[Samba] Samba 3 with multiple DNS domains

[Spirgi, Flavio]

Hi all,

we have a windows domain running in native mode and a samba box running samba
3.0.2a and several DNS domains. I configured samba to work as a fileserver
with ads support with the realm doma.big-org.COM. We have DNS-A-Records for
this server (sambabox.doma.big-org.com and sambabox.doma.com) and two
DNS-CNAME-Records (jobnetdev.ch.domaintra.net pointing to sambabox.doma.com
and jobnetdev.doma.big-org.com pointing to sambabox.doma.big-org.com) all
pointing to the same IP-Address. And a share on the samba box named jobnet.
Now:

\\sambabox.doma.big-org.com\jobnet works fine and authenticates the user with
ads
\\sambabox\jobnet works too
\\sambabox.doma.com\jobnet fails with NT_STATUS_CANT_ACCESS_DOMAIN_INFO
\\jobnetdev.ch.domaintra.net\jobnet fails with
NT_STATUS_CANT_ACCESS_DOMAIN_INFO
\\jobnetdev.doma.big-org.com\jobnet fails with
NT_STATUS_CANT_ACCESS_DOMAIN_INFO

We tried everything but in the latter case samba does not seem to ask kerberos
at all. It seems to me, that if it asks kerberos, then it is going to work,
else not. Is this a known point or is there something I can do about it at
all? We can dig into it but I like first to ask if anyone knows this problem
already.

Regards and thanks

Flavio



==============================================================================
- NOTICE -

This message may contain confidential, proprietary or legally privileged 
information and is intended only for the use of the addressee named above.
No confidentiality or privilege is waived or lost by any mistransmission.
If you are not the intended recipient of this message you are hereby 
notified that you must not use, disseminate, copy it in any form or take
any action in reliance on it.  If you have received this message in error
please delete it and any copies of it and notify CREDIT SUISSE ASSET
MANAGEMENT
immediately.

Any views expressed in this message are those of the individual sender, 
except where the message specifically states otherwise and the sender is 
authorized to state them to be the views of CREDIT SUISSE ASSET MANAGEMENT.

CREDIT SUISSE GROUP, CREDIT SUISSE FIRST BOSTON, and each legal entity in
the CREDIT SUISSE FIRST BOSTON or CREDIT SUISSE ASSET MANAGEMENT  business
units of CREDIT SUISSE FIRST BOSTON reserve the right to monitor all e-mail
communications through its networks.

==============================================================================