Hello,
I have a problem with domain logon using interdomain trust relationship.
The interdomain trust relationship is correctly listed on both domain
servers.
The trusted domain is correctly listed in the drop down menu of the the
client. If I try to login using the trusted domain I get this error:
[2009/09/20 22:51:56, 0] libsmb/samlogon_cache.c:netsamlogon_cache_store(120)
netsamlogon_cache_store: cannot open netsamlogon_cache.tdb for write!
[2009/09/20 22:51:56, 1]
rpc_server/srv_netlog_nt.c:_net_sam_logon_internal(1004
)
_net_sam_logon: user WORKGROUP\andreas has user sid
S-1-5-21-2088895755-1197506039-3214754817-1838
but group sid S-1-5-21-2229473642-486623142-3909071980-513.
The conflicting domain portions are not supported for NETLOGON calls
The problem seems to be, that the user is correctly selected
"WORKGROUP\andreas", but the group isn't! The group seems to be
choosen
from the local domain and NOT from the remote trusted domain.
Details:
Local Domain is: PRAKTIKUM
Remote Domain is: WORKGROUP
Here is the Output of getlocalsid on both domain servers:
[root at mahler samba]# net getlocalsid
SID for domain PRAKTIKUMS is: S-1-5-21-2229473642-486623142-3909071980
[root at pumba samba]# net getlocalsid
SID for domain PUMBA is: S-1-5-21-2088895755-1197506039-3214754817
Is there a possibility to force the local domain server to use the groups
an the trusted server when login with the trusted domain account? May
somethings like:
WORKGROUP\<groupname>
equal to the user where WORKGROUP\<user> is used correctly.
Or are there any other ideas how I can solve the problem?
With Google I didn't find a working solution!
Many thanks,
Andreas
