[Samba] 3.0.23pre1 trusted domain failed

Li, Ying (ESG) ying.li2 at hp.com
Sat May 6 00:16:49 GMT 2006


Hi, 

Recently, upgrade samba from 3.0.14a to 3.0.23pre1. And found trusted
domain user couldn't logon to Samba share. The command nsquery to query
a user from trusted domain failed also. For example:
parent.com  Win2003 DC
|---Child1.parent.com  Win2003 DC
|---Child2.parent.com  Win2003 DC

Kinit OK.
Net ads join to Child1 OK.
Restart the server with winbindd.
Wbinfo -m can display trusted domain Parent and Child2.
Wbinfo -n child1\\user OK.
Wbinfo -n child2\\user OK.

nsquery Child1\\user OK.
nsquery Child2\\user failed.

Smb.conf
    security = ADS
    realm=CHILD1.PARENT.COM
    idmap uid = 40000-60000
    idmap gid = 40000-60000
    allow trusted domains = yes

I need help to understand why this happened. Somebody can give me more
explaination about this? If need, I can send you log files with 10
level.

Thanks very much for any help.
-Ying


More information about the samba mailing list