[Samba] Interdomain Trusts

[Gaiseric Vandal]

I use samba 3.6.x for domain controllers for a "classic " 
(security=server) domain.  I have trusts with Windows 2003.       I 
wanted the Samba domain to trust the Windows domain.    My goals did not 
include having the Windows domain trusts the samba domain but I found it 
didn't work right with out two way trusts.


If sounds like you are able to get a list of users with wbinfo (wbinfo 
-u), and use the various  wbinfo options to check mappings

  wbinfo -n "TRUSTEDDOMAIN\someuser"

shd return the SID

wbinfo -s "SOMESID"

shd return the name of the trusted user

wbinfo -S "SOMESID"
shd return an user ID of the trusted user.


Your /etc/nsswitch.conf file should have something like

         passwd:     files  winbind


The following commands require the nsswitch stuff to be working properly.


getent "TRUSTEDDOMAIN\someuser" passwd
id "TRUSTEDDOMAIN\someuser"






On 06/03/14 14:27, Gregory Cushing wrote:
> Does anyone know if interdomain trusts work in samba at all and what
> versions they do? I am trying to get a 1 way trust working between two
> domains and DOM A (which samba is joined to works in mapping users via
> winbind) just not the one way trust for the other domain.... DOM B
>
> Samba is just a joined member of the domain A with security = ads with
> nothing more than winbind id rid maps for both domains. The ID Map is made,
> I can do a wbinfo -a and resolve the sid for dom b.
>
> I can see the users of the joined domain a with getent, but not with dom b.
> Looking at the log.wb-DOMB I can see the errors are no inbound trust
> listed. Yet it is enumerated in the winbind log for dom a to Dom B
>
>
> Any help would be appreciated.
>
>
> -Greg