thr3ads.net - samba - [Samba] Trust relationship failed... [Mar 2004]

If this information is useful, please help other people find it:
Share via:

Mike Cisar

2004-Mar-22 23:00 UTC

[Samba] Trust relationship failed...

I'm hoping someone can give me a hand in figuring out this problem, I have
seen several other similar problems in searching, but nothing that exactly
matches what I am seeing here.  

I have recently migrated a client from a Samba server running 2.2.7 (Redhat
9) to 3.0.2 (Fedora 1).  The samba installation is running as a PDC for 5
Win XP workstations and was working perfectly prior to the upgrade.  When I
did the migration I copied the entire contents of the /etc/samba directory
across to the new machine (no changes at all).  

Now that I have done the migration I *CAN* still do the following...
- log in to the domain
- the user's roaming profiles transfer successfully back and forth to the
server
- existing mapped drives on the workstations (to shares on the server) work
as they always have
- can map new shares to the server with no problem

But, the following items no longer work...
- In XP if I go to entire network and try to view the computers in the
domain, only the server shows up... none of the 5 workstations show up in
the domain as previously.
- Can no longer access printers shared on the workstations
- If I try to enter \\workstation1\data (or any of the valid, pre-existing,
previously working shares on any of the workstations) from any of the 5
workstations, either via start | run, or via the address bar in My Computer
I get an error that states "Trust relationship between this workstation and
primary domain failed".  

So, to summarize, all of the workstations see the server just fine but the
workstations don't seem to be able to see eachother or their shared
resources any longer and complain about the trust problem.

Prior to copying the contents of /etc/samba to the new server I did a
comparison between the distributed smb.conf file and the old file.  I did
not see any added or removed keys so I chose to save typing and just use the
existing file.  
The following are the files which I copied over... smb.conf, smbusers,
lmhosts, secrets.tdb and smbpasswd.  I assumed by doing this that any
possible required configuration would get transferred across to the new
machine.  I have done an in-place upgrade from RH9 to FC1 on another server
(rather than doing a clean install and transferrig the configs) and the
samba install there worked just fine (also with making no changes from the
existing configs), so I'm really lost as to what could be causing this
issue.

Any hints, tips or suggestions are appreciated.

Thanks,>>>>> Mike <<<<<

Mike Cisar

2004-Mar-23 22:28 UTC

head link

[Samba] Trust relationship failed...

Following up on my original post I checked to verify that I was using the
correct (original) secrets.tdb, which I was.  I started digging a bit more
in depth into nmbd.log.  There I found some references to a .200 IP which I
had used temporarily while the server was out of the client's site for the
upgrade.

Note that 192.168.123.10 is the correct IP address of the server, the
192.168.0.200 was the temporary address.  After seeing this, I temporarily
added the .200 IP address on to the server and in to the smb.conf at which
point I was once again able to access shares and printers via
\\workstation1\share (I had to unjoin and rejoin 2 of the machines from the
domain for this to work, the other 3 worked without any changes).  But still
the only machine that shows up when trying to browse the network is the
server itself.  When I got to this point I decided to once again remove the
.200 IP address from both places and reboot.  

After rebooting I still am able to access the shares via their UNC paths but
still only see the server when I try to browse the domain.  If you will look
wayyy down right at the bottom of the log file attached (appologies for the
long log post but I'm not sure exactly what might be pertenant) there is
reference to it not being able to get the workgroup name from domain master
browser 192.168.0.200 even though 2 lines above it shows "is now a master
broweser on subnet 192.168.123.10".  I'm sure this is the cause of the
problem, but no clue how to rectify it.  How can I get this thing to forget
that the .200 IP address ever existed.  The machine obviously became a
master browser under that IP address while it was on the temporary network,
and just doesn't want to "let go", and such it isn't
propagating the browse
list properly... it must be something in a cache somewhere because there
were no config changes (until this morning when I did so temporarily) which
restored the client's network to something functional yet awkward (a user...
type a UNC path... correctly... HAHAHA). 

