[Samba] FW: Accessing Samba domain member shares from trusted domain

[Vaughan, Robert J]

I should mention, our trusting domain is firewalled such that computers in it cannot access the trusted domain as a rule (so my samba server cannot see the DC/KDC in the trusted domain directly) - is that the problem?




Thanks,




-----Original Message-----
From: samba <samba-bounces at lists.samba.org> On Behalf Of Vaughan, Robert J via samba
Sent: Tuesday, November 12, 2024 10:38 AM
To: samba at lists.samba.org
Subject: Re: [Samba] Accessing Samba domain member shares from trusted domain

One difference I see is that in the doc it shows ...

root at linux-client:/home/vagrant# wbinfo --online-status BUILTIN : online LINUX-CLIENT : online
S1 : online
S2 : online

But for me, ...

# wbinfo --online-status
BUILTIN : active connection
LOCALHOST : active connection
TRUSTING : active connection
TRUSTED : no active connection

Does my Samba server in the trusting domain need to be able to talk to the DC (and KDC) in the trusted domain?  Why the 'no active connection'?

Thanks,

Robert Vaughan
UNIX and Linux Systems
IT - Infrastructure
General Dynamics Land Systems - Canada

Office:   +1 519 964 5276
Mobile:  +1 519 639 8151
vaughar2 at gdls.com



-----Original Message-----
From: Ralph Boehme <slow at samba.org>
Sent: Tuesday, November 12, 2024 10:22 AM
To: Vaughan, Robert J <vaughar2 at gdls.com>; samba at lists.samba.org
Subject: Re: [Samba] Accessing Samba domain member shares from trusted domain

On 11/12/24 3:06 PM, Vaughan, Robert J via samba wrote:
> It's not a straight forward task it seems.

it is. Read page 14 ff, ignore the rest as it applies to Samba as an AD DC.

-slow

--
SerNet Samba Team Lead https://urldefense.us/v3/__https://sernet.de/__;!!LLC9-ftwI7ClqA!ZRjyYWSKS8S025C2JD5JVGxwFIzhzbZV2dsHee1HxnxypTB7oRgfIN7CI6jgbZrkBS4CW39sDPXByOkK$ 
Samba Team Member      https://urldefense.us/v3/__https://samba.org/__;!!LLC9-ftwI7ClqA!ZRjyYWSKS8S025C2JD5JVGxwFIzhzbZV2dsHee1HxnxypTB7oRgfIN7CI6jgbZrkBS4CW39sDE-0Cglo$ 
SAMBA+ packages       https://urldefense.us/v3/__https://samba.plus/__;!!LLC9-ftwI7ClqA!ZRjyYWSKS8S025C2JD5JVGxwFIzhzbZV2dsHee1HxnxypTB7oRgfIN7CI6jgbZrkBS4CW39sDGVF52ZD$ 

----------------------------------------------------------------------
This is an e-mail from General Dynamics Land Systems. It is for the intended recipient only and may contain confidential and privileged information.  No one else may read, print, store, copy, forward or act in reliance on it or its attachments.  If you are not the intended recipient, please return this message to the sender and delete the message and any attachments from your computer. Your cooperation is appreciated.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://urldefense.us/v3/__https://lists.samba.org/mailman/options/samba__;!!LLC9-ftwI7ClqA!ZRjyYWSKS8S025C2JD5JVGxwFIzhzbZV2dsHee1HxnxypTB7oRgfIN7CI6jgbZrkBS4CW39sDIVP6RpW$ 

----------------------------------------------------------------------
This is an e-mail from General Dynamics Land Systems. It is for the intended recipient only and may contain confidential and privileged information.  No one else may read, print, store, copy, forward or act in reliance on it or its attachments.  If you are not the intended recipient, please return this message to the sender and delete the message and any attachments from your computer. Your cooperation is appreciated.