[Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????

Wikked one wikked1 at hotmail.com
Mon Jun 14 09:39:23 MDT 2010


There are some differences when I run testparm -v.
PDC for Domain A
lanman auth=Yes
ntlm auth=Yes
client NTMLv2=No
client lanman auth=Yes
client plaintext auth=Yes

PDC for Domain B
lanman auth=No

ntlm auth=Yes

client NTMLv2=No

client lanman auth=No

client plaintext auth=No




> From: gaiseric.vandal at gmail.com
> To: samba at lists.samba.org
> Date: Sun, 13 Jun 2010 21:31:58 -0400
> Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> 
> If you run "testparm -v" on each, are the encryption parameters (NTLM etc)
> the same?
> 
>  
> 
> From: Wikked one [mailto:wikked1 at hotmail.com] 
> Sent: Sunday, June 13, 2010 7:56 AM
> To: gaiseric.vandal at gmail.com; samba at lists.samba.org
> Subject: RE: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> 
>  
> 
> LDAP backend.
> I am 100% sure about the passwords since I set them up just previous to the
> process.
> The short answer to upgrading domain A is no,and the log files do not
> indicate anything.
> I will increase the log level when I resume testing tomorrow.
> The long answer to upgrading is this: Since we are looking towards Windows 7
> workstation deployment,we
> realize we need to use Samba 3.3 ,our existing domain (Samba 3.0.33) has NT4
> workstations and legacy Netbios system names that we do not want to carry
> forward. So the solution I am hoping to implement is a new Samba 3.3 domain
> with a new domain name and SID that supports windows 7 (got that working)
> but also has a two way domain trust established. This would allow
> incremental deployment rather than a hard cut over.
> Thanks!
> 
> > From: gaiseric.vandal at gmail.com
> > To: samba at lists.samba.org
> > Date: Sat, 12 Jun 2010 17:15:59 -0400
> > Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> > 
> > What is the backend?
> > 
> > In domain A, you should have a user account for domain B (so that A can be
> > trusted by B.) And vice versa. The passwords created for those accounts
> > should be the passwords used when establishing trusts. So you should be
> > 100% certain about those passwords. 
> > 
> > Any chance you can upgrade DomainA to samba 3.3.12? Do the log files show
> > anything (maybe the wrong encryption levels for authenticating passwords?)
> > 
> > 
> > 
> > -----Original Message-----
> > From: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org]
> > On Behalf Of Wikked one
> > Sent: Friday, June 11, 2010 5:05 AM
> > To: samba at lists.samba.org
> > Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> > 
> > 
> > 
> > 
> > > From: wikked1 at hotmail.com
> > > To: samba at lists.samba.org
> > > Date: Wed, 9 Jun 2010 18:30:19 +0000
> > > Subject: [Samba] Domain Trusts
> > > 
> > > 
> > > Anybody?
> > > 
> > > > Greetings List,
> > > > 
> > > > I've
> > > > been attempting to establish a two way domain trust between Samba
> > Domains. The reasons why are numerous but mainly so
> > > > that our Samba PDC supports Window7. 
> > > > Domain A is Samba 3.0.33 and domain B is Samba 3.3.12 and I've
> > > > established that domain B trusts domain A without issue,however when I
> > attempt
> > > > to trust domain B on domain A, I get the following error. "Could not
> > connect to
> > > > server DomainA PDC. Storing password for trusted domain failed." 
> > > > 
> > > > I'm certain the password is correct. 
> > > > 
> > > > 
> > > > _________________________________________________________________
> > > > Hotmail is redefining busy with tools for the New Busy. Get more from
> > your inbox.
> > > >
> >
> http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
> > L:en-US:WM_HMP:042010_2
> > > > -- 
> > > > To unsubscribe from this list go to the following URL and read the
> > > > instructions: https://lists.samba.org/mailman/options/samba
> > > 
> > > _________________________________________________________________
> > > Hotmail is redefining busy with tools for the New Busy. Get more from
> your
> > inbox.
> > >
> >
> http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
> > L:en-US:WM_HMP:042010_2
> > > -- 
> > > To unsubscribe from this list go to the following URL and read the
> > > instructions: https://lists.samba.org/mailman/options/samba
> > 
> > _________________________________________________________________
> > Hotmail has tools for the New Busy. Search, chat and e-mail from your
> inbox.
> >
> http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
> > L:en-US:WM_HMP:042010_1
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions: https://lists.samba.org/mailman/options/samba
> > 
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions: https://lists.samba.org/mailman/options/samba
> 
>   _____  
> 
> The New Busy is not the old busy. Search, chat and e-mail from your inbox.
> Get started.
> <http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:
> WL:en-US:WM_HMP:042010_3> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
 		 	   		  
_________________________________________________________________
Hotmail has tools for the New Busy. Search, chat and e-mail from your inbox.
http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_1


More information about the samba mailing list