Thanks again in advance,>>>>> Mike <<<<<
Log clip follows...
  There is already a domain master browser at IP 192.168.0.200 for workgroup
CASCADE-01 registered on subnet UNICAST_SUBNET.
[2004/03/23 10:18:45, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(327)
  become_domain_master_browser_wins:
  Attempting to become domain master browser on workgroup CASCADE-01, subnet
UNICAST_SUBNET.
[2004/03/23 10:18:45, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(341)
  become_domain_master_browser_wins: querying WINS server from IP
192.168.123.10 for domain master browser name CASCADE-01<1b> on workgroup
CASCADE-01
[2004/03/23 10:18:46, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_query_success(225)
  become_domain_master_query_success:
  There is already a domain master browser at IP 192.168.0.200 for workgroup
CASCADE-01 registered on subnet UNICAST_SUBNET.
[2004/03/23 10:23:46, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(327)
  become_domain_master_browser_wins:
  Attempting to become domain master browser on workgroup CASCADE-01, subnet
UNICAST_SUBNET.
[2004/03/23 10:23:46, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(341)
  become_domain_master_browser_wins: querying WINS server from IP
192.168.123.10 for domain master browser name CASCADE-01<1b> on workgroup
CASCADE-01
[2004/03/23 10:23:47, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_query_success(225)
  become_domain_master_query_success:
  There is already a domain master browser at IP 192.168.0.200 for workgroup
CASCADE-01 registered on subnet UNICAST_SUBNET.
[2004/03/23 10:27:17, 0]
nmbd/nmbd_browsesync.c:domain_master_node_status_fail(247)
  domain_master_node_status_fail:
  Doing a node status request to the domain master browser
  for workgroup CASCADE-01 at IP 192.168.0.200 failed.
  Cannot sync browser lists.
[2004/03/23 10:28:48, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(327)
  become_domain_master_browser_wins:
  Attempting to become domain master browser on workgroup CASCADE-01, subnet
UNICAST_SUBNET.
[2004/03/23 10:28:48, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(341)
  become_domain_master_browser_wins: querying WINS server from IP
192.168.123.10 for domain master browser name CASCADE-01<1b> on workgroup
CASCADE-01
[2004/03/23 10:28:48, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_query_success(225)
  become_domain_master_query_success:
  There is already a domain master browser at IP 192.168.0.200 for workgroup
CASCADE-01 registered on subnet UNICAST_SUBNET.
[2004/03/23 10:33:32, 0]
nmbd/nmbd_become_lmb.c:become_local_master_stage2(396)
  *****
  
  Samba name server CAS1 is now a local master browser for workgroup
CASCADE-01 on subnet 192.168.0.200
  
  *****
[2004/03/23 10:33:32, 1]
nmbd/nmbd_incomingrequests.c:process_node_status_request(326)
  process_node_status_request: status request for name CASCADE-01<1b> from
IP 192.168.0.200 on subnet UNICAST_SUBNET - name not found.
[2004/03/23 10:33:32, 1]
nmbd/nmbd_incomingrequests.c:process_node_status_request(326)
  process_node_status_request: status request for name CASCADE-01<1b> from
IP 192.168.0.200 on subnet UNICAST_SUBNET - name not found.
[2004/03/23 10:33:38, 1]
nmbd/nmbd_incomingrequests.c:process_node_status_request(326)
  process_node_status_request: status request for name CASCADE-01<1b> from
IP 192.168.0.200 on subnet UNICAST_SUBNET - name not found.
[2004/03/23 10:33:38, 0] nmbd/nmbd_logonnames.c:add_logon_names(163)
  add_domain_logon_names:
  Attempting to become logon server for workgroup CASCADE-01 on subnet
192.168.0.200
[2004/03/23 10:33:38, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(327)
  become_domain_master_browser_wins:
  Attempting to become domain master browser on workgroup CASCADE-01, subnet
UNICAST_SUBNET.
[2004/03/23 10:33:38, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(341)
  become_domain_master_browser_wins: querying WINS server from IP
192.168.123.10 for domain master browser name CASCADE-01<1b> on workgroup
CASCADE-01
[2004/03/23 10:33:38, 1]
nmbd/nmbd_incomingrequests.c:process_node_status_request(326)
  process_node_status_request: status request for name CASCADE-01<1b> from
IP 192.168.0.200 on subnet UNICAST_SUBNET - name not found.
[2004/03/23 10:33:38, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_stage2(113)
  *****
  
  Samba server CAS1 is now a domain master browser for workgroup CASCADE-01
on subnet UNICAST_SUBNET
  
