[Samba] Domain Trust on ADS.

[Gaurang Pandya]

Hi Jerry,

Here is the output for debug level 10. Though there
are so many things there (ofcourse) I am pasting only
few line which I think will give you clue. If you need
any more of those please tel me.

rpc_api_pipe: len left: 0 smbtrans read: 48
rpc_api_pipe: fragment first and last both set
000018 samr_io_r_connect
    000018 smb_io_pol_hnd connect_pol
        0018 data1: 00000000
        001c data2: 00000000
        0020 data3: 0000
        0022 data4: 0000
        0024 data5: 00 00 00 00 00 00 00 00
    002c status: NT_STATUS_ACCESS_DENIED
refresh_sequence_number: backend returned 0xc0000022
refresh_sequence_number: seq number is now -1
client_write: wrote 1304 bytes.
client_write: need to write 38 extra data bytes.
client_write: wrote 38 bytes.
client_write: client_write: complete response written.
read failed on sock 11, pid 939: EOF

Thanks,

Gaurang.

--- "Gerald (Jerry) Carter" <jerry at samba.org> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Gaurang Pandya wrote:
> | Hi ,
> |
> | I recently added winbind support to my samba box.
> My
> | samba box is member of ADS domain
> child.parent.com.
> | Now when I check wbinfo -g or wbinfo -u I am
> seeing
> | groups or users of parent.com domain and not
> | child.parent.com domain. I have added "allow
> trusted
> | domain = yes" still no luck. When I try wbinfo
> | -sequence i see..
> |
> | parent:12434 {some numbers}
> | child: DISCONNECT
> |
> | wonder when my box is member of child how comes
> its
> | showing users only of parent comain??
> |
> | I was searching through google and came to know
> many
> | other peoples have also faced same issue but did
> not
> | see any solution anywhere.
> |
> | Box Info:
> | FreeBSD 5.1 samba 2.2.8a
> 
> You really need to bump up to 3.0.0 since winbindd
> has seen a lot of improvements in this area.
> 
> Short of upgrading, you will need to look at a level
> 10 debug
> log from winbindd and figure out when and why
> winbindd is
> disconnecting the sequence number.  I would also
> reommend
> - --enable-winbind-ldap-hack when you compile 2.2 if
> you
> are a member of a natiuve mode AD domain.
> 
> Good luck.
> 
> 
> 
> cheers, jerry
> 
> 
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.1 (GNU/Linux)
> Comment: Using GnuPG with Mozilla -
> http://enigmail.mozdev.org
> 
>
iD8DBQE/2PuhIR7qMdg1EfYRAg04AJ9dkd3ZGmVjADdBjJHcPpcf62AkiwCg3KyB
> /NHnDgLXqGeS+vtc1Dj1X/M=
> =iJSQ
> -----END PGP SIGNATURE-----
> 


__________________________________
Do you Yahoo!?
New Yahoo! Photos - easier uploading and sharing.
http://photos.yahoo.com/