[Samba] NT4 machine trust breaks on a Samba-BDC

[Andrew Bartlett]

Mikko Kortelainen wrote:
> 
> Hello all,
> 
> We have Samba (2.2.5) running on three servers, each in a different
> subnet.  One of them is a PDC (domain master = yes). The Samba PDC is
> also the NIS master. The smbpasswd is replicated using rsync to the
> other machines that act as Samba BDCs (domain master = no). They are
> also NIS slave servers. The smbpasswd synchronization takes place
> automatically every time smbpasswd is updated, and the NIS maps are
> updated and pushed automatically to the slaves whenever a machine joins
> the domain.

> Anybody have any ideas or suggestions? Where should I start debugging?

Check that the domain SID is the same.  Sync secrets.tdb, or use the new
smbpasswd option (2.2.6) to 'suck' the SID from PDC to each BDC.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net