  *****
[2004/03/23 10:33:38, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(282)
  become_domain_master_browser_bcast:
  Attempting to become domain master browser on workgroup CASCADE-01 on
subnet 192.168.0.200
[2004/03/23 10:33:38, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(295)
  become_domain_master_browser_bcast: querying subnet 192.168.0.200 for
domain master browser on workgroup CASCADE-01
[2004/03/23 10:33:38, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(282)
  become_domain_master_browser_bcast:
  Attempting to become domain master browser on workgroup CASCADE-01 on
subnet 192.168.123.10
[2004/03/23 10:33:38, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(295)
  become_domain_master_browser_bcast: querying subnet 192.168.123.10 for
domain master browser on workgroup CASCADE-01
[2004/03/23 10:33:42, 0]
nmbd/nmbd_logonnames.c:become_logon_server_success(124)
  become_logon_server_success: Samba is now a logon server for workgroup
CASCADE-01 on subnet 192.168.0.200
[2004/03/23 10:33:47, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_stage2(113)
  *****
  
  Samba server CAS1 is now a domain master browser for workgroup CASCADE-01
on subnet 192.168.0.200
  
  *****
[2004/03/23 10:33:47, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_stage2(113)
  *****
  
  Samba server CAS1 is now a domain master browser for workgroup CASCADE-01
on subnet 192.168.123.10
  
  *****
[2004/03/23 11:31:52, 0] nmbd/nmbd.c:terminate(54)
  Got SIGTERM: going down...
[2004/03/23 11:31:52, 0] libsmb/nmblib.c:send_udp(758)
  Packet send failed to 127.0.0.1(137) ERRNO=Invalid argument
[2004/03/23 11:31:52, 0] nmbd/nmbd_packets.c:send_netbios_packet(163)
  send_netbios_packet: send_packet() to IP 127.0.0.1 port 137 failed
[2004/03/23 11:31:52, 0] nmbd/nmbd_namerelease.c:wins_release_name(166)
  release_name: Failed to send packet trying to release name
CASCADE-01<1b>
IP 192.168.0.200
[2004/03/23 11:31:52, 0] libsmb/nmblib.c:send_udp(758)
  Packet send failed to 127.0.0.1(137) ERRNO=Invalid argument
[2004/03/23 11:31:52, 0] nmbd/nmbd_packets.c:send_netbios_packet(163)
  send_netbios_packet: send_packet() to IP 127.0.0.1 port 137 failed
[2004/03/23 11:31:52, 0] nmbd/nmbd_namerelease.c:wins_release_name(166)
  release_name: Failed to send packet trying to release name
CASCADE-01<1c>
IP 192.168.0.200
[2004/03/23 11:31:52, 0] libsmb/nmblib.c:send_udp(758)
  Packet send failed to 192.168.0.255(138) ERRNO=Invalid argument
[2004/03/23 11:31:52, 0] libsmb/nmblib.c:send_udp(758)
  Packet send failed to 192.168.0.255(138) ERRNO=Invalid argument
[2004/03/23 11:31:53, 0] nmbd/nmbd.c:main(665)
[2004/03/23 11:33:23, 0] nmbd/nmbd.c:terminate(54)
  Got SIGTERM: going down...
[2004/03/23 11:33:23, 0] nmbd/nmbd.c:main(665)
  Netbios nameserver version 3.0.2-7.FC1 started.
  Copyright Andrew Tridgell and the Samba Team 1994-2004
[2004/03/23 11:33:23, 0] nmbd/nmbd_logonnames.c:add_logon_names(163)
  add_domain_logon_names:
  Attempting to become logon server for workgroup CASCADE-01 on subnet
192.168.123.10
[2004/03/23 11:33:23, 0] nmbd/nmbd_logonnames.c:add_logon_names(163)
  add_domain_logon_names:
  Attempting to become logon server for workgroup CASCADE-01 on subnet
UNICAST_SUBNET
[2004/03/23 11:33:23, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(327)
  become_domain_master_browser_wins:
  Attempting to become domain master browser on workgroup CASCADE-01, subnet
UNICAST_SUBNET.
[2004/03/23 11:33:23, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(341)
  become_domain_master_browser_wins: querying WINS server from IP
192.168.123.10 for domain master browser name CASCADE-01<1b> on workgroup
CASCADE-01
[2004/03/23 11:33:23, 0]
nmbd/nmbd_logonnames.c:become_logon_server_success(124)
  become_logon_server_success: Samba is now a logon server for workgroup
CASCADE-01 on subnet UNICAST_SUBNET
[2004/03/23 11:33:23, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_stage2(113)
  *****
  
