search for: remotevalidation

...2016. FSMO roles were transferred to the new domain controller. Only after such actions was trust built between ADWIN.LOC and smbub.test. Validating outgoing trust... OK: LocalValidation: DC[\\dc01.adwin.loc] CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED Validating incoming trust... OK: RemoteValidation: DC[\\dc01.smbub.test] CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED Looks like we've encountered a trust-building bug Samba with Windows Server 2016. But we have no idea how to explore this bug. Has anyone encountered similar behavior? I sent a request to samba bugzilla account....

...DO created >> Setting supported encryption types on local TDO. >> Validating outgoing trust... >> OK: LocalValidation: DC[\\WIN-0ENAIPFH11A.testad1.company.com] >> CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED >> Validating incoming trust... >> ERROR: RemoteValidation: DC[] CONNECTION[WERR_NO_LOGON_SERVERS] >> TRUST[WERR_NO_LOGON_SERVERS] VERIFY_STATUS_RETURNED > >> root at testad2dc:/var/log/samba# samba-tool domain trust validate testad1 >> LocalDomain Netbios[TESTAD2] DNS[testad2.company.com] >> SID[S-1-5-21-1012147493-3366197983-1...

Hi, Having read the release notes on the status of trusts within samba, we see for 4.9 > "improved support for trusted domains" but we also always see these messages: > "Both sides of the trust need to fully trust each other!" and > "DCs of domain A can grant domain admin rights in domain B" What we would like to achieve is a one-way incoming trust

...n.loc --type=external -- direction=both --create-location=both -U truster at ADWIN.LOC Trust is built, but a validation error occurs. Validating outgoing trust... OK: LocalValidation: DC[\\dc01.adwin.loc] CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED Validating incoming trust... ERROR: RemoteValidation: DC[] CONNECTION[WERR_NO_LOGON_SERVERS] TRUST[WERR_NO_LOGON_SERVERS] VERIFY_STATUS_RETURNED As a result, on PC entered into the SMBUB.TEST, you can login with an account from the ADWIN.LOC, but on PC entered into the ADWIN.LO it's impossible to login with a user from the SMBUB.TEST domain. I&...

...ating local TDO. > Local TDO created > Setting supported encryption types on local TDO. > Validating outgoing trust... > OK: LocalValidation: DC[\\WIN-0ENAIPFH11A.testad1.company.com] CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED > Validating incoming trust... > ERROR: RemoteValidation: DC[] CONNECTION[WERR_NO_LOGON_SERVERS] TRUST[WERR_NO_LOGON_SERVERS] VERIFY_STATUS_RETURNED > root at testad2dc:/var/log/samba# samba-tool domain trust validate testad1 > LocalDomain Netbios[TESTAD2] DNS[testad2.company.com] SID[S-1-5-21-1012147493-3366197983-1829854343] > LocalTDO Netbio...

...cal TDO. >>>>> Validating outgoing trust... >>>>> OK: LocalValidation: DC[\\WIN-0ENAIPFH11A.testad1.company.com] >>>>> CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED >>>>> Validating incoming trust... >>>>> ERROR: RemoteValidation: DC[] CONNECTION[WERR_NO_LOGON_SERVERS] >>>>> TRUST[WERR_NO_LOGON_SERVERS] VERIFY_STATUS_RETURNED >>>> >>>>> root at testad2dc:/var/log/samba# samba-tool domain trust >> validate testad1 >>>>> LocalDomain Netbios[TESTAD2] DNS[testad2.co...

...Setting supported encryption types on local TDO. >>> Validating outgoing trust... >>> OK: LocalValidation: DC[\\WIN-0ENAIPFH11A.testad1.company.com] >>> CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED >>> Validating incoming trust... >>> ERROR: RemoteValidation: DC[] CONNECTION[WERR_NO_LOGON_SERVERS] >>> TRUST[WERR_NO_LOGON_SERVERS] VERIFY_STATUS_RETURNED >> >>> root at testad2dc:/var/log/samba# samba-tool domain trust validate testad1 >>> LocalDomain Netbios[TESTAD2] DNS[testad2.company.com] >>> SID[S-1-5-21-1012...

...ion types on local TDO. > >>> Validating outgoing trust... > >>> OK: LocalValidation: DC[\\WIN-0ENAIPFH11A.testad1.company.com] > >>> CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED > >>> Validating incoming trust... > >>> ERROR: RemoteValidation: DC[] CONNECTION[WERR_NO_LOGON_SERVERS] > >>> TRUST[WERR_NO_LOGON_SERVERS] VERIFY_STATUS_RETURNED > >> > >>> root at testad2dc:/var/log/samba# samba-tool domain trust > validate testad1 > >>> LocalDomain Netbios[TESTAD2] DNS[testad2.company.com] >...

...cryption types on local TDO. >>>> Validating outgoing trust... >>>> OK: LocalValidation: DC[\\WIN-0ENAIPFH11A.testad1.company.com] >>>> CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED >>>> Validating incoming trust... >>>> ERROR: RemoteValidation: DC[] CONNECTION[WERR_NO_LOGON_SERVERS] >>>> TRUST[WERR_NO_LOGON_SERVERS] VERIFY_STATUS_RETURNED >>> >>>> root at testad2dc:/var/log/samba# samba-tool domain trust validate >>>> testad1 >>>> LocalDomain Netbios[TESTAD2] DNS[testad2.company....

...;>>> Validating outgoing trust... >>>>>> OK: LocalValidation: DC[\\WIN-0ENAIPFH11A.testad1.company.com] >>>>>> CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED >>>>>> Validating incoming trust... >>>>>> ERROR: RemoteValidation: DC[] CONNECTION[WERR_NO_LOGON_SERVERS] >>>>>> TRUST[WERR_NO_LOGON_SERVERS] VERIFY_STATUS_RETURNED >>>>> >>>>>> root at testad2dc:/var/log/samba# samba-tool domain trust >>> validate testad1 >>>>>> LocalDomain Netbios[TES...