Hello, I am using SAMBA 4.1.6 AD on Ubuntu 14.04.02, I am trying to use the Active Directory Domains and Trust tool but it keeps giving me this message. I am trying to fix this issue: The requested operation cannot be completed. The computer must be trusted for delegation and the current user account must be configured to allow delegation. (SQLEditors) Would you please help how I can solve this issue? Br. Umar
Hi Umar,> I am using SAMBA 4.1.6 AD on Ubuntu 14.04.02, I am trying to use the Active > Directory Domains and Trust tool but it keeps giving me this message.Domain trust is not yet supported in that old samba version. There is some support in the next release 4.3. From the annonce mail [1] of the Samba 4.3rc1: Improved support for trusted domains (as AD DC) ----------------------------------------------- The support for trusted domains/forests has improved a lot. samba-tool got "domain trust" subcommands to manage trusts: create - Create a domain or forest trust. delete - Delete a domain trust. list - List domain trusts. namespaces - Manage forest trust namespaces. show - Show trusted domain details. validate - Validate a domain trust. External trusts between individual domains work in both ways (inbound and outbound). The same applies to root domains of a forest trust. The transitive routing into the other forest is fully functional for kerberos, but not yet supported for NTLMSSP. While a lot of things are working fine, there are currently a few limitations: - Both sides of the trust need to fully trust each other! - No SID filtering rules are applied at all! - This means DCs of domain A can grant domain admin rights in domain B. - It's not possible to add users/groups of a trusted domain into domain groups. Cheers, Denis [1] https://download.samba.org/pub/samba/rc/WHATSNEW-4.3.0rc1.txt> I am trying to fix this issue: > > The requested operation cannot be completed. The computer must be trusted > for delegation and the current user account must be configured to allow > delegation. > (SQLEditors) > > Would you please help how I can solve this issue? > > Br. > > Umar >-- Denis Cardon Tranquil IT Systems Les Espaces Jules Verne, bâtiment A 12 avenue Jules Verne 44230 Saint Sébastien sur Loire tel : +33 (0) 2.40.97.57.55 http://www.tranquil-it-systems.fr
Thanks Denis, Br. Umar On Fri, Jul 31, 2015 at 6:55 PM, Denis Cardon < denis.cardon at tranquil-it-systems.fr> wrote:> Hi Umar, > > I am using SAMBA 4.1.6 AD on Ubuntu 14.04.02, I am trying to use the Active >> Directory Domains and Trust tool but it keeps giving me this message. >> > > Domain trust is not yet supported in that old samba version. There is some > support in the next release 4.3. From the annonce mail [1] of the Samba > 4.3rc1: > > Improved support for trusted domains (as AD DC) > ----------------------------------------------- > > The support for trusted domains/forests has improved a lot. > > samba-tool got "domain trust" subcommands to manage trusts: > > create - Create a domain or forest trust. > delete - Delete a domain trust. > list - List domain trusts. > namespaces - Manage forest trust namespaces. > show - Show trusted domain details. > validate - Validate a domain trust. > > External trusts between individual domains work in both ways > (inbound and outbound). The same applies to root domains of > a forest trust. The transitive routing into the other forest > is fully functional for kerberos, but not yet supported for NTLMSSP. > > While a lot of things are working fine, there are currently a few > limitations: > > - Both sides of the trust need to fully trust each other! > - No SID filtering rules are applied at all! > - This means DCs of domain A can grant domain admin rights > in domain B. > - It's not possible to add users/groups of a trusted domain > into domain groups. > > Cheers, > > Denis > > [1] https://download.samba.org/pub/samba/rc/WHATSNEW-4.3.0rc1.txt > > > > I am trying to fix this issue: >> >> The requested operation cannot be completed. The computer must be trusted >> for delegation and the current user account must be configured to allow >> delegation. >> (SQLEditors) >> >> Would you please help how I can solve this issue? >> >> Br. >> >> Umar >> >> > -- > Denis Cardon > Tranquil IT Systems > Les Espaces Jules Verne, bâtiment A > 12 avenue Jules Verne > 44230 Saint Sébastien sur Loire > tel : +33 (0) 2.40.97.57.55 > http://www.tranquil-it-systems.fr > >-- Umar Draz Network Architect