samba - Mar 2005 - lost passdb, workstations lost trust relation ship

Hello,

After a catastrophic disk failure, I restored all the contents of 
/var/lib/samba of our Samba 3.0.11 PDC (debian 3.0).

However, when logging on any workstation, we keep having an error about 
a failed trust relationship. Here is a sample:

smbclient -L <workstation> -U kowalski
Password: 
session setup failed: NT_STATUS_TRUSTED_RELATIONSHIP_FAILURE


I must be missing a file to restore, but which one ?

Many thanks in advance.

-- 
Nicolas

On Mon, 7 Mar 2005, Nicolas Kowalski wrote:
> After a catastrophic disk failure, I restored all the contents of 
> /var/lib/samba of our Samba 3.0.11 PDC (debian 3.0).
To add some information, we are using tdbsam as password database:

/etc/samba/smb.conf:

        passdb backend = tdbsam guest


Another thing I do not understand is: if I make the workstations join 
the domain again, it works, however the passdb.tdb file seems to not be 
updated (file mtime not changed), but the contents readable from pdbedit 
-L -v looks good. 

-- 
Nicolas

On Mon, 7 Mar 2005, Nicolas Kowalski wrote:
> After a catastrophic disk failure, I restored all the contents of 
> /var/lib/samba of our Samba 3.0.11 PDC (debian 3.0).
> 
> However, when logging on any workstation, we keep having an error 
> about a failed trust relationship. Here is a sample:
I was in a hurry, so I had to make all the workstations rejoin the 
domain. I do understand why restoring the secrets.tdb and all others 
.tdb files in /var/lib/samba was not sufficient to get our domain back.

To prevent this kind of disappointment in the future, may anyone give me 
some directions for backing up a Samba 3.0.11 PDC on a Debian server, 
using tdbsam as password information ?

I already have backups of /etc/samba and /var/lib/samba. What else 
should I include, or what commands (tdbbackup?) do you recommend ?

Thanks.

-- 
Nicolas