  Samba server CAS1 is now a domain master browser for workgroup CASCADE-01
on subnet UNICAST_SUBNET
  
  *****
[2004/03/23 11:33:23, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(282)
  become_domain_master_browser_bcast:
  Attempting to become domain master browser on workgroup CASCADE-01 on
subnet 192.168.123.10
[2004/03/23 11:33:23, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(295)
  become_domain_master_browser_bcast: querying subnet 192.168.123.10 for
domain master browser on workgroup CASCADE-01
[2004/03/23 11:33:27, 0]
nmbd/nmbd_logonnames.c:become_logon_server_success(124)
  become_logon_server_success: Samba is now a logon server for workgroup
CASCADE-01 on subnet 192.168.123.10
[2004/03/23 11:33:31, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_stage2(113)
  *****
  
  Samba server CAS1 is now a domain master browser for workgroup CASCADE-01
on subnet 192.168.123.10
  
  *****
[2004/03/23 11:33:43, 0]
nmbd/nmbd_browsesync.c:get_domain_master_name_node_status_fail(485)
  get_domain_master_name_node_status_fail:
  Doing a node status request to the domain master browser at IP
192.168.0.200 failed.
  Cannot get workgroup name.
[2004/03/23 11:33:47, 0]
nmbd/nmbd_become_lmb.c:become_local_master_stage2(396)
  *****
  
  Samba name server CAS1 is now a local master browser for workgroup
CASCADE-01 on subnet 192.168.123.10
  
  *****
[2004/03/23 11:36:45, 0] nmbd/nmbd.c:terminate(54)
  Got SIGTERM: going down...
[2004/03/23 11:36:48, 0] nmbd/nmbd.c:main(665)
  Netbios nameserver version 3.0.2-7.FC1 started.
  Copyright Andrew Tridgell and the Samba Team 1994-2004
[2004/03/23 11:36:48, 0] nmbd/nmbd_logonnames.c:add_logon_names(163)
  add_domain_logon_names:
  Attempting to become logon server for workgroup CASCADE-01 on subnet
192.168.123.10
[2004/03/23 11:36:48, 0] nmbd/nmbd_logonnames.c:add_logon_names(163)
  add_domain_logon_names:
  Attempting to become logon server for workgroup CASCADE-01 on subnet
UNICAST_SUBNET
[2004/03/23 11:36:48, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(327)
  become_domain_master_browser_wins:
  Attempting to become domain master browser on workgroup CASCADE-01, subnet
UNICAST_SUBNET.
[2004/03/23 11:36:48, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(341)
  become_domain_master_browser_wins: querying WINS server from IP
192.168.123.10 for domain master browser name CASCADE-01<1b> on workgroup
CASCADE-01
[2004/03/23 11:36:48, 0]
nmbd/nmbd_logonnames.c:become_logon_server_success(124)
  become_logon_server_success: Samba is now a logon server for workgroup
CASCADE-01 on subnet UNICAST_SUBNET
[2004/03/23 11:36:48, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_stage2(113)
  *****
  
  Samba server CAS1 is now a domain master browser for workgroup CASCADE-01
on subnet UNICAST_SUBNET
  
  *****
[2004/03/23 11:36:48, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(282)
  become_domain_master_browser_bcast:
  Attempting to become domain master browser on workgroup CASCADE-01 on
subnet 192.168.123.10
[2004/03/23 11:36:48, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(295)
  become_domain_master_browser_bcast: querying subnet 192.168.123.10 for
domain master browser on workgroup CASCADE-01
[2004/03/23 11:36:52, 0]
nmbd/nmbd_logonnames.c:become_logon_server_success(124)
  become_logon_server_success: Samba is now a logon server for workgroup
CASCADE-01 on subnet 192.168.123.10
[2004/03/23 11:36:56, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_stage2(113)
  *****
  
  Samba server CAS1 is now a domain master browser for workgroup CASCADE-01
on subnet 192.168.123.10
  
  *****
[2004/03/23 11:37:09, 0]
nmbd/nmbd_browsesync.c:get_domain_master_name_node_status_fail(485)
  get_domain_master_name_node_status_fail:
  Doing a node status request to the domain master browser at IP
192.168.0.200 failed.
  Cannot get workgroup name.
[2004/03/23 11:37:11, 0]
nmbd/nmbd_become_lmb.c:become_local_master_stage2(396)
  *****
  
