[Samba] Trust Relationships using Samba

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri, 23 May 2003, Dave Alva-Hill wrote:

> Like many, I administer multiple LANs connected together using NT trust
> relationships.  This was implemented about 4 years ago.  I now have the
> occasion to consider performing this same task again, but this time, I
> would like to implement it solely through samba - no Microsoft PDCs
> anywhere.
> 
> I have read documentation on samba.org regarding NT-style trust
> relationships and am now wondering, can I do what I want to?  I already
> have successfully implemented 2 samba servers, but they are not PDCs.  
> They merely act as file servers.  I seem to remember, and it appears to
> be true (according to samba.org) that trust relationships are a
> challenge.
> 
> Please provide any helpful feedback that you may have.

These are almost complete in Samba 3.0 snapshots.  The main catch
is getting winbindd to be able to allocate uid/gid's for trusted 
users/groups.  See the updated Samba HOWTO collection for more 
details.

(http://samba.org/~jht/MT4migration/Samba-HOWTO-Collection.pdf)





cheers, jerry
 ----------------------------------------------------------------------
 Hewlett-Packard            ------------------------- http://www.hp.com
 SAMBA Team                 ---------------------- http://www.samba.org
 GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
 "You can never go home again, Oatman, but I guess you can shop there."  
                            --John Cusack - "Grosse Point Blank" (1997)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+03XLIR7qMdg1EfYRAqV9AJ9GU09bfNHnwyV8DKU6SX8vi+MOHwCg8z/u
6/vYun8ir5j2t7KlEdoXHmc=
=Revp
-----END PGP SIGNATURE-----