From: Gaiseric Vandal on
lanman and plaintext auth should only be needed if you are support
Windows 95/98 machines. NT 4 with SP6 should not require this. So
I would first disable lanman and plaintext on Domain A, and make sure it
has not broken authentication with your NT4 machine.



On 06/14/2010 11:39 AM, Wikked one wrote:
> There are some differences when I run testparm -v.
> PDC for Domain A
> lanman auth=Yes
> ntlm auth=Yes
> client NTMLv2=No
> client lanman auth=Yes
> client plaintext auth=Yes
>
> PDC for Domain B
> lanman auth=No
> ntlm auth=Yes
> client NTMLv2=No
> client lanman auth=No
> client plaintext auth=No
>
>
>
>
> > From: gaiseric.vandal(a)gmail.com
> > To: samba(a)lists.samba.org
> > Date: Sun, 13 Jun 2010 21:31:58 -0400
> > Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> >
> > If you run "testparm -v" on each, are the encryption parameters
> (NTLM etc)
> > the same?
> >
> >
> >
> > From: Wikked one [mailto:wikked1(a)hotmail.com]
> > Sent: Sunday, June 13, 2010 7:56 AM
> > To: gaiseric.vandal(a)gmail.com; samba(a)lists.samba.org
> > Subject: RE: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> >
> >
> >
> > LDAP backend.
> > I am 100% sure about the passwords since I set them up just previous
> to the
> > process.
> > The short answer to upgrading domain A is no,and the log files do not
> > indicate anything.
> > I will increase the log level when I resume testing tomorrow.
> > The long answer to upgrading is this: Since we are looking towards
> Windows 7
> > workstation deployment,we
> > realize we need to use Samba 3.3 ,our existing domain (Samba 3.0.33)
> has NT4
> > workstations and legacy Netbios system names that we do not want to
> carry
> > forward. So the solution I am hoping to implement is a new Samba 3.3
> domain
> > with a new domain name and SID that supports windows 7 (got that
> working)
> > but also has a two way domain trust established. This would allow
> > incremental deployment rather than a hard cut over.
> > Thanks!
> >
> > > From: gaiseric.vandal(a)gmail.com
> > > To: samba(a)lists.samba.org
> > > Date: Sat, 12 Jun 2010 17:15:59 -0400
> > > Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> > >
> > > What is the backend?
> > >
> > > In domain A, you should have a user account for domain B (so that
> A can be
> > > trusted by B.) And vice versa. The passwords created for those
> accounts
> > > should be the passwords used when establishing trusts. So you
> should be
> > > 100% certain about those passwords.
> > >
> > > Any chance you can upgrade DomainA to samba 3.3.12? Do the log
> files show
> > > anything (maybe the wrong encryption levels for authenticating
> passwords?)
> > >
> > >
> > >
> > > -----Original Message-----
> > > From: samba-bounces(a)lists.samba.org
> [mailto:samba-bounces(a)lists.samba.org]
> > > On Behalf Of Wikked one
> > > Sent: Friday, June 11, 2010 5:05 AM
> > > To: samba(a)lists.samba.org
> > > Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> > >
> > >
> > >
> > >
> > > > From: wikked1(a)hotmail.com
> > > > To: samba(a)lists.samba.org
> > > > Date: Wed, 9 Jun 2010 18:30:19 +0000
> > > > Subject: [Samba] Domain Trusts
> > > >
> > > >
> > > > Anybody?
> > > >
> > > > > Greetings List,
> > > > >
> > > > > I've
> > > > > been attempting to establish a two way domain trust between Samba
> > > Domains. The reasons why are numerous but mainly so
> > > > > that our Samba PDC supports Window7.
> > > > > Domain A is Samba 3.0.33 and domain B is Samba 3.3.12 and I've
> > > > > established that domain B trusts domain A without
> issue,however when I
> > > attempt
> > > > > to trust domain B on domain A, I get the following error.
> "Could not
> > > connect to
> > > > > server DomainA PDC. Storing password for trusted domain failed."
> > > > >
> > > > > I'm certain the password is correct.
> > > > >
> > > > >
> > > > > _________________________________________________________________
> > > > > Hotmail is redefining busy with tools for the New Busy. Get
> more from
> > > your inbox.
> > > > >
> > >
> >
> http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
> > > L:en-US:WM_HMP:042010_2
> > > > > --
> > > > > To unsubscribe from this list go to the following URL and read the
> > > > > instructions: https://lists.samba.org/mailman/options/samba
> > > >
> > > > _________________________________________________________________
> > > > Hotmail is redefining busy with tools for the New Busy. Get more
> from
> > your
> > > inbox.
> > > >
> > >
> >
> http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
> > > L:en-US:WM_HMP:042010_2
> > > > --
> > > > To unsubscribe from this list go to the following URL and read the
> > > > instructions: https://lists.samba.org/mailman/options/samba
> > >
> > > _________________________________________________________________
> > > Hotmail has tools for the New Busy. Search, chat and e-mail from your
> > inbox.
> > >
> >
> http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
> > > L:en-US:WM_HMP:042010_1
> > > --
> > > To unsubscribe from this list go to the following URL and read the
> > > instructions: https://lists.samba.org/mailman/options/samba
> > >
> > > --
> > > To unsubscribe from this list go to the following URL and read the
> > > instructions: https://lists.samba.org/mailman/options/samba
> >
> > _____
> >
> > The New Busy is not the old busy. Search, chat and e-mail from your
> inbox.
> > Get started.
> >
> <http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:
> > WL:en-US:WM_HMP:042010_3>
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions: https://lists.samba.org/mailman/options/samba
>
> ------------------------------------------------------------------------
> Hotmail has tools for the New Busy. Search, chat and e-mail from your
> inbox. Learn more.
> <http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_1>

