samba - Feb 2002 - Giving up on authentication to trusted domain

I've pretty much decided that this doesn't work, but I'd like to
take this last opportunity to find out if ANYONE has a working
configuration like mine:

Samba server: v2.2.3a running on a RedHat Linux 7.2 system, plus
Winbind. The Samba server is in the PHS-SC domain, and can be
browsed from "My Network Places".

User "cbenson" has an NT account in the FHCRC domain and a Linux
account on the Samba server. User cbenson is logged in at a W2k
Pro system, authenticated into the FHCRC domain, and is able to
mount shares from NT servers belonging to the PHS-SC domain
without providing a user ID and password.

User cbenson cannot under any circumstances mount shares from
the Samba server in the PHS-SC domain, even after giving a user
ID and password. Authentication always fails.

However, when logged in at some other Linux system, I can use
smbclient to access the shares as usual. Samba itself works fine.

I would like to verify that authentication to a trusted domain
simply DOES NOT WORK in Samba v2.2.3a, even with Winbind. I'll
gladly provide my smb.conf and any other info to anyone who wants
to take a look at this.

Otherwise I'll drop it until Samba v3 or whatever.

-- 
Carl Benson                |  cbenson@fhcrc.org
UNIX System Administrator  |  Telephone: (206) 667-4862
Fred Hutchinson Cancer     |  Fax:       (206) 667-6869
   Research Center         |  Opinions expressed are my own.

Carl Benson wrote:
> 
> I've pretty much decided that this doesn't work, but I'd like
to
> take this last opportunity to find out if ANYONE has a working
> configuration like mine:
> 
> Samba server: v2.2.3a running on a RedHat Linux 7.2 system, plus
> Winbind. The Samba server is in the PHS-SC domain, and can be
> browsed from "My Network Places".
> 
> User "cbenson" has an NT account in the FHCRC domain and a Linux
> account on the Samba server. User cbenson is logged in at a W2k
> Pro system, authenticated into the FHCRC domain, and is able to
> mount shares from NT servers belonging to the PHS-SC domain
> without providing a user ID and password.
> 
> User cbenson cannot under any circumstances mount shares from
> the Samba server in the PHS-SC domain, even after giving a user
> ID and password. Authentication always fails.
> 
> However, when logged in at some other Linux system, I can use
> smbclient to access the shares as usual. Samba itself works fine.
> 
> I would like to verify that authentication to a trusted domain
> simply DOES NOT WORK in Samba v2.2.3a, even with Winbind. I'll
> gladly provide my smb.conf and any other info to anyone who wants
> to take a look at this.
This should (and does) work.  It depends a bit on exactly how winbind is
setup.  Your logfiles might give a better indication.  Also, if you want
to run Samba 3.0alpha you might find it it a bit easier to follow whats
actually going wrong.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet@pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet@samba.org
Student Network Administrator, Hawker College   abartlet@hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net