[Samba] accessing samba 3.0b2 using an account from a trusteddomain

[John H Terpstra]

On Wed, 9 Jul 2003, Eamonn Hamilton wrote:

Please email me your smb.conf file. If this looks OK then I'll ask you to
file a bug report.

Cheers,
John T.


> OK, here goes :
>
> In the setup I'm using, the samba server is located in a resource domain
> with one way trusts to a number of account domains.
>
> When winbindd is started, it scans for trusted domains and adds them
> with the appropriate SIDs, all seems hunky dory. I can examine the
> resources on the system using an account in the same domain as the
> server thus :
>
> smbclient -U account -L server
>
> with the appropriate password and it works.
>
> When I try and use an account from the trusted domain, using
>
> smbclient -U myname -W user-domain -L server
>
> it reports back
> session setup failed: NT_STATUS_CANT_ACCESS_DOMAIN_INFO
>
> and the log shows
>
> [2003/07/09 15:04:50, 0] nsswitch/winbindd_pam.c:get_trust_pw(78)
>   get_trust_pw: could not fetch trust account password for my domain
> USER-DOMAIN
>
>
> The server itself is joined to the domain OK, and a net rpc testjoin
> reports OK.Security is set to domain, with the password server being set
> to *. A local WINS server is being used, and seems to be operating fine.
> I've got restrict anonymous set to 1 and username maps set in a file,
> however I've tried without them and it dos the same.
>
> What other information do you require, maybe a debug trace?
>
> Cheers,
> Eamonn
>
>
> I then try and list the services on
> On Wed, 2003-07-09 at 14:37, John H Terpstra wrote:
> > On Wed, 9 Jul 2003, Eamonn Hamilton wrote:
> >
> > > Hi Folks
> > >
> > > When I try and access a samba 3.0b2 server using an account from a
> > > trusted domain, samba denies access and reports "could not fetch trust
> > > account password".
> > >
> > > The server is a member server in a domain with a one way trust
> > > relationship to a user domain, which I can list the accounts from using
> > > getent passwd, and net rpc testjoin says the trust is fine.
> > >
> > > Does this work yet, as I remember some problems with winbind a while
> > > back?
> >
> > Please provide precise details of how you have tested this. It should
> > work - at least it did shortly before Beta2 when I last tested this.
> > Please help us to nail this with enough information so we can reproduce
> > the problem. Thanks.
> >
> >
> > - John T.
>

-- 
John H Terpstra
Email: jht at samba.org