samba - Feb 2005 - Interdomain trust problem

Hi all,

I have two different domains.  At one point I had them trusting eaach other 
but then I ruined it.  Now I am trying to get them back.  They both have LDAP 
backend.  I need them bot to trust each other and be trusted by each other.  
Here are the steps I am following:

1.  On each domain, create a computer account called the other domain:
	CORP: smbldap-useradd -ai FURN$
	CORP: smbldap-passwd FURN$
		(for the example lets say I used the password "secret")
	CORP: smbpasswd -a -i FURN
		(entered "secret" again)

	FURN: net rpc trustdom establish CORP
		(entered  "secret")
	Could not connect to server CORPSRV
	The username or password was not correct.
	[2005/02/28 10:11:02, 0] utils/net_rpc.c:rpc_trustdom_establish(4516)
	  Couldn't verify trusting domain account. Error was
NT_STATUS_LOGON_FAILURE

The  same exact thing happens the opposite way.  No real error messages that I 
can find in any log files.

Can someone please tell me the step I am missing?

Thanks,
Misty

PS - John, it would be great if you could update chapter 16 of _Samba 3 By 
Example_ to include steps for establishing interdomain trusts when using LDAP 
backend, because it is not immediately obvious to me what to do.

On Monday 28 February 2005 08:13, Misty Stanley-Jones
wrote:
> Hi all,
>
> I have two different domains.  At one point I had them trusting eaach other
> but then I ruined it.  Now I am trying to get them back.  They both have
> LDAP backend.  I need them bot to trust each other and be trusted by each
> other. Here are the steps I am following:
>
> 1.  On each domain, create a computer account called the other domain:
> 	CORP: smbldap-useradd -ai FURN$
> 	CORP: smbldap-passwd FURN$
> 		(for the example lets say I used the password "secret")
> 	CORP: smbpasswd -a -i FURN
> 		(entered "secret" again)
>
> 	FURN: net rpc trustdom establish CORP
> 		(entered  "secret")
> 	Could not connect to server CORPSRV
> 	The username or password was not correct.
> 	[2005/02/28 10:11:02, 0] utils/net_rpc.c:rpc_trustdom_establish(4516)
> 	  Couldn't verify trusting domain account. Error was
> NT_STATUS_LOGON_FAILURE
>
> The  same exact thing happens the opposite way.  No real error messages
> that I can find in any log files.
>
> Can someone please tell me the step I am missing?
>
> Thanks,
> Misty
>
> PS - John, it would be great if you could update chapter 16 of _Samba 3 By
> Example_ to include steps for establishing interdomain trusts when using
> LDAP backend, because it is not immediately obvious to me what to do.
I will update this chapter as part of the preps for release of 3.0.12.

- John T.
-- 
John H Terpstra, CTO
PrimaStasys Inc.
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.