[Samba] Interdomain trust problem

Misty Stanley-Jones
Mon, 28 Feb 2005 15:14:02 -0000

Hi all,

I have two different domains.  At one point I had them trusting eaach other
but then I ruined it.  Now I am trying to get them back.  They both have LDAP
backend.  I need them bot to trust each other and be trusted by each other.
Here are the steps I am following:

1.  On each domain, create a computer account called the other domain:
	CORP: smbldap-useradd -ai FURN$
	CORP: smbldap-passwd FURN$
		(for the example lets say I used the password "secret")
	CORP: smbpasswd -a -i FURN
		(entered "secret" again)

	FURN: net rpc trustdom establish CORP
		(entered  "secret")
	Could not connect to server CORPSRV
	The username or password was not correct.
	[2005/02/28 10:11:02, 0] utils/net_rpc.c:rpc_trustdom_establish(4516)
	  Couldn't verify trusting domain account. Error was
NT_STATUS_LOGON_FAILURE

The  same exact thing happens the opposite way.  No real error messages that I
can find in any log files.

Can someone please tell me the step I am missing?

Thanks,
Misty

PS - John, it would be great if you could update chapter 16 of _Samba 3 By
Example_ to include steps for establishing interdomain trusts when using LDAP
backend, because it is not immediately obvious to me what to do.