[Samba] 3.6.0 Domain trusts broken

[Jeremy Allison]

On Tue, Oct 11, 2011 at 06:44:18PM +0100, Alex Crow wrote:
> Hi all,
> 
> Since the winbind refactoring in Samba 3.6.0, interdomain trusts
> between Samba servers seem to be broken in that being able to
> resolve or modify file permissions on the other domain work only
> very intermittently (eg about once out of 10 tries). This is
> regardless of whether I use idmap_rid or idmap_ldap as the backend.
> 
> I set up two 3.6.0 domain controllers with an XP client attached to
> each, and trying to add permissions from the trusted domain by
> choosing the domain and hitting the "Add" then "Advanced" buttons
> and then the "Find Now" mostly brings up a password prompt - any
> credentials entered here still cause the listing of
> users/groups/security principals to fail with a "Login failure:
> unknown name or bad password" dialog. However I can still log in to
> either domain from XP with no issues.

More details please. That and debug level 10 logs attached
to a bug report in the "failing" and "succeeding" case would
help a lot.

Thanks,

Jeremy.