samba - Mar 2005 - Can a Samba server join multiple NT domain?

Hi,

Say if there are DomainX and DomainY, both are not in trusted 
relationship. Can a Samba server join both DomainX and DomainY?

I can't find any related information on Internet. Your help would be 
appreciated.


Thanks!
Yimin

Hi,


I'm rather new to Samba, but I think, that it's not possible to join
multiple Domains. 

Why would you want this, anyway? As far as I know, the Trust between the
Domains should be enough. Clients of the other Domain can log onto the Samba
Server because of the trust.

Please forgive my humble English

Thomas

On Wednesday 23 March 2005 17:20, Yimin Chen wrote:
> Hi,
>
> Say if there are DomainX and DomainY, both are not in trusted
> relationship. Can a Samba server join both DomainX and DomainY?
No. Neither can NT4 nor Win2K! But Samba can set up mulitple trusts.
It is documented in the Samba-HOWTO-Collection available from:

http://www.samba.org/samba/docs/Samba-HOWTO-Collection.pdf
>
> I can't find any related information on Internet.
Really?
> Your help would be  appreciated.
OK.
>
>
> Thanks!
> Yimin
- John T.
-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.

A single Samba set-up can be part of two domains, but it is possible to have to
samba instances on the same server under certain circumstances (dual ip
addresses, compile each samba separately, etc.).
I have a set-up where a Linux box is part of NT4 domain and of Win2K3 ADS
domain. works like a charm.

The only problem is libnss_winbind . Can't have two of those unless changing
at least some part of the source code and I'm still looking for help on that
one. Anybody?

Emmanuel
> On Wednesday 23 March 2005 17:20, Yimin Chen wrote:
>> Hi,
>>
>> Say if there are DomainX and DomainY, both are not in trusted
>> relationship. Can a Samba server join both DomainX and DomainY?
> 
> No. Neither can NT4 nor Win2K! But Samba can set up mulitple trusts.
> It is documented in the Samba-HOWTO-Collection available from:
> 
> http://www.samba.org/samba/docs/Samba-HOWTO-Collection.pdf
> 
>>
>> I can't find any related information on Internet.
> 
> Really?
> 
>> Your help would be  appreciated.
> 
> OK.
> 
>>
>>
>> Thanks!
>> Yimin
> 
> - John T.
> -- 
> John H Terpstra
> Samba-Team Member
> Phone: +1 (650) 580-8668
> 
> Author:
> The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
> Samba-3 by Example, ISBN: 0131472216
> Hardening Linux, ISBN: 0072254971
> Other books in production.

-- 

Emmanuel Willems 

+----------------------+-------------------+----------------------+ 
| Ing?nieur-syst?me    | Systeem ingenieur | System engineer      | 
+----------------------+-------------------+----------------------+ 
| S?nat de Belgique    | Belgische Senaat  | Belgian Senate       | 
| Place de la Nation 1 | Natieplein 1      | Place de la Nation 1 | 
| 1009 Bruxelles       | 1009 Brussel      | 1009 Brussels        |
|                      |                   | Belgium              | 
+----------------------+-------------------+----------------------+ 
| e-mail: ew@senate.be                                            |
| URL: http://www.senate.be                                       | 
| tel: +32 (2) 501.72.39                                          |
| fax: +32 (2) 514.06.85                                          | 
+-----------------------------------------------------------------+

TBMDF wrote:
>>
>> When you mention the trusts, you mean when the Samba server acting as 
>> a Domain controller and establish trusts with other domains, right?
>>
>> I suppose it will not work for a Samba server that is just serving 
>> content?
>>
> You just setup Samba to authenticate from one of the Domains, 
What does this mean that setup Samba to authentication from one of the 
Domains? Do you mean the password server configuration?

and add
> the machine account to that Domain Controller.
> 
> 
To make sure I understand it correctly, did you mean that if I have 
domainX and domainY, I can configure domainX DC as the password server 
for the Samba server, and also have the Samba server join DomainY (same 
as adding machine account to DomainY DC?)


Thanks,
Yimin