Gautier, B (Bob)
2006-Jun-02 09:24 UTC
[Samba] Domain trusts regression (I hope) 3.0.21c -> 3.0.23pre1, rc1
I have the following five AD domains: RABOTEST.COM AM.RABOTEST.COM OC.RABOTEST.COM AP.RABOTEST.COM EU.RABOTEST.COM There are trusts from the top level to all four regional realms. My winbindd, in ADS mode, is joined to EU.RABOTEST.COM In 3.0.21c, winbindd wbinfo -m gives me RABOTEST RABOTESTAP RABOTESTAM RABOTESTEU RABOTESTOC But in 3.0.23pre1 and rc1, I only get RABOTEST I hope this isn't the way it's *supposed* to work! Has something changed that I can configure around? Bob G _____________________________________________________________ This email (including any attachments to it) is confidential, legally privileged, subject to copyright and is sent for the personal attention of the intended recipient only. If you have received this email in error, please advise us immediately and delete it. You are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited. Although we have taken reasonable precautions to ensure no viruses are present in this email, we cannot accept responsibility for any loss or damage arising from the viruses in this email or attachments. We exclude any liability for the content of this email, or for the consequences of any actions taken on the basis of the information provided in this email or its attachments, unless that information is subsequently confirmed in writing. If this email contains an offer, that should be considered as an invitation to treat. _____________________________________________________________
Gautier, B (Bob)
2006-Jun-02 11:45 UTC
[Samba] RE: Domain trusts regression (I hope) 3.0.21c -> 3.0.23pre1, rc1
Found the cause...> -----Original Message-----> > In 3.0.21c, winbindd wbinfo -m gives me > > RABOTEST > RABOTESTAP > RABOTESTAM > RABOTESTEU > RABOTESTOC > > But in 3.0.23pre1 and rc1, I only get > > RABOTEST > > I hope this isn't the way it's *supposed* to work!Looks like it might be: the DS_DOMAIN_IN_FOREST flag has been dropped from the rpccli_ds_enum_domain_trusts call in winbindd_ads.c (but not from the call in rpcclient/cmd_ds.c, where the symbolic value is not used, btw. This means that in 3.0.23rc1 winbindd and rpcclient currently give you different 'trusted domains' lists.) Was there a good reason for this? It seriously breaks my setup, and I'd really like the original functionality back again, if possible. We expect to be able to join machines to one regional domain and yet accept users that are registered in another. Bob G _____________________________________________________________ This email (including any attachments to it) is confidential, legally privileged, subject to copyright and is sent for the personal attention of the intended recipient only. If you have received this email in error, please advise us immediately and delete it. You are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited. Although we have taken reasonable precautions to ensure no viruses are present in this email, we cannot accept responsibility for any loss or damage arising from the viruses in this email or attachments. We exclude any liability for the content of this email, or for the consequences of any actions taken on the basis of the information provided in this email or its attachments, unless that information is subsequently confirmed in writing. If this email contains an offer, that should be considered as an invitation to treat. _____________________________________________________________
Gautier, B (Bob)
2006-Jun-05 09:37 UTC
[Samba] RE: Domain trusts regression (I hope) 3.0.21c -> 3.0.23pre1, rc1
> -----Original Message----- > > I'll look into it. Please file a report at https://bugzilla.samba.orgThanks -- https://bugzilla.samba.org/show_bug.cgi?id=3823 Bob G _____________________________________________________________ This email (including any attachments to it) is confidential, legally privileged, subject to copyright and is sent for the personal attention of the intended recipient only. If you have received this email in error, please advise us immediately and delete it. You are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited. Although we have taken reasonable precautions to ensure no viruses are present in this email, we cannot accept responsibility for any loss or damage arising from the viruses in this email or attachments. We exclude any liability for the content of this email, or for the consequences of any actions taken on the basis of the information provided in this email or its attachments, unless that information is subsequently confirmed in writing. If this email contains an offer, that should be considered as an invitation to treat. _____________________________________________________________