Need advice on using security=domain between two domains

[Greg Dickie]

Hi Eric,

   Your samba machine must join the domain for the settings you are using.

You can do this by creating the machine account on the PDC and then doing
smbpasswd -j DOMAIN2 -r DOMAIN2_PDC

after that should work OK.

Greg 

On 14-Jun-99 Eric Boehm wrote:
> Hello,
> 
> I have a problem that I am not sure how to solve or if it can be solved
> 
> Our users are created under one domain which spans several geographic sites
> (DOMAIN1). Machine accounts (including the samba server machine account) are
> created under another domain which is local to our site (DOMAIN2).
> 
> A trust relationship has been set up so that users can DOMAIN1 can access
> resources in DOMAIN2.
> 
> I've tried setting (in smb.conf)
> 
> workgroup = DOMAIN2
> security  = domain
> encrypt passwords = yes
> password server = DOMAIN2_PDC 
> 
> and this does not work (as is expected).
> 
> However,
> 
> workgroup = DOMAIN1
> security  = domain
> encrypt passwords = yes
> password server = DOMAIN1_PDC 
> 
> doesn't seem to work either.
> 
> Is this something that can be done? Or must I use security = server?
> 
> -- 
> Eric M. Boehm                               boehm at nortelnetworks.com

---------------------------------------------------------------------
Greg Dickie
Just A Guy*
*from discreet (the logic is gone)
Montreal 
(514) 954-7171
greg at discreet.com