[Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????

Wikked one wikked1 at hotmail.com
Tue Jun 15 10:02:47 MDT 2010 

Log file from PDC Domain A attached.
Any suggestions??

> From: wikked1 at hotmail.com
> To: gaiseric.vandal at gmail.com; samba at lists.samba.org
> Date: Mon, 14 Jun 2010 16:47:28 +0000
> Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> 
> 
> I have set those parameters as you suggested without NT4 problems.
> This has had no effect on the trust relationship, I still get the same message.
> I can submit a log file from DomainA,if it would help?
> 
> > Date: Mon, 14 Jun 2010 11:45:29 -0400
> > From: gaiseric.vandal at gmail.com
> > To: samba at lists.samba.org
> > Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> > 
> > lanman and plaintext auth should only be needed if you are support 
> > Windows 95/98 machines.     NT 4 with SP6 should not require this.   So 
> > I would first disable lanman and plaintext on Domain A, and make sure it 
> > has not broken authentication with your NT4 machine.
> > 
> > 
> > 
> > On 06/14/2010 11:39 AM, Wikked one wrote:
> > > There are some differences when I run testparm -v.
> > > PDC for Domain A
> > > lanman auth=Yes
> > > ntlm auth=Yes
> > > client NTMLv2=No
> > > client lanman auth=Yes
> > > client plaintext auth=Yes
> > >
> > > PDC for Domain B
> > > lanman auth=No
> > > ntlm auth=Yes
> > > client NTMLv2=No
> > > client lanman auth=No
> > > client plaintext auth=No
> > >
> > >
> > >
> > >
> > > > From: gaiseric.vandal at gmail.com
> > > > To: samba at lists.samba.org
> > > > Date: Sun, 13 Jun 2010 21:31:58 -0400
> > > > Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> > > >
> > > > If you run "testparm -v" on each, are the encryption parameters 
> > > (NTLM etc)
> > > > the same?
> > > >
> > > >
> > > >
> > > > From: Wikked one [mailto:wikked1 at hotmail.com]
> > > > Sent: Sunday, June 13, 2010 7:56 AM
> > > > To: gaiseric.vandal at gmail.com; samba at lists.samba.org
> > > > Subject: RE: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> > > >
> > > >
> > > >
> > > > LDAP backend.
> > > > I am 100% sure about the passwords since I set them up just previous 
> > > to the
> > > > process.
> > > > The short answer to upgrading domain A is no,and the log files do not
> > > > indicate anything.
> > > > I will increase the log level when I resume testing tomorrow.
> > > > The long answer to upgrading is this: Since we are looking towards 
> > > Windows 7
> > > > workstation deployment,we
> > > > realize we need to use Samba 3.3 ,our existing domain (Samba 3.0.33) 
> > > has NT4
> > > > workstations and legacy Netbios system names that we do not want to 
> > > carry
> > > > forward. So the solution I am hoping to implement is a new Samba 3.3 
> > > domain
> > > > with a new domain name and SID that supports windows 7 (got that 
> > > working)
> > > > but also has a two way domain trust established. This would allow
> > > > incremental deployment rather than a hard cut over.
> > > > Thanks!
> > > >
> > > > > From: gaiseric.vandal at gmail.com
> > > > > To: samba at lists.samba.org
> > > > > Date: Sat, 12 Jun 2010 17:15:59 -0400
> > > > > Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> > > > >
> > > > > What is the backend?
> > > > >
> > > > > In domain A, you should have a user account for domain B (so that 
> > > A can be
> > > > > trusted by B.) And vice versa. The passwords created for those 
> > > accounts
> > > > > should be the passwords used when establishing trusts. So you 
> > > should be
> > > > > 100% certain about those passwords.
> > > > >
> > > > > Any chance you can upgrade DomainA to samba 3.3.12? Do the log 
> > > files show
> > > > > anything (maybe the wrong encryption levels for authenticating 
> > > passwords?)
> > > > >
> > > > >
> > > > >
> > > > > -----Original Message-----
> > > > > From: samba-bounces at lists.samba.org 
> > > [mailto:samba-bounces at lists.samba.org]
> > > > > On Behalf Of Wikked one
> > > > > Sent: Friday, June 11, 2010 5:05 AM
