[Samba] problems gpupdate and domain-trust

[Heinz Hölzl]

Hi!

I have a problem with gpupdate having a trust with a M$ -ADS domain.

Before creating the trust gpupdate worked fine. Then i added the trust and then gpupdate gives the following error:


Updating policy...

Computer Policy update has completed successfully.
User Policy could not be updated successfully. The following errors were encount
ered:

The processing of Group Policy failed. Windows could not determine if the user a
nd computer accounts are in the same forest. Ensure the user domain name matches
 the name of a trusted domain that resides in the same forest as the computer ac
count.

-----------

The trust works fine (i can authenticate trusted users on a PC in my samba domain and viceverse)

Details of the Trust:
samba-tool domain trust show klingons
LocalDomain Netbios[GVCC] DNS[gvcc.net] SID[S-1-5-21-1608159440-4144762864-1017073214]
TrusteDomain:

NetbiosName:    KLINGONS
DnsName:        klingons.imp
SID:            S-1-5-21-3288560663-12659786-2782445548
Type:           0x2 (UPLEVEL)
Direction:      0x3 (BOTH)
Attributes:     0x8 (FOREST_TRANSITIVE)
PosixOffset:    0x00000000 (0)
kerb_EncTypes:  0x4 (RC4_HMAC_MD5)
Namespaces[2] TDO[klingons.imp]:
TLN: Status[Enabled]                  DNS[*.klingons.imp]
DOM: Status[Enabled]                  DNS[klingons.imp] Netbios[KLINGONS] SID[S-1-5-21-3288560663-12659786-2782445548]



Regards,

Heinz