search for: kerb_enctypes

...SID[S-1-5-21-1608159440-4144762864-1017073214] TrusteDomain: NetbiosName: KLINGONS DnsName: klingons.imp SID: S-1-5-21-3288560663-12659786-2782445548 Type: 0x2 (UPLEVEL) Direction: 0x3 (BOTH) Attributes: 0x8 (FOREST_TRANSITIVE) PosixOffset: 0x00000000 (0) kerb_EncTypes: 0x4 (RC4_HMAC_MD5) Namespaces[2] TDO[klingons.imp]: TLN: Status[Enabled] DNS[*.klingons.imp] DOM: Status[Enabled] DNS[klingons.imp] Netbios[KLINGONS] SID[S-1-5-21-3288560663-12659786-2782445548] Regards, Heinz

...main trust show KRB.REALM LocalDomain Netbios[AD] DNS[ad.domain] SID[S-1-5-21-611510720-3146064378-2947260547] TrustedDomain: NetbiosName:    KRB.REALM SID:            None Type:           0x3 (MIT) Direction:      0x2 (OUTBOUND) Attributes:     0x1 (NON_TRANSITIVE) PosixOffset:    0x00000000 (0) kerb_EncTypes:  0x18 (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96) However I have already noticed one thing that is broken... if I restart samba on the Samba DC after creating the realm trust, winbind immediately dies with the following (and I can't see a workaround - meaning this isn't a viable...

...e:    TESTAD1 >> DnsName:        testad1.company.com >> SID:            S-1-5-21-2509583006-2398556320-3264531554 >> Type:           0x2 (UPLEVEL) >> Direction:      0x3 (BOTH) >> Attributes:     0x4 (QUARANTINED_DOMAIN) >> PosixOffset:    0x00000000 (0) >> kerb_EncTypes:  0x18 (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96) >> root at testad2dc:/var/log/samba# wbinfo --online-status >> BUILTIN : active connection >> TESTAD2 : active connection >> TESTAD1 : active connection > >> root at testad2dc:/var/log/samba# wbinfo -u --doma...

Hi, Having read the release notes on the status of trusts within samba, we see for 4.9 > "improved support for trusted domains" but we also always see these messages: > "Both sides of the trust need to fully trust each other!" and > "DCs of domain A can grant domain admin rights in domain B" What we would like to achieve is a one-way incoming trust

...stedDomain: > NetbiosName: TESTAD1 > DnsName: testad1.company.com > SID: S-1-5-21-2509583006-2398556320-3264531554 > Type: 0x2 (UPLEVEL) > Direction: 0x3 (BOTH) > Attributes: 0x4 (QUARANTINED_DOMAIN) > PosixOffset: 0x00000000 (0) > kerb_EncTypes: 0x18 (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96) > root at testad2dc:/var/log/samba# wbinfo --online-status > BUILTIN : active connection > TESTAD2 : active connection > TESTAD1 : active connection > root at testad2dc:/var/log/samba# wbinfo -u --domain=TESTAD1 > root at...

...gt;> SID:            S-1-5-21-2509583006-2398556320-3264531554 >>>>> Type:           0x2 (UPLEVEL) >>>>> Direction:      0x3 (BOTH) >>>>> Attributes:     0x4 (QUARANTINED_DOMAIN) >>>>> PosixOffset:    0x00000000 (0) >>>>> kerb_EncTypes:  0x18 >> (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96) >>>>> root at testad2dc:/var/log/samba# wbinfo --online-status >>>>> BUILTIN : active connection >>>>> TESTAD2 : active connection >>>>> TESTAD1 : active connection >>...

...nsName:        testad1.company.com >>> SID:            S-1-5-21-2509583006-2398556320-3264531554 >>> Type:           0x2 (UPLEVEL) >>> Direction:      0x3 (BOTH) >>> Attributes:     0x4 (QUARANTINED_DOMAIN) >>> PosixOffset:    0x00000000 (0) >>> kerb_EncTypes:  0x18 (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96) >>> root at testad2dc:/var/log/samba# wbinfo --online-status >>> BUILTIN : active connection >>> TESTAD2 : active connection >>> TESTAD1 : active connection >> >>> root at testad2dc:/var/log/...

....com > >>> SID:            S-1-5-21-2509583006-2398556320-3264531554 > >>> Type:           0x2 (UPLEVEL) > >>> Direction:      0x3 (BOTH) > >>> Attributes:     0x4 (QUARANTINED_DOMAIN) > >>> PosixOffset:    0x00000000 (0) > >>> kerb_EncTypes:  0x18 > (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96) > >>> root at testad2dc:/var/log/samba# wbinfo --online-status > >>> BUILTIN : active connection > >>> TESTAD2 : active connection > >>> TESTAD1 : active connection > >> > >...

...ompany.com >>>> SID:            S-1-5-21-2509583006-2398556320-3264531554 >>>> Type:           0x2 (UPLEVEL) >>>> Direction:      0x3 (BOTH) >>>> Attributes:     0x4 (QUARANTINED_DOMAIN) >>>> PosixOffset:    0x00000000 (0) >>>> kerb_EncTypes:  0x18 >>>> (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96) >>>> root at testad2dc:/var/log/samba# wbinfo --online-status >>>> BUILTIN : active connection >>>> TESTAD2 : active connection >>>> TESTAD1 : active connection >>> &...

...    S-1-5-21-2509583006-2398556320-3264531554 >>>>>> Type:           0x2 (UPLEVEL) >>>>>> Direction:      0x3 (BOTH) >>>>>> Attributes:     0x4 (QUARANTINED_DOMAIN) >>>>>> PosixOffset:    0x00000000 (0) >>>>>> kerb_EncTypes:  0x18 >>> (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96) >>>>>> root at testad2dc:/var/log/samba# wbinfo --online-status >>>>>> BUILTIN : active connection >>>>>> TESTAD2 : active connection >>>>>> TESTAD1 : active...