Roger Roden
2008-Sep-19 04:20 UTC
[Samba] Can't authenticate users from both domains in forest
I have 2 domains in my forest. I need to allow users from both DomA (The forest root and the Domain the server is joined to) and DomB to log in. All works fine with DomA, but no one from DomB can log in. wbinfo --domain=DOMB -u returns error looking up domain users. wbinfo -D DOMB returns the following: Name : DOMB Alt_Name : DOMB.local SID : S-1-5-21-1846896199-2149236580-2910475250 Active Directory : No Native : No Primary : No Sequence : -1 I can get a kerberos ticket from DomB. Here is my smb.conf ---------------------------------------------------------------------------------------------------------------------------- [global] #--authconfig--start-line-- # Generated by authconfig on 2008/09/17 12:52:21 # DO NOT EDIT THIS SECTION (delimited by --start-line--/--end-line--) # Any modification may be deleted or altered by authconfig in future workgroup = DOMA password server = ad01.doma.local realm = DOMA.LOCAL security = ads idmap uid = 16777216-33554431 idmap gid = 16777216-33554431 template shell = /bin/bash template homedir = /home/%U winbind use default domain = false winbind offline logon = false #--authconfig--end-line-- log level = 3 server string = Samba Server Version %v client use spnego = yes passdb backend = tdbsam wins server = AN.I.P.ADDRESS cups options = raw ----------------------------------------------------------------------------------------------------------- I'm running CentOS 5 and Samba 3.0.28. All AD Servers are 2003 R2. Thanks
Possibly Parallel Threads
- wbinfo -r not listing domain local groups
- samba4 domain member and multiple domains
- How to stop winbind client connecting to trusted DC
- winbind does not list users from trusted domain
- Samba trusted domains and access control lists problem (cannot delete or rename)