Altrock, Jens
2004-Aug-26 08:41 UTC
No solution yet: [Samba] No access even with domain trusts
Me and my problem again... I created the root user on the 2k Domain now (same password as on linux), and can authenticate that one. Strange a little, don't really understand that though. Is there any possibility to solve that, maybe by duplicating the user database on Linux in a regular time period? Or anyone maybe got the same problem and could help me with that? Would be really nice. Regards, Jens -----Urspr?ngliche Nachricht----- Von: Altrock, Jens [mailto:Jens.Altrock@STADT-NW.DE] Gesendet: Donnerstag, 5. August 2004 10:04 An: Samba Mailing List (E-Mail) Betreff: [Samba] No access even with domain trusts Hi there! I got a little problem with samba 3.0.5 (configure options: --with-winbind --with-winbind-auth-challenge --with-configdir=/etc/samba) on RedHat 9 Kernel 2.4.20-8smp. I am trying to set up a Squid proxy with user authentification on our domain and their trust relationships. The situation: We got one domain (lets call it Domain A) where the server is a member, and we got 3 other domains ( B, C and D) that have bidirectional, non-transitive trust relationships. Domain B is Windows 2000 AD, Domains C and D are Windows 2003 ADs, all in mixed mode. After successfully joining domain A I tried to get the groups of users from a trusted domain. Using wbinfo -r domain\\username succeeded for Domain A, C and D, but not for domain B. I started winbind in interactive debug mode, and found out that the Linux Server can contact domain B, but gets an NT_STATUS_ACCESS_DENIED after some time... and I don't know why. Samba interprets that as an "user does not exist" message, although the user definitively exists. Looking at the output of wbinfo --sequence showxs that Domain B hast status disconnected, but if I check the trust relationship on the NT4 PDC it is ok though. I hope anyone can help me, for I got no more ideas. Regards Jens ########################################### Diese Nachricht wurde von F-Secure Anti-Virus gescannt. This message has been scanned by F-Secure Anti-Virus. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba ########################################### Diese Nachricht wurde von F-Secure Anti-Virus gescannt. This message has been scanned by F-Secure Anti-Virus.