search for: verify_status_return

...was added to a domain ADWIN.LOC based on Windows Server 2016. FSMO roles were transferred to the new domain controller. Only after such actions was trust built between ADWIN.LOC and smbub.test. Validating outgoing trust... OK: LocalValidation: DC[\\dc01.adwin.loc] CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED Validating incoming trust... OK: RemoteValidation: DC[\\dc01.smbub.test] CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED Looks like we've encountered a trust-building bug Samba with Windows Server 2016. But we have no idea how to explore this bug. Has anyone encountered similar b...

...encryption types on remote TDO. >> Creating local TDO. >> Local TDO created >> Setting supported encryption types on local TDO. >> Validating outgoing trust... >> OK: LocalValidation: DC[\\WIN-0ENAIPFH11A.testad1.company.com] >> CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED >> Validating incoming trust... >> ERROR: RemoteValidation: DC[] CONNECTION[WERR_NO_LOGON_SERVERS] >> TRUST[WERR_NO_LOGON_SERVERS] VERIFY_STATUS_RETURNED > >> root at testad2dc:/var/log/samba# samba-tool domain trust validate testad1 >> LocalDomain Netbios[TESTAD...

Hi, Having read the release notes on the status of trusts within samba, we see for 4.9 > "improved support for trusted domains" but we also always see these messages: > "Both sides of the trust need to fully trust each other!" and > "DCs of domain A can grant domain admin rights in domain B" What we would like to achieve is a one-way incoming trust

...ated. > Setting supported encryption types on remote TDO. > Creating local TDO. > Local TDO created > Setting supported encryption types on local TDO. > Validating outgoing trust... > OK: LocalValidation: DC[\\WIN-0ENAIPFH11A.testad1.company.com] CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED > Validating incoming trust... > ERROR: RemoteValidation: DC[] CONNECTION[WERR_NO_LOGON_SERVERS] TRUST[WERR_NO_LOGON_SERVERS] VERIFY_STATUS_RETURNED > root at testad2dc:/var/log/samba# samba-tool domain trust validate testad1 > LocalDomain Netbios[TESTAD2] DNS[testad2.company.com] SI...

...>>>>> Local TDO created >>>>> Setting supported encryption types on local TDO. >>>>> Validating outgoing trust... >>>>> OK: LocalValidation: DC[\\WIN-0ENAIPFH11A.testad1.company.com] >>>>> CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED >>>>> Validating incoming trust... >>>>> ERROR: RemoteValidation: DC[] CONNECTION[WERR_NO_LOGON_SERVERS] >>>>> TRUST[WERR_NO_LOGON_SERVERS] VERIFY_STATUS_RETURNED >>>> >>>>> root at testad2dc:/var/log/samba# samba-tool domain...

...te TDO. >>> Creating local TDO. >>> Local TDO created >>> Setting supported encryption types on local TDO. >>> Validating outgoing trust... >>> OK: LocalValidation: DC[\\WIN-0ENAIPFH11A.testad1.company.com] >>> CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED >>> Validating incoming trust... >>> ERROR: RemoteValidation: DC[] CONNECTION[WERR_NO_LOGON_SERVERS] >>> TRUST[WERR_NO_LOGON_SERVERS] VERIFY_STATUS_RETURNED >> >>> root at testad2dc:/var/log/samba# samba-tool domain trust validate testad1 >>> Loc...

...t trust between domains samba-tool domain trust create adwin.loc --type=external -- direction=both --create-location=both -U truster at ADWIN.LOC Trust is built, but a validation error occurs. Validating outgoing trust... OK: LocalValidation: DC[\\dc01.adwin.loc] CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED Validating incoming trust... ERROR: RemoteValidation: DC[] CONNECTION[WERR_NO_LOGON_SERVERS] TRUST[WERR_NO_LOGON_SERVERS] VERIFY_STATUS_RETURNED As a result, on PC entered into the SMBUB.TEST, you can login with an account from the ADWIN.LOC, but on PC entered into the ADWIN.LO it's impossib...

...ting local TDO. > >>> Local TDO created > >>> Setting supported encryption types on local TDO. > >>> Validating outgoing trust... > >>> OK: LocalValidation: DC[\\WIN-0ENAIPFH11A.testad1.company.com] > >>> CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED > >>> Validating incoming trust... > >>> ERROR: RemoteValidation: DC[] CONNECTION[WERR_NO_LOGON_SERVERS] > >>> TRUST[WERR_NO_LOGON_SERVERS] VERIFY_STATUS_RETURNED > >> > >>> root at testad2dc:/var/log/samba# samba-tool domain trust > va...

...Creating local TDO. >>>> Local TDO created >>>> Setting supported encryption types on local TDO. >>>> Validating outgoing trust... >>>> OK: LocalValidation: DC[\\WIN-0ENAIPFH11A.testad1.company.com] >>>> CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED >>>> Validating incoming trust... >>>> ERROR: RemoteValidation: DC[] CONNECTION[WERR_NO_LOGON_SERVERS] >>>> TRUST[WERR_NO_LOGON_SERVERS] VERIFY_STATUS_RETURNED >>> >>>> root at testad2dc:/var/log/samba# samba-tool domain trust validate &g...

...;> Local TDO created >>>>>> Setting supported encryption types on local TDO. >>>>>> Validating outgoing trust... >>>>>> OK: LocalValidation: DC[\\WIN-0ENAIPFH11A.testad1.company.com] >>>>>> CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED >>>>>> Validating incoming trust... >>>>>> ERROR: RemoteValidation: DC[] CONNECTION[WERR_NO_LOGON_SERVERS] >>>>>> TRUST[WERR_NO_LOGON_SERVERS] VERIFY_STATUS_RETURNED >>>>> >>>>>> root at testad2dc:/var/log/samb...

Hi all, I was testing the 4.3.0 version to see what is available with trust relationship but except having my DCs telling me there are trust relationship and using the global catalog to perform search (but with only search for object in a.domain.tld when search is performed against dc.a.domain.tld) I can do nothing else. My own knowledge on that subject is quiet null so I come to you asking some

...ins forwards and backwards and I am able to connect a Windows 10 client to the Samba domain without any issues. The problem occurs when create a full external trust between the two domains. The trust is created successfully with samba-tool however the verify fails with TRUST[WERR_NO_LOGON_SERVERS] VERIFY_STATUS_RETURNED. The end result is a trust relation that fully works with Kerberos authentication (such as logging in on the trusted domain from a domain connected to the other) but this won't work with NTLM authentication outside of it's realm. I am constantly getting this error message in the wb-DOMAI...

...ins forwards and backwards and I am able to connect a Windows 10 client to the Samba domain without any issues. The problem occurs when create a full external trust between the two domains. The trust is created successfully with samba-tool however the verify fails with TRUST[WERR_NO_LOGON_SERVERS] VERIFY_STATUS_RETURNED. > > The end result is a trust relation that fully works with Kerberos authentication (such as logging in on the trusted domain from a domain connected to the other) but this won't work with NTLM authentication outside of it's realm. I am constantly getting this error message in the...