[Samba] Cannot connect to Samba-3.0.23d (and earlier) from other trusted AD domains

[Jason Haar]

mark.cuthbert at yorkshirewater.co.uk wrote:
> I had something similar, I had to include all relevant kdcs in the realms
> section of krb5.conf to Authenticate from trusted domains to the domain the
> member server is in
>   
Bless you my son! That appears to have done the trick. Now to
thrash-test it :-)

I must say it surprises me. I know I can easily deduce the same values
that I just put into krb5.conf via some DNS lookups - I thought Samba
would have done the same... (actually you don't even need DNS for that:
Under ADS, realm == fqdn)


Thanks!

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1