search for: trusteddom

Hi, in our setup, we have a number of AD domains with an exisiting one-way trust between the local domain of the system (which I will call LOCALDOM in the following) and the domain containing the user accounts (which I will call TRUSTEDDOM in the following). The domain controllers run Windows Server 2012. Beginning with samba 4.4 we have an issue with authentication through pam_winbind on the Linux clients when krb5_auth is enabled in pam_winbind.conf (which worked in samba 4.2). Login to the Linux systems always fails with "N...

...hosts wins host bcast # # Debug options # log level = 0 debug timestamp = No debug prefix timestamp = No debug hires timestamp = No debug pid = Yes debug uid = Yes # # Winbind options # winbind enum users = Yes winbind enum groups = Yes idmap domains = TRUSTEDDOM idmap config TRUSTEDDOM:backend = ldap idmap config TRUSTEDDOM:default = Yes idmap config TRUSTEDDOM:ldap_base_dn = ou=TRUSTEDDOM,ou=Idmaps,dc=x-files,dc=fr idmap config TRUSTEDDOM:ldap_user_dn = cn=SambaAdmin,dc=x-files,dc=fr idmap config TRUSTEDDOM:ldap_url = ldap://localhost/ idmap con...

...am testing now with a 'full' two-way trust, and everyhing seemed to work, including the tests from samba-tool and from windows "domains and trusts" perspective. From an administrative point of view, the fact that your have to add groupmembers using their SID instead of "TRUSTEDDOM\username" seems a bit cumbersome. Let's hope that in a future update, it will be possible to use usernames from the other domain. Also it seems that group adds in samba domain2 are not reflected back to ADUC in TRUSTEDDOM, even though for now I am testing with a full two-way trust. Bu...

...tad1.company.com] >>>> >>>>> root at testad2dc:/var/log/samba# samba-tool domain trust >> show testad1 >>>>> LocalDomain Netbios[TESTAD2] DNS[testad2.company.com] >>>>> SID[S-1-5-21-1012147493-3366197983-1829854343] >>>>> TrustedDomain: >>>> >>>>> NetbiosName:    TESTAD1 >>>>> DnsName:        testad1.company.com >>>>> SID:            S-1-5-21-2509583006-2398556320-3264531554 >>>>> Type:           0x2 (UPLEVEL) >>>>> Direction:      0x3 (BOTH...