  Samba name server CAS1 is now a local master browser for workgroup
CASCADE-01 on subnet 192.168.123.10
  
  *****
[2004/03/23 11:40:25, 0] nmbd/nmbd.c:terminate(54)
  Got SIGTERM: going down...
[2004/03/23 11:40:27, 0] nmbd/nmbd.c:main(665)
  Netbios nameserver version 3.0.2-7.FC1 started.
  Copyright Andrew Tridgell and the Samba Team 1994-2004
[2004/03/23 11:40:27, 0] nmbd/nmbd_logonnames.c:add_logon_names(163)
  add_domain_logon_names:
  Attempting to become logon server for workgroup CASCADE-01 on subnet
192.168.123.10
[2004/03/23 11:40:27, 0] nmbd/nmbd_logonnames.c:add_logon_names(163)
  add_domain_logon_names:
  Attempting to become logon server for workgroup CASCADE-01 on subnet
UNICAST_SUBNET
[2004/03/23 11:40:27, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(327)
  become_domain_master_browser_wins:
  Attempting to become domain master browser on workgroup CASCADE-01, subnet
UNICAST_SUBNET.
[2004/03/23 11:40:27, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(341)
  become_domain_master_browser_wins: querying WINS server from IP
192.168.123.10 for domain master browser name CASCADE-01<1b> on workgroup
CASCADE-01
[2004/03/23 11:40:27, 0]
nmbd/nmbd_logonnames.c:become_logon_server_success(124)
  become_logon_server_success: Samba is now a logon server for workgroup
CASCADE-01 on subnet UNICAST_SUBNET
[2004/03/23 11:40:27, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_stage2(113)
  *****
  
  Samba server CAS1 is now a domain master browser for workgroup CASCADE-01
on subnet UNICAST_SUBNET
  
  *****
[2004/03/23 11:40:27, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(282)
  become_domain_master_browser_bcast:
  Attempting to become domain master browser on workgroup CASCADE-01 on
subnet 192.168.123.10
[2004/03/23 11:40:27, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(295)
  become_domain_master_browser_bcast: querying subnet 192.168.123.10 for
domain master browser on workgroup CASCADE-01
[2004/03/23 11:40:31, 0]
nmbd/nmbd_logonnames.c:become_logon_server_success(124)
  become_logon_server_success: Samba is now a logon server for workgroup
CASCADE-01 on subnet 192.168.123.10
[2004/03/23 11:40:35, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_stage2(113)
  *****
  
  Samba server CAS1 is now a domain master browser for workgroup CASCADE-01
on subnet 192.168.123.10
  
  *****
[2004/03/23 11:40:48, 0]
nmbd/nmbd_browsesync.c:get_domain_master_name_node_status_fail(485)
  get_domain_master_name_node_status_fail:
  Doing a node status request to the domain master browser at IP
192.168.0.200 failed.
  Cannot get workgroup name.
[2004/03/23 11:40:50, 0]
nmbd/nmbd_become_lmb.c:become_local_master_stage2(396)
  *****
  
  Samba name server CAS1 is now a local master browser for workgroup
CASCADE-01 on subnet 192.168.123.10
  
  *****

> -----Original Message-----
> Now that I have done the migration I *CAN* still do the following...
> - log in to the domain
> - the user's roaming profiles transfer successfully back and 
> forth to the server
> - existing mapped drives on the workstations (to shares on 
> the server) work as they always have
> - can map new shares to the server with no problem
> 
> But, the following items no longer work...
> - In XP if I go to entire network and try to view the 
> computers in the domain, only the server shows up... none of 
> the 5 workstations show up in the domain as previously.
> - Can no longer access printers shared on the workstations
> - If I try to enter \\workstation1\data (or any of the valid, 
> pre-existing, previously working shares on any of the 
> workstations) from any of the 5 workstations, either via 
> start | run, or via the address bar in My Computer I get an 
> error that states "Trust relationship between this 
> workstation and primary domain failed".  
> 
> So, to summarize, all of the workstations see the server just 
> fine but the workstations don't seem to be able to see 
> eachother or their shared resources any longer and complain 
> about the trust problem.

Possibly Parallel Threads

Search for more reasonably related threads

samba - Mar 2004 - Trust relationship failed...

[Samba] Trust relationship failed...

[Samba] Trust relationship failed...

Possibly Parallel Threads