[Samba] Authenticating another domain

[Don Meyer]

I remember seeing this before in my setup -- do you have REALMS 
properly defined in your krb5.conf file for all of these other 
domains?  Getting the domains properly represented in krb5.conf fixed 
the wbinfo --sequence output as well as allowed proper enumeration of 
users from the other (trusted/trusting) domains.   Trusted-only 
domains were still a problem, though...


At 10:18 AM 2/16/2006, Trimble, Ronald D wrote:
>Running " getent passwd EU\\inblr-auth1 " doesn't return anything.
>Although it does work successfully with my NA domain account.
>
>The wbinfo --sequence command does reveal a little more information.
>Here is the output.
>
>wbinfo --sequence
>
>LAC : DISCONNECTED
>EU : DISCONNECTED
>AP : DISCONNECTED
>UIS : DISCONNECTED
>USTR-LINUX-1 : 1
>BUILTIN : 1
>NA : 14462477
>
>How can I get it to connect?
>
>-----Original Message-----
>From: Gerald (Jerry) Carter [mailto:jerry at samba.org]
>Sent: Thursday, February 16, 2006 11:05 AM
>To: Trimble, Ronald D
>Cc: samba at lists.samba.org
>Subject: Re: [Samba] Authenticating another domain
>
>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>Trimble, Ronald D wrote:
>
> >   Username EU\inblr-auth1 is invalid on this system
>
>figure this out.  That is the key.  Does
>"getent passwd 'EU\inblr-auth1'" return anything?
>What does wbinfo --sequence show?
>

Don Meyer                                           <dlmeyer at uiuc.edu>
Network Manager, ACES Academic Computing Facility
Technical System Manager, ACES TeleNet System
UIUC College of ACES, Information Technology and Communication Services

   "They that can give up essential liberty to obtain a little 
temporary safety,
         deserve neither liberty or safety."     -- Benjamin Franklin, 1759