Dania Ramirez Moya
2019-Jun-06  19:12 UTC
[Samba] Trust relationship error between workstation and primary domain
I have SambaDC, version 4.1.7, with Debian 7.5
My smb.conf
#########################
# Global parameters
[global]
        workgroup = TEST
        realm = test.lcl
        netbios name = ATLANTIS
        server role = active directory domain controller
        dns forwarder = 10.0.0.8
        allow dns updates =  nonsecure
        server services = -dns
        log level = 3
        host msdfs = yes
        tls enabled = yes
        tls keyfile = /usr/local/samba/private/tls/sambaKey.pem
        tls certfile = /usr/local/samba/private/tls/sambaCert.pem
        tls cafile         #tls crlfile         #tls dh params file         #
Auditsettings
full_audit:prefix = %u|%I|%S
full_audit:failure = connect
full_audit:success = connect disconnect opendir mkdir rmdir closedir open
close
                  read pread write pwrite sendfile rename unlink chmod
fchmod chown fchown chdir f
                                       truncate lock symlink readlink link
mknod realpath
full_audit:facility = local5
full_audit:priority = notice
[netlogon]
        path = /usr/local/samba/var/locks/sysvol/cecm.lcl/scripts
        read only = No
        browseable = No
[sysvol]
        path = /usr/local/samba/var/locks/sysvol
        read only = No
        browseable = No
[home]
        comment = para mapeo de carpetas de usuarios
        path = /salvas/samba
        read only  = no
        browseable = no
        vfs object = full_audit
[Instaladores]
        comment = para actualizaciones de antivirus
        path = /salvas/samba/actualizar
        read only  = no
        guest ok = yes
        vfs object = full_audit
My clients are workstation with windows 7 ultimate.
Best Regards
---------- Forwarded message ----------
From: Rowland penny <rpenny at samba.org>
To: samba <samba at lists.samba.org>
Cc:
Bcc:
Date: Mon, 3 Jun 2019 16:39:12 +0100
Subject: Re: [Samba] Trust relationship error between workstation and
primary domain
On 03/06/2019 16:31, Dania Ramirez Moya via samba wrote:> Hello list:
> I've had several errors of this type in different workstations. I am
> worried that every time there are more PCs with this problem. To fix it
> I've had rejoin to domain. It's something crash on DC?. Any help
will be
> grateful.
>
> Best regards
Sorry, but you haven't really given us anything to go on, what you have
given us is basically 'it doesn't work'
What is the DC, a Windows DC or a Samba DC
If a Windows DC, what version ?
If a Samba DC, what OS and what Samba version
What are the clients you are joining to domain ?
Please post the smb.conf files from any Samba computers.
Rowland
Rowland penny
2019-Jun-06  19:29 UTC
[Samba] Trust relationship error between workstation and primary domain
On 06/06/2019 20:12, Dania Ramirez Moya via samba wrote:> I have SambaDC, version 4.1.7, with Debian 7.5Can I suggest that you start upgrading everything, Debian 7 (Wheezy) is EOL Debian 8 (Jessie) is really EOL Before long Debian 9 (stretch) will be replaced with Buster Samba 4.1.7 is more than EOL Before long Windows 7 will be EOL There have been numerous improvements in Samba since 4.1.7 Can I suggest you upgrade to Debian 9 (stretch) and then once everything is working okay, use Louis's repo (found here: http://apt.van-belle.nl/) Main problem is your old versions, you will probably have to upgrade Wheezy to Jessie and then to Stretch. this will get you to Samba 4.5.16 (which is still EOL as far as Samba is concerned), you should then upgrade to 4.7.x using Louis's packages, then to 4.8.x, finally to 4.10.x, do not upgrade directly, there is a possible bug that may hit you if you do. Once you have upgraded and everything is working correctly, can I suggest you upgrade things on a regular basis. Rowland
Apparently Analagous Threads
- samba4 file server 4.3.0 authenticating against Samba4 4.1.7 AD DC
- Fwd: Fwd: samba_dnsupdate failed with RuntimeError: kinit for SMB4ECONOMIA$@ECONOMIA failed (Cannot contact any KDC for requested realm)
- problem with sessions
- Fwd: Samba 4 two DCs no matching UID/GID
- Fwd: Samba 4 two DCs no matching UID/GID