[Samba] Samba 3.x and PCNetLink domain trusts]]]

[Damian Lock (SSCI)]

It looks as if 2-way trusts are working between Samba and PCNL and
between Samba/NT4.  The one exception seems to be logging in as
Samba/myname on the ENT4 PDC.    

I had created a ENT4/myname account.  I had forgotten to add
SAMBA/myname to the local users group on the ENT4 PDC before trying to 
the ENT4 PDC as SAMBA/myname.  If I log in as SAMBA/anothername it is
OK.  This isn't real show stopper since I think I can drop the NT4
machine and domain altogether.  (the goal is to eventually move
everything to Samba.)

Thanks for the assistance. 



> To: samba at lists.samba.org
> Subject: Re: [Samba] Samba 3.x and PCNetLink domain trusts]]
> Date: Wed, 2 May 2007 16:05:59 -0400
> 
> I found part of the prob may have been that I didn't join the samba PDC
> to its own domain.  
> 
> # net join samba -U root
> Joined domain SAMBA
> 
> Now, commands like "wbinfo -t" and "wbinfo -m" indicate that the domains
> are trusted.  Also, I can run "net rpc samdump" to dump the NT4 domain
> info (but not the PCNL domain.)    
> 
> If I try to log in to the NT4 server as a Samba user (who has been added
> to the local users group) I get an error "C000019B" -  which is seems to
> be a Samba error (not a microsoft error)  suggesting a SID (and possibly
> winbindd?) error.  
> 
> 
> 
> 
> 
> 
> 
> -------- Forwarded Message --------
> > From: Volker Lendecke <Volker.Lendecke at SerNet.DE>
> > Reply-To: Volker.Lendecke at SerNet.DE
> > To: Damian Lock (SSCI) <Damian.Lock at ssci.com>
> > Cc: 	
> > Subject: Re: [Samba] Samba 3.x and PCNetLink domain trusts]
> > Date: Wed, 2 May 2007 17:15:49 +0200
> > 
> > On Wed, May 02, 2007 at 11:08:22AM -0400, Damian Lock (SSCI) wrote:
> > > Except that everything isn't fine, because I can't login to the samba
> > > domain as a PCNL/NT4 user or vice versa.
> > 
> > Then you need to debug more. Setting up the join did work.
> > 
> > Volker
>