[Samba] Error verifying trust

[Steve Brandli]

I have two domains with an external trust between them.  Verifying the trust
from a domain1 controller using "samba-tool domain trust validate domain2
-U." returns "ERROR: Filed to find a writeable DC for domain 'DOMAIN2': The
object name is not found."  (See below.)  However, the same command from a
domain2 controller, "samba-tool domain trust validate domain1 -U.", does not
get the error.  Also, from the domain1 side, "samba-tool domain trust
validate domain.domain2.com -U." works fine.  How does samba-tool look up
the short domain name?

 

root at minister1:~# samba-tool domain trust validate brandlilaw
-Uadministrator at domain.brandlilaw.com
<mailto:-Uadministrator at domain.brandlilaw.com> 

LocalDomain Netbios[BRANDLI] DNS[domain.brandli.com]
SID[S-1-5-21-3237397562-3087105784-2935402547]

LocalTDO Netbios[BRANDLILAW] DNS[domain.brandlilaw.com]
SID[S-1-5-21-2136821272-1111453333-1140905514]

OK: LocalValidation: DC[\\temple2.domain.brandlilaw.com] CONNECTION[WERR_OK]
TRUST[WERR_OK] VERIFY_STATUS_RETURNED

OK: LocalRediscover: DC[\\temple2.domain.brandlilaw.com] CONNECTION[WERR_OK]

ERROR: Failed to find a writeable DC for domain 'BRANDLILAW': The object
name is not found.

 

root at minister1:~# samba-tool domain trust validate domain.brandlilaw.com
-Usteve at domain.brandli.com <mailto:-Usteve at domain.brandli.com> 

LocalDomain Netbios[BRANDLI] DNS[domain.brandli.com]
SID[S-1-5-21-3237397562-3087105784-2935402547]

LocalTDO Netbios[BRANDLILAW] DNS[domain.brandlilaw.com]
SID[S-1-5-21-2136821272-1111453333-1140905514]

OK: LocalValidation: DC[\\temple2.domain.brandlilaw.com] CONNECTION[WERR_OK]
TRUST[WERR_OK] VERIFY_STATUS_RETURNED

OK: LocalRediscover: DC[\\temple2.domain.brandlilaw.com] CONNECTION[WERR_OK]

RemoteDC Netbios[TEMPLE2] DNS[temple2.domain.brandlilaw.com]
ServerType[GC,LDAP,DS,KDC,TIMESERV,CLOSEST,WRITABLE,GOOD_TIMESERV,FULL_SECRE
T_DOMAIN_6]

Password for [steve at domain.brandli.com]:

Password for [steve at domain.brandli.com]:

OK: RemoteValidation: DC[\\bailiff1.domain.brandli.com] CONNECTION[WERR_OK]
TRUST[WERR_OK] VERIFY_STATUS_RETURNED

OK: RemoteRediscover: DC[\\bailiff1.domain.brandli.com] CONNECTION[WERR_OK]

 

root at temple2:~# samba-tool domain trust validate brandli
-Usteve at domain.brandli.com <mailto:-Usteve at domain.brandli.com> 

LocalDomain Netbios[BRANDLILAW] DNS[domain.brandlilaw.com]
SID[S-1-5-21-2136821272-1111453333-1140905514]

LocalTDO Netbios[BRANDLI] DNS[domain.brandli.com]
SID[S-1-5-21-3237397562-3087105784-2935402547]

OK: LocalValidation: DC[\\bailiff1.domain.brandli.com] CONNECTION[WERR_OK]
TRUST[WERR_OK] VERIFY_STATUS_RETURNED

OK: LocalRediscover: DC[\\bailiff1.domain.brandli.com] CONNECTION[WERR_OK]

RemoteDC Netbios[BAILIFF2] DNS[bailiff2.domain.brandli.com]
ServerType[GC,LDAP,DS,KDC,TIMESERV,CLOSEST,WRITABLE,GOOD_TIMESERV,FULL_SECRE
T_DOMAIN_6]

Password for [steve at domain.brandli.com]:

OK: RemoteValidation: DC[\\temple2.domain.brandlilaw.com]
CONNECTION[WERR_OK] TRUST[WERR_OK] VERIFY_STATUS_RETURNED

OK: RemoteRediscover: DC[\\temple2.domain.brandlilaw.com]
CONNECTION[WERR_OK]

 

Any help would be greatly appreciated!

 

                Steve