[Samba] samba do not trust windows2008R2 AD

[Soeren Mindorf]

Hello,

I've a problem with the trust between Windows2008R2 AD and samba.

Samba Version on SLES 11 SP0: samba3-3.4.13-42.suse111
Windows 2008R2 with AD

I've tried the following howto without the wins section, because the
servers are in the same network.

http://goo.gl/e0MQT

On the samba machine:
-----
# smbclient -L 192.168.12.214
Enter root's password: ENTER
Anonymous login successful
Domain=[MSDYN-AD] OS=[Windows Server 2008 R2 Standard 7600]
Server=[Windows Server 2008 R2 Standard 6.1]

        Sharename       Type      Comment
        ---------       ----      -------
        ADMIN$          Disk      Remote Admin
        C$              Disk      Default share
        D$              Disk      Default share
        E$              Disk      Default share
        H$              Disk      Default share
        IPC$            IPC       Remote IPC
        NETLOGON        Disk      Logon server share
        SYSVOL          Disk      Logon server share
session request to 192.168.12.214 failed (Called name not present)
session request to 192 failed (Called name not present)
session request to *SMBSERVER failed (Called name not present)
NetBIOS over TCP disabled -- no workgroup available
> ---- On the windows side I added my domain as outgoing trusted. If I
try to validate it I see this in the samba log: ----- [2011/10/13
13:11:09, 0] rpc_server/srv_netlog_nt.c:603(_netr_ServerAuthenticate3)
_netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting
auth request from client MSDYN machine account MSDYN-AD$ [2011/10/13
13:11:09, 0] rpc_server/srv_netlog_nt.c:603(_netr_ServerAuthenticate3)
_netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting
auth request from client MSDYN machine account MSDYN-AD$ ----- I can't
find a fault. Reenter the machineaccount PW, without success. Any ideas?
Regards,
> -- Sören Mindorf