[Samba] Accessing shares from 2 domains

[Jason x]

We are splitting our users into 2 domains(DOMAINA and DOMAINB (changed for security reason)). I am having problems getting users who log into their workstation on DOMAINA to access a samba share on DOMAINB. We are using W2K3 servers as our AD with LDAP. Samba shares on are CentOS5.1 servers. I Can anyone point me to some docs on how to set this up? I have been rumbling through google for the past 2 weeks and haven't found very many links that have been helpful.

We have set up interdomain trusts on the Windows side. 

When I try to access a samba share from a windows box on DOMAINA to a samba share on DOMAINB I get this in the samba log:

[2008/11/20 09:53:18, 1] auth/auth.c:check_domain_match(172)
  check_domain_match: Attempt to connect as user username from domain DOMAINA denied


When I do a wbinfo -m both domains are listed.
 wbinfo -m
DOMAINA
DOMAINB


wbinfo --sequence
DOMAINA : DISCONNECTED
DOMAINB : 82408



smb.conf
workgroup = DOMAINB

security = ads

realm = DOMAINB.COM

allow trusted domains = no
rid:DOMAINB=10000-100000000idmap uid = 10000-100000000
idmap gid = 10000-100000000
winbind enum users = yes
winbind enum groups = yes
winbind nested groups = no
winbind use default domain = yes
winbind separator = +
template shell = /bin/bash
template homedir = /home/%U



krb5.conf
[libdefaults]
    default_realm = DOMAINB.COM

[realms]
    DOMAINB.COM = {
        admin_server = servername.domainb.com
        kdc = servername.domainb.com
    }

    DOMAINA.COM = {
        admin_server = servername.domaina.com
        kdc = servername.domaina.com
        kdc = servername2.domaina.com
    }
[domain_realms]
    .domainb.com = DOMAINB.COM
    domainb.com = DOMAINB.COM

    .domaina = DOMAINA.COM
    domaina.com = DOMAINA.COM
    .kerberos.server = DOMAINA.COM




nsswitch.conf

passwd: files winbind
shadow: files winbind
group: files winbind
protocols: files winbind
services: files winbind
netgroup: files winbind
automount: files winbind


hosts:      files dns wins



Thanks in advanced!

j



_________________________________________________________________
Windows Live Hotmail now works up to 70% faster.
http://windowslive.com/Explore/Hotmail?ocid=TXT_TAGLM_WL_hotmail_acq_faster_112008