Hi, I use Samba (version 3.3.4) as a role-domain-member (security=ADS). All works fine, except cross-forest access (NT_STATUS_WRONG_PASSWORD; nothing else extra-ordinary in the logs). Means: DOMAIN3\USER1 could not access samba in DOMAIN1. The Forest with the samba server also have another domain (DOMAIN2) in the forest. The user there can access the samba-server. What I tried: - Wbinfo -u and wbinfo -g wirks fine. - smbclient -U DOMAIN3\USER1 //file-server.domain1.local/share on file-server works fine (after entered password) - Access over Nautilus with the SMB-Protocol (smb://USER1 at file-server.domain1.local/share) works also fine Client is a windows 7 DC and GlobalCatalog for DOMAIN3 is a Windows 2008 R2. The Trust is bidirectional and non-transitive. Any Hints? Greetings, Bj?rn