[Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????

Wikked one wikked1 at hotmail.com
Mon Jun 14 10:47:28 MDT 2010 

I have set those parameters as you suggested without NT4 problems.
This has had no effect on the trust relationship, I still get the same message.
I can submit a log file from DomainA,if it would help?

> Date: Mon, 14 Jun 2010 11:45:29 -0400
> From: gaiseric.vandal at gmail.com
> To: samba at lists.samba.org
> Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> 
> lanman and plaintext auth should only be needed if you are support 
> Windows 95/98 machines.     NT 4 with SP6 should not require this.   So 
> I would first disable lanman and plaintext on Domain A, and make sure it 
> has not broken authentication with your NT4 machine.
> 
> 
> 
> On 06/14/2010 11:39 AM, Wikked one wrote:
> > There are some differences when I run testparm -v.
> > PDC for Domain A
> > lanman auth=Yes
> > ntlm auth=Yes
> > client NTMLv2=No
> > client lanman auth=Yes
> > client plaintext auth=Yes
> >
> > PDC for Domain B
> > lanman auth=No
> > ntlm auth=Yes
> > client NTMLv2=No
> > client lanman auth=No
> > client plaintext auth=No
> >
> >
> >
> >
> > > From: gaiseric.vandal at gmail.com
> > > To: samba at lists.samba.org
> > > Date: Sun, 13 Jun 2010 21:31:58 -0400
> > > Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> > >
> > > If you run "testparm -v" on each, are the encryption parameters 
> > (NTLM etc)
> > > the same?
> > >
> > >
> > >
> > > From: Wikked one [mailto:wikked1 at hotmail.com]
> > > Sent: Sunday, June 13, 2010 7:56 AM
> > > To: gaiseric.vandal at gmail.com; samba at lists.samba.org
> > > Subject: RE: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> > >
> > >
> > >
> > > LDAP backend.
> > > I am 100% sure about the passwords since I set them up just previous 
> > to the
> > > process.
> > > The short answer to upgrading domain A is no,and the log files do not
> > > indicate anything.
> > > I will increase the log level when I resume testing tomorrow.
> > > The long answer to upgrading is this: Since we are looking towards 
> > Windows 7
> > > workstation deployment,we
> > > realize we need to use Samba 3.3 ,our existing domain (Samba 3.0.33) 
> > has NT4
> > > workstations and legacy Netbios system names that we do not want to 
> > carry
> > > forward. So the solution I am hoping to implement is a new Samba 3.3 
> > domain
> > > with a new domain name and SID that supports windows 7 (got that 
> > working)
> > > but also has a two way domain trust established. This would allow
> > > incremental deployment rather than a hard cut over.
> > > Thanks!
> > >
> > > > From: gaiseric.vandal at gmail.com
> > > > To: samba at lists.samba.org
> > > > Date: Sat, 12 Jun 2010 17:15:59 -0400
> > > > Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> > > >
> > > > What is the backend?
> > > >
> > > > In domain A, you should have a user account for domain B (so that 
> > A can be
> > > > trusted by B.) And vice versa. The passwords created for those 
> > accounts
> > > > should be the passwords used when establishing trusts. So you 
> > should be
> > > > 100% certain about those passwords.
> > > >
> > > > Any chance you can upgrade DomainA to samba 3.3.12? Do the log 
> > files show
> > > > anything (maybe the wrong encryption levels for authenticating 
> > passwords?)
> > > >
> > > >
> > > >
> > > > -----Original Message-----
> > > > From: samba-bounces at lists.samba.org 
> > [mailto:samba-bounces at lists.samba.org]
> > > > On Behalf Of Wikked one
> > > > Sent: Friday, June 11, 2010 5:05 AM
> > > > To: samba at lists.samba.org
> > > > Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> > > >
> > > >
> > > >
> > > >
> > > > > From: wikked1 at hotmail.com
> > > > > To: samba at lists.samba.org
> > > > > Date: Wed, 9 Jun 2010 18:30:19 +0000
> > > > > Subject: [Samba] Domain Trusts
> > > > >
> > > > >
> > > > > Anybody?
> > > > >
> > > > > > Greetings List,
> > > > > >
> > > > > > I've
> > > > > > been attempting to establish a two way domain trust between Samba
> > > > Domains. The reasons why are numerous but mainly so
> > > > > > that our Samba PDC supports Window7.
> > > > > > Domain A is Samba 3.0.33 and domain B is Samba 3.3.12 and I've
> > > > > > established that domain B trusts domain A without 
> > issue,however when I
> > > > attempt
> > > > > > to trust domain B on domain A, I get the following error. 
> > "Could not
> > > > connect to
> > > > > > server DomainA PDC. Storing password for trusted domain failed."
> > > > > >
> > > > > > I'm certain the password is correct.
> > > > > >
> > > > > >
> > > > > > _________________________________________________________________
> > > > > > Hotmail is redefining busy with tools for the New Busy. Get 
> > more from
> > > > your inbox.
> > > > > >
> > > >
> > > 
> > http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
> > > > L:en-US:WM_HMP:042010_2
> > > > > > --
> > > > > > To unsubscribe from this list go to the following URL and read the
> > > > > > instructions: https://lists.samba.org/mailman/options/samba
> > > > >
> > > > > _________________________________________________________________
> > > > > Hotmail is redefining busy with tools for the New Busy. Get more 
> > from
> > > your
> > > > inbox.
> > > > >
> > > >
> > > 
> > http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
> > > > L:en-US:WM_HMP:042010_2
> > > > > --
> > > > > To unsubscribe from this list go to the following URL and read the
> > > > > instructions: https://lists.samba.org/mailman/options/samba
> > > >
> > > > _________________________________________________________________
> > > > Hotmail has tools for the New Busy. Search, chat and e-mail from your
> > > inbox.
> > > >
> > > 
> > http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
> > > > L:en-US:WM_HMP:042010_1
> > > > --
> > > > To unsubscribe from this list go to the following URL and read the
> > > > instructions: https://lists.samba.org/mailman/options/samba
> > > >
> > > > --
> > > > To unsubscribe from this list go to the following URL and read the
> > > > instructions: https://lists.samba.org/mailman/options/samba
> > >
> > > _____
> > >
> > > The New Busy is not the old busy. Search, chat and e-mail from your 
> > inbox.
> > > Get started.
> > > 
> > <http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:
> > > WL:en-US:WM_HMP:042010_3>
> > >
> > > --
> > > To unsubscribe from this list go to the following URL and read the
> > > instructions: https://lists.samba.org/mailman/options/samba
> >
> > ------------------------------------------------------------------------
> > Hotmail has tools for the New Busy. Search, chat and e-mail from your 
> > inbox. Learn more. 
> > <http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_1>
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
 		 	   		  
_________________________________________________________________
The New Busy is not the old busy. Search, chat and e-mail from your inbox.
http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_3

More information about the samba mailing list