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
From: Wikked one on

I have set those parameters as you suggested without NT4 problems.
This has had no effect on the trust relationship, I still get the same message.
I can submit a log file from DomainA,if it would help?

> Date: Mon, 14 Jun 2010 11:45:29 -0400
> From: gaiseric.vandal(a)gmail.com
> To: samba(a)lists.samba.org
> Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
>
> lanman and plaintext auth should only be needed if you are support
> Windows 95/98 machines. NT 4 with SP6 should not require this. So
> I would first disable lanman and plaintext on Domain A, and make sure it
> has not broken authentication with your NT4 machine.
>
>
>
> On 06/14/2010 11:39 AM, Wikked one wrote:
> > There are some differences when I run testparm -v.
> > PDC for Domain A
> > lanman auth=Yes
> > ntlm auth=Yes
> > client NTMLv2=No
> > client lanman auth=Yes
> > client plaintext auth=Yes
> >
> > PDC for Domain B
> > lanman auth=No
> > ntlm auth=Yes
> > client NTMLv2=No
> > client lanman auth=No
> > client plaintext auth=No
> >
> >
> >
> >
> > > From: gaiseric.vandal(a)gmail.com
> > > To: samba(a)lists.samba.org
> > > Date: Sun, 13 Jun 2010 21:31:58 -0400
> > > Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> > >
> > > If you run "testparm -v" on each, are the encryption parameters
> > (NTLM etc)
> > > the same?
> > >
> > >
> > >
> > > From: Wikked one [mailto:wikked1(a)hotmail.com]
> > > Sent: Sunday, June 13, 2010 7:56 AM
> > > To: gaiseric.vandal(a)gmail.com; samba(a)lists.samba.org
> > > Subject: RE: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> > >
> > >
> > >
> > > LDAP backend.
> > > I am 100% sure about the passwords since I set them up just previous
> > to the
> > > process.
> > > The short answer to upgrading domain A is no,and the log files do not
> > > indicate anything.
> > > I will increase the log level when I resume testing tomorrow.
> > > The long answer to upgrading is this: Since we are looking towards
> > Windows 7
> > > workstation deployment,we
> > > realize we need to use Samba 3.3 ,our existing domain (Samba 3.0.33)
> > has NT4
> > > workstations and legacy Netbios system names that we do not want to
> > carry
> > > forward. So the solution I am hoping to implement is a new Samba 3.3
> > domain
> > > with a new domain name and SID that supports windows 7 (got that
> > working)
> > > but also has a two way domain trust established. This would allow
> > > incremental deployment rather than a hard cut over.
> > > Thanks!
> > >
> > > > From: gaiseric.vandal(a)gmail.com
> > > > To: samba(a)lists.samba.org
> > > > Date: Sat, 12 Jun 2010 17:15:59 -0400
> > > > Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> > > >
> > > > What is the backend?
> > > >
> > > > In domain A, you should have a user account for domain B (so that
> > A can be
> > > > trusted by B.) And vice versa. The passwords created for those
> > accounts
> > > > should be the passwords used when establishing trusts. So you
> > should be
> > > > 100% certain about those passwords.
> > > >
> > > > Any chance you can upgrade DomainA to samba 3.3.12? Do the log
> > files show
> > > > anything (maybe the wrong encryption levels for authenticating
> > passwords?)
> > > >
> > > >
> > > >
> > > > -----Original Message-----
> > > > From: samba-bounces(a)lists.samba.org
> > [mailto:samba-bounces(a)lists.samba.org]
> > > > On Behalf Of Wikked one
> > > > Sent: Friday, June 11, 2010 5:05 AM
> > > > To: samba(a)lists.samba.org
> > > > Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> > > >
> > > >
> > > >
> > > >
> > > > > From: wikked1(a)hotmail.com
> > > > > To: samba(a)lists.samba.org
> > > > > Date: Wed, 9 Jun 2010 18:30:19 +0000
> > > > > Subject: [Samba] Domain Trusts
> > > > >
> > > > >
> > > > > Anybody?
> > > > >
> > > > > > Greetings List,
> > > > > >
> > > > > > I've
> > > > > > been attempting to establish a two way domain trust between Samba
> > > > Domains. The reasons why are numerous but mainly so
> > > > > > that our Samba PDC supports Window7.
> > > > > > Domain A is Samba 3.0.33 and domain B is Samba 3.3.12 and I've
> > > > > > established that domain B trusts domain A without
> > issue,however when I
> > > > attempt
> > > > > > to trust domain B on domain A, I get the following error.
> > "Could not
> > > > connect to
> > > > > > server DomainA PDC. Storing password for trusted domain failed."
> > > > > >
> > > > > > I'm certain the password is correct.
> > > > > >
> > > > > >
> > > > > > _________________________________________________________________
> > > > > > Hotmail is redefining busy with tools for the New Busy. Get
> > more from
> > > > your inbox.
> > > > > >
> > > >
> > >
> > http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
> > > > L:en-US:WM_HMP:042010_2
> > > > > > --
> > > > > > To unsubscribe from this list go to the following URL and read the
> > > > > > instructions: https://lists.samba.org/mailman/options/samba
> > > > >
> > > > > _________________________________________________________________
> > > > > Hotmail is redefining busy with tools for the New Busy. Get more
> > from
> > > your
> > > > inbox.
> > > > >
> > > >
> > >
> > http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
> > > > L:en-US:WM_HMP:042010_2
> > > > > --
> > > > > To unsubscribe from this list go to the following URL and read the
> > > > > instructions: https://lists.samba.org/mailman/options/samba
> > > >
> > > > _________________________________________________________________
> > > > Hotmail has tools for the New Busy. Search, chat and e-mail from your
> > > inbox.
> > > >
> > >
> > http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
> > > > L:en-US:WM_HMP:042010_1
> > > > --
> > > > To unsubscribe from this list go to the following URL and read the
> > > > instructions: https://lists.samba.org/mailman/options/samba
> > > >
> > > > --
> > > > To unsubscribe from this list go to the following URL and read the
> > > > instructions: https://lists.samba.org/mailman/options/samba
> > >
> > > _____
> > >
> > > The New Busy is not the old busy. Search, chat and e-mail from your
> > inbox.
> > > Get started.
> > >
> > <http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:
> > > WL:en-US:WM_HMP:042010_3>
> > >
> > > --
> > > To unsubscribe from this list go to the following URL and read the
> > > instructions: https://lists.samba.org/mailman/options/samba
> >
> > ------------------------------------------------------------------------
> > Hotmail has tools for the New Busy. Search, chat and e-mail from your
> > inbox. Learn more.
> > <http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_1>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba

_________________________________________________________________
The New Busy is not the old busy. Search, chat and e-mail from your inbox.
http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_3
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
From: Wikked one on

Log file from PDC Domain A attached.
Any suggestions??

