Samba 3.0.23pre1 Available for Download
Ken Stone
ken at sdd.hp.com
Mon Apr 24 20:59:42 GMT 2006
> Volker Lendecke wrote:
> > On Mon, Apr 24, 2006 at 09:55:51AM -0400, William Jojo wrote:
> >> - User ACDEV\billtest denied access to machine joined to DEVEX with
> >> following log snip (this worked in 3.0.21c). [DEVEX trusts ACDEV. Seems that
> >> ACDEV\billtest is being mapped to additional DEVEX-513 Domain User group
> >> SID. DEVEX domain has "winbind trusted domains only=yes" since we get user
> >> information from shared POSIX user LDAP database in the underlying AIX
> >> infrastructure.]:
> >
> > To fully understand: All DC's are Samba, or is Windows
> > involved? Can we get the debug level 10 logs of the complete
> > auths on both DCs and the member?
>
> Volker, The DC's are Windows 2003 SP1. trust me :-)
> But the user is mapped mapped to a local unix account.
> So the token is created locally and not from the PAC
> or NET_USER_INFO_3.
>
> PS: I think you sent your reply to Bill by mistake.
> Ken Stone was the original poster.
Nope ... two seperate issues ... The one above about multiple
DC's and trust relationships really is from Bill ...
-- Ken
More information about the samba-technical
mailing list