[Samba] At 4 a.m. it finally worked...Samba 3, interdomain trust, ldap, winbind

[Fermín Galán]

Thanks very much for the help!

I have used a simplified variant of your procedure (no LDAP, no winbind) to
establish the trust relationship between the two domains (a WinNT one and a
Samba3 one), but I'm having problems when users of Samba domain try to
access to shared resources of the WinNT domain (I set permission in the
share for the users on the other domain, but when they try accessing
connection fails).

The mapping of Domain groups to UNIX groups in the Samba domain is made
through net groupmap. Is really needed to use winbind?

The following error message appears in the logs. I think that it could be
related with my problem, but I don't understand why because I'm using net
groupmap.

[2003/11/21 13:08:26, 0] rpc_server/srv_util.c:get_domain_user_groups(371)
  get_domain_user_groups: primary gid of user [testuser] is not a Domain
group !
  get_domain_user_groups: You should fix it, NT doesn't like that

I tell you about this because I think that you maybe have face similar
problems in your experience.

Thanks again!

------
Fermín

-----Mensaje original-----
De: carl at hilinski.net [mailto:carl at hilinski.net] 
Enviado el: miércoles, 26 de noviembre de 2003 15:51
Para: Fermín Galán
Asunto: RE: [Samba] At 4 a.m. it finally worked...Samba 3, interdomain
trust,ldap, winbind

add a slash to the end of the url. It should be:
http://www.hilinski.net/samba/

I am having another person do an install (at this minute) from my
instructions to double check the documentation. One thing I've found right
off is that it is less complicated to install the samba 3.0 rpm than it is
to compile it from source and have to change the paths and stuff.


Fermín Galán <fermin.galan at agora-2000.com> wrote ..
> > I did spend the time to write up documentation on how to do this (I
> > shouldn't say I wrote it...I took a lot of bits and pieces from various
> > sources and compiled it all into one document). If anyone is interested,
> > check out the stuff at http://www.hilinski.net/samba . The documentation
> > is there, along with the configuration files I used.
> 
> I'm interested in that documentation, but the link does not seem to
work...
> :( 
> 
> ------
> Fermín