> > > > > To: samba at lists.samba.org
> > > > > Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > > From: wikked1 at hotmail.com
> > > > > > To: samba at lists.samba.org
> > > > > > Date: Wed, 9 Jun 2010 18:30:19 +0000
> > > > > > Subject: [Samba] Domain Trusts
> > > > > >
> > > > > >
> > > > > > Anybody?
> > > > > >
> > > > > > > Greetings List,
> > > > > > >
> > > > > > > I've
> > > > > > > been attempting to establish a two way domain trust between Samba
> > > > > Domains. The reasons why are numerous but mainly so
> > > > > > > that our Samba PDC supports Window7.
> > > > > > > Domain A is Samba 3.0.33 and domain B is Samba 3.3.12 and I've
> > > > > > > established that domain B trusts domain A without 
> > > issue,however when I
> > > > > attempt
> > > > > > > to trust domain B on domain A, I get the following error. 
> > > "Could not
> > > > > connect to
> > > > > > > server DomainA PDC. Storing password for trusted domain failed."
> > > > > > >
> > > > > > > I'm certain the password is correct.
> > > > > > >
> > > > > > >
> > > > > > > _________________________________________________________________
> > > > > > > Hotmail is redefining busy with tools for the New Busy. Get 
> > > more from
> > > > > your inbox.
> > > > > > >
> > > > >
> > > > 
> > > http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
> > > > > L:en-US:WM_HMP:042010_2
> > > > > > > --
> > > > > > > To unsubscribe from this list go to the following URL and read the
> > > > > > > instructions: https://lists.samba.org/mailman/options/samba
> > > > > >
> > > > > > _________________________________________________________________
> > > > > > Hotmail is redefining busy with tools for the New Busy. Get more 
> > > from
> > > > your
> > > > > inbox.
> > > > > >
> > > > >
> > > > 
> > > http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
> > > > > L:en-US:WM_HMP:042010_2
> > > > > > --
> > > > > > To unsubscribe from this list go to the following URL and read the
> > > > > > instructions: https://lists.samba.org/mailman/options/samba
> > > > >
> > > > > _________________________________________________________________
> > > > > Hotmail has tools for the New Busy. Search, chat and e-mail from your
> > > > inbox.
> > > > >
> > > > 
> > > http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
> > > > > L:en-US:WM_HMP:042010_1
> > > > > --
> > > > > To unsubscribe from this list go to the following URL and read the
> > > > > instructions: https://lists.samba.org/mailman/options/samba
> > > > >
> > > > > --
> > > > > To unsubscribe from this list go to the following URL and read the
> > > > > instructions: https://lists.samba.org/mailman/options/samba
> > > >
> > > > _____
> > > >
> > > > The New Busy is not the old busy. Search, chat and e-mail from your 
> > > inbox.
> > > > Get started.
> > > > 
> > > <http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:
> > > > WL:en-US:WM_HMP:042010_3>
> > > >
> > > > --
> > > > To unsubscribe from this list go to the following URL and read the
> > > > instructions: https://lists.samba.org/mailman/options/samba
> > >
> > > ------------------------------------------------------------------------
> > > Hotmail has tools for the New Busy. Search, chat and e-mail from your 
> > > inbox. Learn more. 
> > > <http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_1>
> > 
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
>  		 	   		  
> _________________________________________________________________
> The New Busy is not the old busy. Search, chat and e-mail from your inbox.
> http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_3
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
 		 	   		  
_________________________________________________________________
The New Busy is not the too busy. Combine all your e-mail accounts with Hotmail.
http://www.windowslive.com/campaign/thenewbusy?tile=multiaccount&ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_4

More information about the samba mailing list