Stefan-Michael Guenther
2007-Jun-30 16:43 UTC
[Samba] Problems with trust relationship between Samba 3.0.25 & Win 2k3
Hi, I'm trying to setup a trust relationship between a samba 3.0.25 (172.16.5.2) and a Windows 2k3 (192.168.10.7). Here are the details: /opt/samba/lib/smb.conf -------- [global] workgroup = ESSVW netbios name = ESS-PDC server string = Linux BSZ-PDC ESS log file = /var/log/samba/%U.log max log size = 0 log level = 5 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 logon script = %U.bat logon path = \\%L\profiles\%U logon drive = Y: domain logons = Yes os level = 128 preferred master = True domain master = True wins support = yes remote announce = 172.16.5.255/ESSVW idmap uid = 10000-20000 idmap gid = 10000-20000 winbind uid = 10000-20000 winbind gid = 10000-20000 security = domain winbind cache time = 10 The name of the windows machine is BSZ-VW-ADS1 the domain name is DOMVWBSZ. /etc/resolv.conf ------------------ namesever 192.168.10.7 search domvwbsz.local /opt/samba/lib/lmhosts ----------------------- 192.168.10.7 BSZ-VW-ADS1#1B ------------------------------------------------------ "net rpc trustdom establish domvwbsz -I 192.168.10.7" tells me, after I entered the right password: Could not connect to server BSZ-VW-ADS1 Trust to domain DOMVWBSZ established ------------------------------------------------------ And "net rpc trustdom list": Trusted domains list: DOMVWBSZ S-1-5-21-1182609643-415455094-2933463074 none Trusting domains list: DOMVWBSZ S-1-5-21-1182609643-415455094-2933463074 Unable to find a suitable server domain controller is not responding ------------------------------------------------------ Let's check the DNS: nslookup BSZ-VW-ADS1 Server: bsz-vw-ads1.domvwbsz.local Address: 192.168.10.7 Name: BSZ-VW-ADS1.domvwbsz.local Address: 192.168.10.7 ------------------------------------------------------ nslookup 192.168.10.7 Server: bsz-vw-ads1.domvwbsz.local Address: 192.168.10.7 Name: bsz-vw-ads1.domvwbsz.local Address: 192.168.10.7 ------------------------------------------------------ I have already set up the trust relationship on the windows server. But why isn't the samba server able to find the DC but claims to have established the trust to the windows domain? Thanks for any hint and advice, Stefan