search for: localvalidation

...6320-3264531554] >> Creating remote TDO. >> Remote TDO created. >> Setting supported encryption types on remote TDO. >> Creating local TDO. >> Local TDO created >> Setting supported encryption types on local TDO. >> Validating outgoing trust... >> OK: LocalValidation: DC[\\WIN-0ENAIPFH11A.testad1.company.com] >> CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED >> Validating incoming trust... >> ERROR: RemoteValidation: DC[] CONNECTION[WERR_NO_LOGON_SERVERS] >> TRUST[WERR_NO_LOGON_SERVERS] VERIFY_STATUS_RETURNED > >> ro...

Hi, Having read the release notes on the status of trusts within samba, we see for 4.9 > "improved support for trusted domains" but we also always see these messages: > "Both sides of the trust need to fully trust each other!" and > "DCs of domain A can grant domain admin rights in domain B" What we would like to achieve is a one-way incoming trust

...ut the following test - A domain controller based on Windows Server 2019 was added to a domain ADWIN.LOC based on Windows Server 2016. FSMO roles were transferred to the new domain controller. Only after such actions was trust built between ADWIN.LOC and smbub.test. Validating outgoing trust... OK: LocalValidation: DC[\\dc01.adwin.loc] CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED Validating incoming trust... OK: RemoteValidation: DC[\\dc01.smbub.test] CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED Looks like we've encountered a trust-building bug Samba with Windows Server 2016....

...] SID[S-1-5-21-2509583006-2398556320-3264531554] > Creating remote TDO. > Remote TDO created. > Setting supported encryption types on remote TDO. > Creating local TDO. > Local TDO created > Setting supported encryption types on local TDO. > Validating outgoing trust... > OK: LocalValidation: DC[\\WIN-0ENAIPFH11A.testad1.company.com] CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED > Validating incoming trust... > ERROR: RemoteValidation: DC[] CONNECTION[WERR_NO_LOGON_SERVERS] TRUST[WERR_NO_LOGON_SERVERS] VERIFY_STATUS_RETURNED > root at testad2dc:/var/log/samba# sam...

...ed. >>>>> Setting supported encryption types on remote TDO. >>>>> Creating local TDO. >>>>> Local TDO created >>>>> Setting supported encryption types on local TDO. >>>>> Validating outgoing trust... >>>>> OK: LocalValidation: DC[\\WIN-0ENAIPFH11A.testad1.company.com] >>>>> CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED >>>>> Validating incoming trust... >>>>> ERROR: RemoteValidation: DC[] CONNECTION[WERR_NO_LOGON_SERVERS] >>>>> TRUST[WERR_NO_LOGON_S...

...eating remote TDO. >>> Remote TDO created. >>> Setting supported encryption types on remote TDO. >>> Creating local TDO. >>> Local TDO created >>> Setting supported encryption types on local TDO. >>> Validating outgoing trust... >>> OK: LocalValidation: DC[\\WIN-0ENAIPFH11A.testad1.company.com] >>> CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED >>> Validating incoming trust... >>> ERROR: RemoteValidation: DC[] CONNECTION[WERR_NO_LOGON_SERVERS] >>> TRUST[WERR_NO_LOGON_SERVERS] VERIFY_STATUS_RETURNED &...

...; Remote TDO created. > >>> Setting supported encryption types on remote TDO. > >>> Creating local TDO. > >>> Local TDO created > >>> Setting supported encryption types on local TDO. > >>> Validating outgoing trust... > >>> OK: LocalValidation: DC[\\WIN-0ENAIPFH11A.testad1.company.com] > >>> CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED > >>> Validating incoming trust... > >>> ERROR: RemoteValidation: DC[] CONNECTION[WERR_NO_LOGON_SERVERS] > >>> TRUST[WERR_NO_LOGON_SERVERS] VERI...

...gt;> Remote TDO created. >>>> Setting supported encryption types on remote TDO. >>>> Creating local TDO. >>>> Local TDO created >>>> Setting supported encryption types on local TDO. >>>> Validating outgoing trust... >>>> OK: LocalValidation: DC[\\WIN-0ENAIPFH11A.testad1.company.com] >>>> CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED >>>> Validating incoming trust... >>>> ERROR: RemoteValidation: DC[] CONNECTION[WERR_NO_LOGON_SERVERS] >>>> TRUST[WERR_NO_LOGON_SERVERS] VERIFY_S...

...> Setting supported encryption types on remote TDO. >>>>>> Creating local TDO. >>>>>> Local TDO created >>>>>> Setting supported encryption types on local TDO. >>>>>> Validating outgoing trust... >>>>>> OK: LocalValidation: DC[\\WIN-0ENAIPFH11A.testad1.company.com] >>>>>> CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED >>>>>> Validating incoming trust... >>>>>> ERROR: RemoteValidation: DC[] CONNECTION[WERR_NO_LOGON_SERVERS] >>>>>> TRUST...

...s are resolved equally on both domain controllers. I'm building trust trust between domains samba-tool domain trust create adwin.loc --type=external -- direction=both --create-location=both -U truster at ADWIN.LOC Trust is built, but a validation error occurs. Validating outgoing trust... OK: LocalValidation: DC[\\dc01.adwin.loc] CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED Validating incoming trust... ERROR: RemoteValidation: DC[] CONNECTION[WERR_NO_LOGON_SERVERS] TRUST[WERR_NO_LOGON_SERVERS] VERIFY_STATUS_RETURNED As a result, on PC entered into the SMBUB.TEST, you can login with an acc...

Hi all, I was testing the 4.3.0 version to see what is available with trust relationship but except having my DCs telling me there are trust relationship and using the global catalog to perform search (but with only search for object in a.domain.tld when search is performed against dc.a.domain.tld) I can do nothing else. My own knowledge on that subject is quiet null so I come to you asking some

I've read the documentation that domain trusts should be fully supported with both Kerberos and NTLM authentication. I've created a new 2016 domain on a Windows box and created a Samba domain on a Linux box with a BIND9_DLZ backend. Both servers can resolve both DNS domains forwards and backwards and I am able to connect a Windows 10 client to the Samba domain without any issues. The