Trusted domain keys in cache

[Rafal Szczesniak]

On Tue, Mar 30, 2004 at 12:12:21PM -0500, mike at jurney.org wrote:
> 
> I'm still working on the problem mentioned here:
> 
> http://lists.samba.org/archive/samba/2004-March/083416.html
> 
> To provide a little more detail, I'm running a configuration where the PDC
> and the WINS server are two different servers. 

Is one of them a Windows server ?

> I seem to have found the
> answer as to why the PDC for DOM1 is looking for users in DOM2 locally:
> 
> [2004/03/30 11:09:06, 5] rpc_server/srv_lsa_nt.c:init_lsa_trans_names(251)
>   init_lsa_trans_names: looking up sid S-1-5-21-1471593143-2095198635-341338803-500
> [2004/03/30 11:09:06, 10] passdb/lookup_sid.c:lookup_sid(107)
>   lookup_sid: winbind lookup for SID S-1-5-21-1471593143-2095198635-341338803-500 failed - trying local.
> 
> I've noticed that the WINS server for DOM1 contains the following cache
> entry:
> 
> Key: TDOM/DOM2       Timeout: 12:15:50       Value: S-1-5-21-1471593143-2095198635-341338803
> 
> but the PDC does not.  In fact, it's gencache contains no keys under TDOM/
> at all.  Is this why the SID lookup is failing?  Should the PDC gencache
> contain TDOM entries for trusted domains, or should the WINS server?

These gencache entries are for PDC.


-- 
cheers,

 Rafal Szczesniak      **mir[at]diament.ists.pwr.wroc.pl
 Samba Team member     mi***[at]samba.org
+---------------------------------------------------------+
 *BSD, GNU/Linux and Samba          http://www.samba.org
+---------------------------------------------------------+