search for: uplevel

...erse) Details of the Trust: samba-tool domain trust show klingons LocalDomain Netbios[GVCC] DNS[gvcc.net] SID[S-1-5-21-1608159440-4144762864-1017073214] TrusteDomain: NetbiosName: KLINGONS DnsName: klingons.imp SID: S-1-5-21-3288560663-12659786-2782445548 Type: 0x2 (UPLEVEL) Direction: 0x3 (BOTH) Attributes: 0x8 (FOREST_TRANSITIVE) PosixOffset: 0x00000000 (0) kerb_EncTypes: 0x4 (RC4_HMAC_MD5) Namespaces[2] TDO[klingons.imp]: TLN: Status[Enabled] DNS[*.klingons.imp] DOM: Status[Enabled] DNS[klingons.imp] Netbios[KLINGONS]...

...bios[TESTAD2] DNS[testad2.company.com] >> SID[S-1-5-21-1012147493-3366197983-1829854343] >> TrustedDomain: > >> NetbiosName:    TESTAD1 >> DnsName:        testad1.company.com >> SID:            S-1-5-21-2509583006-2398556320-3264531554 >> Type:           0x2 (UPLEVEL) >> Direction:      0x3 (BOTH) >> Attributes:     0x4 (QUARANTINED_DOMAIN) >> PosixOffset:    0x00000000 (0) >> kerb_EncTypes:  0x18 (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96) >> root at testad2dc:/var/log/samba# wbinfo --online-status >> BUILTIN : active...

Hi, Having read the release notes on the status of trusts within samba, we see for 4.9 > "improved support for trusted domains" but we also always see these messages: > "Both sides of the trust need to fully trust each other!" and > "DCs of domain A can grant domain admin rights in domain B" What we would like to achieve is a one-way incoming trust

...show testad1 > LocalDomain Netbios[TESTAD2] DNS[testad2.company.com] SID[S-1-5-21-1012147493-3366197983-1829854343] > TrustedDomain: > NetbiosName: TESTAD1 > DnsName: testad1.company.com > SID: S-1-5-21-2509583006-2398556320-3264531554 > Type: 0x2 (UPLEVEL) > Direction: 0x3 (BOTH) > Attributes: 0x4 (QUARANTINED_DOMAIN) > PosixOffset: 0x00000000 (0) > kerb_EncTypes: 0x18 (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96) > root at testad2dc:/var/log/samba# wbinfo --online-status > BUILTIN : active connection > TESTAD2...

...came out, I could build into a directory that was stamped with the time and version and ssl inclusion status. Every time I built I would create a new directory, and I would be able to everything to fall back with, in the old directories. Being that this is production, I wanted to be able to uplevel (or fall back) quickly. I should say I build on a build machine, since I don't want to have a compiler on the production machines; I specified the stamped unique name of this build directory du jour using the --prefix confiigure parm The configure, make and make install steps all go fine....

...-3366197983-1829854343] >>>>> TrustedDomain: >>>> >>>>> NetbiosName:    TESTAD1 >>>>> DnsName:        testad1.company.com >>>>> SID:            S-1-5-21-2509583006-2398556320-3264531554 >>>>> Type:           0x2 (UPLEVEL) >>>>> Direction:      0x3 (BOTH) >>>>> Attributes:     0x4 (QUARANTINED_DOMAIN) >>>>> PosixOffset:    0x00000000 (0) >>>>> kerb_EncTypes:  0x18 >> (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96) >>>>> root at testad...

...ompany.com] >>> SID[S-1-5-21-1012147493-3366197983-1829854343] >>> TrustedDomain: >> >>> NetbiosName:    TESTAD1 >>> DnsName:        testad1.company.com >>> SID:            S-1-5-21-2509583006-2398556320-3264531554 >>> Type:           0x2 (UPLEVEL) >>> Direction:      0x3 (BOTH) >>> Attributes:     0x4 (QUARANTINED_DOMAIN) >>> PosixOffset:    0x00000000 (0) >>> kerb_EncTypes:  0x18 (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96) >>> root at testad2dc:/var/log/samba# wbinfo --online-status >&g...

...-1-5-21-1012147493-3366197983-1829854343] > >>> TrustedDomain: > >> > >>> NetbiosName:    TESTAD1 > >>> DnsName:        testad1.company.com > >>> SID:            S-1-5-21-2509583006-2398556320-3264531554 > >>> Type:           0x2 (UPLEVEL) > >>> Direction:      0x3 (BOTH) > >>> Attributes:     0x4 (QUARANTINED_DOMAIN) > >>> PosixOffset:    0x00000000 (0) > >>> kerb_EncTypes:  0x18 > (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96) > >>> root at testad2dc:/var/log/samba...

...SID[S-1-5-21-1012147493-3366197983-1829854343] >>>> TrustedDomain: >>> >>>> NetbiosName:    TESTAD1 >>>> DnsName:        testad1.company.com >>>> SID:            S-1-5-21-2509583006-2398556320-3264531554 >>>> Type:           0x2 (UPLEVEL) >>>> Direction:      0x3 (BOTH) >>>> Attributes:     0x4 (QUARANTINED_DOMAIN) >>>> PosixOffset:    0x00000000 (0) >>>> kerb_EncTypes:  0x18 >>>> (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96) >>>> root at testad2dc:/var/lo...

...>>>>>> TrustedDomain: >>>>> >>>>>> NetbiosName:    TESTAD1 >>>>>> DnsName:        testad1.company.com >>>>>> SID:            S-1-5-21-2509583006-2398556320-3264531554 >>>>>> Type:           0x2 (UPLEVEL) >>>>>> Direction:      0x3 (BOTH) >>>>>> Attributes:     0x4 (QUARANTINED_DOMAIN) >>>>>> PosixOffset:    0x00000000 (0) >>>>>> kerb_EncTypes:  0x18 >>> (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96) >>>&gt...