samba - May 2014 - Trouble with dual domain authorization

Hello everyone,

I've got the following situation:

We have parent domain X and child domain Y.

We're decommissioning domain Y. We're currently busy with dual domain
authorization so users from both domain X and domain Y can log in and browse the
shares.

However, for some reason when I change the workgroup and realm to domain X and
set the pam_ldap.conf and libnss-ldap.conf to both domains, all users from
domain Y will be asked to login when trying to access a share. This is a problem
for us because some accounts run services that rely on those shares so they have
to be able to login automatically. Is this perhaps a trust issue? Can you give
me any advice?

Kind regards,

Bas

In our environment, we established trust relationship between the two
domains with AD. 
-JGC

-----Original Message-----
From: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org]
On Behalf Of Bas Molmans
Sent: Thursday, May 22, 2014 12:52 AM
To: samba at lists.samba.org
Subject: [Samba] Trouble with dual domain authorization

Hello everyone,

I've got the following situation:

We have parent domain X and child domain Y.

We're decommissioning domain Y. We're currently busy with dual domain
authorization so users from both domain X and domain Y can log in and browse
the shares.

However, for some reason when I change the workgroup and realm to domain X
and set the pam_ldap.conf and libnss-ldap.conf to both domains, all users
from domain Y will be asked to login when trying to access a share. This is
a problem for us because some accounts run services that rely on those
shares so they have to be able to login automatically. Is this perhaps a
trust issue? Can you give me any advice?

Kind regards,

Bas

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba