[Samba] Cross Platform Wrong Password

[Bjoern Meier]

Hi,

I use Samba (version 3.3.4) as a role-domain-member (security=ADS).
All works fine, except cross-forest access (NT_STATUS_WRONG_PASSWORD;
nothing else extra-ordinary in the logs). Means: DOMAIN3\USER1 could
not access samba in DOMAIN1. The Forest with the samba server also
have another domain (DOMAIN2) in the forest. The user there can access
the samba-server.

What I tried:

- Wbinfo -u and wbinfo -g wirks fine.
- smbclient -U DOMAIN3\USER1 //file-server.domain1.local/share on
file-server works fine (after entered password)
- Access over Nautilus with the SMB-Protocol
(smb://USER1@file-server.domain1.local/share) works also fine

Client is a windows 7
DC and GlobalCatalog for DOMAIN3 is a Windows 2008 R2.

The Trust is bidirectional and non-transitive.

Any Hints?

Greetings,
Björn