Schwiete, Ralf (AllianzGI)
2009-Oct-16 15:02 UTC
[Samba] Don't see a subdomain as subdomain
Hello, we have an Domain-Setup with three domains and an forest-trust between the domains. All domaincontrollers are Windows 2003 Server. The setup of the Forest-Trusts are identically (as the DC-Admin says). Under-A (where the samba server lives) / Domain-A / \ / \ Domain-B Domain-C \ Under-C When I use wbinfo -m --verbose I see the folowing: Domain Name DNS Domain Trust Type Transitive In Out BUILTIN None Yes Yes Yes [Server] None Yes Yes Yes Under-A Under-A.Domain-A.net None Yes Yes Yes Domain-A Domain-A.net In-Forest Yes Yes Yes Domain-C Domain-C.net None Yes Yes Yes Domain-B Domain-B.com Forest Yes Yes Yes As you can see, wbinfo says, that the trust to "Domain-C" is no forest-Trust and I also do'nt see the subdomain "Under-C". With debug-level 10 I see the following information from my "Domain-A"-DC ("log.wb-Domain-A"): (...) array: struct netr_DomainTrust netbios_name : * netbios_name : 'Domain-C' dns_name : * dns_name : 'Domain-C.net' trust_flags : 0x00000022 (34) 0: NETR_TRUST_FLAG_IN_FOREST 1: NETR_TRUST_FLAG_OUTBOUND 0: NETR_TRUST_FLAG_TREEROOT 0: NETR_TRUST_FLAG_PRIMARY 0: NETR_TRUST_FLAG_NATIVE 1: NETR_TRUST_FLAG_INBOUND parent_index : 0x00000000 (0) trust_type : NETR_TRUST_TYPE_UPLEVEL (2) trust_attributes : 0x00000048 (72) 0: NETR_TRUST_ATTRIBUTE_NON_TRANSITIVE 0: NETR_TRUST_ATTRIBUTE_UPLEVEL_ONLY 0: NETR_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN 1: NETR_TRUST_ATTRIBUTE_FOREST_TRANSITIVE 0: NETR_TRUST_ATTRIBUTE_CROSS_ORGANIZATION 0: NETR_TRUST_ATTRIBUTE_WITHIN_FOREST 1: NETR_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL sid : * sid : [SID] guid : 00000000-0000-0000-0000-000000000000 array: struct netr_DomainTrust netbios_name : * netbios_name : 'Domain-B' dns_name : * dns_name : 'AD.Domain-B.COM' trust_flags : 0x00000022 (34) 0: NETR_TRUST_FLAG_IN_FOREST 1: NETR_TRUST_FLAG_OUTBOUND 0: NETR_TRUST_FLAG_TREEROOT 0: NETR_TRUST_FLAG_PRIMARY 0: NETR_TRUST_FLAG_NATIVE 1: NETR_TRUST_FLAG_INBOUND parent_index : 0x00000000 (0) trust_type : NETR_TRUST_TYPE_UPLEVEL (2) trust_attributes : 0x00000008 (8) 0: NETR_TRUST_ATTRIBUTE_NON_TRANSITIVE 0: NETR_TRUST_ATTRIBUTE_UPLEVEL_ONLY 0: NETR_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN 1: NETR_TRUST_ATTRIBUTE_FOREST_TRANSITIVE 0: NETR_TRUST_ATTRIBUTE_CROSS_ORGANIZATION 0: NETR_TRUST_ATTRIBUTE_WITHIN_FOREST 0: NETR_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL sid : * sid : [SID] guid : 00000000-0000-0000-0000-000000000000 (...) What is interesting above is the "NETR_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL"-flag which is "1" on the first anf "0" on the second trust-Entry. Could someone tell me what this flag means? After a while (few hours or one day) wbinfo says the following: Domain Name DNS Domain Trust Type Transitive In Out BUILTIN None Yes Yes Yes [Server] None Yes Yes Yes Under-A Under-A.Domain-A.net None Yes Yes Yes Domain-A Domain-A.net In-Forest Yes Yes Yes Domain-C Domain-C.net None Yes Yes Yes Domain-B Domain-B.com Forest Yes Yes Yes Under-C None Yes No Yes The subdomain "Under-C" is visible but not as subdomain or forest-trust and also there is no log-entry for this domain like above in any logfile. But there is an logfile "log.wb-Under-C". There is no logfile like "log.wb-Domain-C". The SAMBA is an Samba 3.3.9 under Solaris 9. Samba-Config: [global] workgroup = Under-A server string = Samba Server ditgwd netbios name = [Server] security = ads realm = Under-A.Domain A.NET encrypt passwords = yes map to guest = never load printers = no interfaces = [One IP] bind interfaces only = yes use spnego = yes encrypt passwords = yes invalid users = root Administrator admin oracle bgdft name resolve order = host log file = /var/opt/log/samba/log.%m max log size = 5000 password server = * passdb backend = tdbsam socket options = IPTOS_LOWDELAY TCP_NODELAY server schannel = auto template shell = /usr/bin/false client schannel = no local master = no os level = 1 domain master = no preferred master = no domain logons = no wins support = no wins proxy = no dns proxy = no allow trusted domains = yes winbind separator = + idmap uid = 10000-30000 idmap gid = 10000-30000 winbind enum users = yes winbind enum groups = yes winbind use default domain = no winbind cache time = 100 winbind nested groups = yes template homedir = /home/%D/%U template shell = /usr/bin/false log level = 10 #============================ Share Definitions =============================(...) The Problem is, that the domain "Under-C" appears only after a while and not as subdomain. Thanks for help in advance, Ralf
Possibly Parallel Threads
- Joining Windows 2008 Domain as DC fails 4.10 (and 4.11rc3)
- Joining Samba to Upgraded 2003 domain failing
- variables inside a template for my hp ilo device
- Joining Samba to Upgraded 2003 domain failing
- Joining Windows 2008 Domain as DC fails 4.10 (and 4.11rc3)