[Samba] Re: Trusting and trusted domain (home mapping) problem

[Adrian Chow]

Hi Igor,

I got stuck now.  I did my best.  I got stuck at the winbind which I suspected is the reason why the domainA_computer cannot map the domain_B user's home directory.

1.  What are the settings of your winbind?
2.  Do you use only "winbind" in your libnss_ldap or use "ldap" as well?
3.  My winbind works with :-
(For both sides)
wbinfo -t
wbinfo -p
wbinfo -u
wbinfo -g
getent passwd
(For DomainA)
"getent group" shows all the local groups and also the groups shown in "wbinfo -g"
(For DomainB)
"getent group" shows all the local groups and only the GUESTs group.  Very weird.  The rest of the groups in "wbinfo -g" does not come up. 

The logs is something like this:-
-----------------------------------

nsswitch/winbindd_group.c:fill_grent_mem(133)
  could not lookup membership for group rid S-1-5-21-1803233979-822103454-943392455-3005 in domain STAFF (error: NT_STATUS_NO_SUCH_GROUP)
[2004/11/01 00:13:10, 0] nsswitch/winbindd_group.c:winbindd_getgrent(795)
  could not lookup domain group STAFF\wheel

---------------------------------------


Any ideas what had happened?

Thanks.

adrian