[Samba] Inter Domain Trusts

[Marcos Amorim]

Hi,

We've tried to set two servers PDC Samba 3 + OpenLDAP as following below:

Network_1 192.168.42.0/24
Network_2 192.168.43.0/24
PDC1(PRJLINUX1) - 192.168.42.2 - NETBIOS NAME = PRJARQ6
PDC2(PRJLINUX2) - 192.168.43.251 - NETBIOS NAME = PRJARQ5
OpenLDAP 2.2.24
Samba 3.0.14a Backports
Deban 3 Woody


OpenLDAP:

The servers are using the same DataBase and the PRJARQ6 is a Slave from
PRJARQ5.

The Networks are connected through VPN (FreesWan) and it's working.

I need to make set Truested RelationShip "Two-way" and here's the behavior
that was adopted:

First Step:  Trusted of PDC1 to PDC2:

In PDC1 (PRJLINUX1) - 192.168.42.2

	# smbldap-useradd -i prjlinux2$


In PDC2 (PRJLINUX2) - 192.168.43.251

	[root at prjarq5 /]# net rpc trustdom establish prjlinux2
	Password:
	Could not connect to server PRJARQ5
	Trust to domain PRJLINUX2 established

I did the same behavior to another Server, it's created Account Domain and
the Trusted and after they were showed  to Trusting
but when I'm going run the command to list Trusted and Trusting Domain I
get a message error as following:

PDC2 (PRJLINUX2)

[root at prjarq5 /var/log/samba]# net rpc trustdom list
Password:
Trusted domains list:

PRJLINUX2           S-1-5-21-4059743569-3322342921-590290203

Trusting domains list:

[2005/05/15 09:32:30, 0] utils/net_rpc.c:rpc_trustdom_list(4997)
  Couldn't enumerate accounts. Error was: NT_STATUS_UNSUCCESSFUL


PDC1 (PRJLINUX1)
[root at prjarq6 /var/log/samba]# net rpc trustdom list
Password:
Trusted domains list:

PRJLINUX1           S-1-5-21-3363276594-1951407936-208823051

Trusting domains list:

[2005/05/15 09:31:14, 0] utils/net_rpc.c:rpc_trustdom_list(4997)
  Couldn't enumerate accounts. Error was: NT_STATUS_UNSUCCESSFUL


I took it from the site:
http://info.ccone.at/INFO/Samba/InterdomainTrusts.html
Does Trusted/Trusting work in diferent Networks through VPN?


Marcos Amorim