xp Workstation
(that's outgoing trust relationship's work)
We can logon domain ES02 with samba account (pretty normal use)
*We CAN'T logon domain ES02 with Windows Account (and unfortunatly,
that's
what we need to go further)*

I join you all my configuration files and SS4 workstation log while I try
to log with "tata" account from ES01 windows domain.

As you can see in smb.conf, we tried some custom tricks to make winbind
working...

Hope you will give us a fresh idea that we didn't think about.

Regards,
Romain

Hi,

I made a mistake, we have Samba 3.5.3.

Can somebody help ?

Regards,
Romain

2012/12/13 Romain <gromly at gmail.com>
> Hello samba list,
>
> I'm close to be able to make this work but I just need a bit help. Here
is
> the situation:
>
> - Windows 2008 R2 x64 Domain Controller: domain ES01
>
> - Samba 3.4.3 Domain Controller:domain ES02
>
> - Windows Seven Workstation (SSO4): on domain ES02
>
> - Window Xp Workstation (SSO2): on domain ES01
>
> We put a both side trust relationship and seems to work regarding command
> "net rpc trustdom list".
>
> *[root at localhost ~]# net rpc trustdom list*
> *Enter root's password:*
> *Trusted domains list:*
> *
> *
> *ES01                S-1-5-21-1816646249-803782145-3669927669*
> *
> *
> *Trusting domains list:*
> *
> *
> *ES01                S-1-5-21-1816646249-803782145-3669927669*
>
>
> Now, here is the issue:
>
> We can logon domain ES01 with Windows account from Windows Xp Workstation
> (normal use)
> We can logon domain ES01 with Samba account from Windows Xp Workstation
> (that's outgoing trust relationship's work)
> We can logon domain ES02 with samba account (pretty normal use)
> *We CAN'T logon domain ES02 with Windows Account (and unfortunatly,
> that's what we need to go further)*
>
> I join you all my configuration files and SS4 workstation log while I try
> to log with "tata" account from ES01 windows domain.
>
> As you can see in smb.conf, we tried some custom tricks to make winbind
> working...
>
> Hope you will give us a fresh idea that we didn't think about.
>
> Regards,
> Romain
>