> From: wikked1(a)hotmail.com
> To: gaiseric.vandal(a)gmail.com; samba(a)lists.samba.org
> Date: Mon, 14 Jun 2010 16:47:28 +0000
> Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
>
>
> I have set those parameters as you suggested without NT4 problems.
> This has had no effect on the trust relationship, I still get the same message.
> I can submit a log file from DomainA,if it would help?
>
> > Date: Mon, 14 Jun 2010 11:45:29 -0400
> > From: gaiseric.vandal(a)gmail.com
> > To: samba(a)lists.samba.org
> > Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> >
> > lanman and plaintext auth should only be needed if you are support
> > Windows 95/98 machines. NT 4 with SP6 should not require this. So
> > I would first disable lanman and plaintext on Domain A, and make sure it
> > has not broken authentication with your NT4 machine.
> >
> >
> >
> > On 06/14/2010 11:39 AM, Wikked one wrote:
> > > There are some differences when I run testparm -v.
> > > PDC for Domain A
> > > lanman auth=Yes
> > > ntlm auth=Yes
> > > client NTMLv2=No
> > > client lanman auth=Yes
> > > client plaintext auth=Yes
> > >
> > > PDC for Domain B
> > > lanman auth=No
> > > ntlm auth=Yes
> > > client NTMLv2=No
> > > client lanman auth=No
> > > client plaintext auth=No
> > >
> > >
> > >
> > >
> > > > From: gaiseric.vandal(a)gmail.com
> > > > To: samba(a)lists.samba.org
> > > > Date: Sun, 13 Jun 2010 21:31:58 -0400
> > > > Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> > > >
> > > > If you run "testparm -v" on each, are the encryption parameters
> > > (NTLM etc)
> > > > the same?
> > > >
> > > >
> > > >
> > > > From: Wikked one [mailto:wikked1(a)hotmail.com]
> > > > Sent: Sunday, June 13, 2010 7:56 AM
> > > > To: gaiseric.vandal(a)gmail.com; samba(a)lists.samba.org
> > > > Subject: RE: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> > > >
> > > >
> > > >
> > > > LDAP backend.
> > > > I am 100% sure about the passwords since I set them up just previous
> > > to the
> > > > process.
> > > > The short answer to upgrading domain A is no,and the log files do not
> > > > indicate anything.
> > > > I will increase the log level when I resume testing tomorrow.
> > > > The long answer to upgrading is this: Since we are looking towards
> > > Windows 7
> > > > workstation deployment,we
> > > > realize we need to use Samba 3.3 ,our existing domain (Samba 3.0.33)
> > > has NT4
> > > > workstations and legacy Netbios system names that we do not want to
> > > carry
> > > > forward. So the solution I am hoping to implement is a new Samba 3.3
> > > domain
> > > > with a new domain name and SID that supports windows 7 (got that
> > > working)
> > > > but also has a two way domain trust established. This would allow
> > > > incremental deployment rather than a hard cut over.
> > > > Thanks!
> > > >
> > > > > From: gaiseric.vandal(a)gmail.com
> > > > > To: samba(a)lists.samba.org
> > > > > Date: Sat, 12 Jun 2010 17:15:59 -0400
> > > > > Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> > > > >
> > > > > What is the backend?
> > > > >
> > > > > In domain A, you should have a user account for domain B (so that
> > > A can be
> > > > > trusted by B.) And vice versa. The passwords created for those
> > > accounts
> > > > > should be the passwords used when establishing trusts. So you
> > > should be
> > > > > 100% certain about those passwords.
> > > > >
> > > > > Any chance you can upgrade DomainA to samba 3.3.12? Do the log
> > > files show
> > > > > anything (maybe the wrong encryption levels for authenticating
> > > passwords?)
> > > > >
> > > > >
> > > > >
> > > > > -----Original Message-----
> > > > > From: samba-bounces(a)lists.samba.org
> > > [mailto:samba-bounces(a)lists.samba.org]
> > > > > On Behalf Of Wikked one
> > > > > Sent: Friday, June 11, 2010 5:05 AM
> > > > > To: samba(a)lists.samba.org
> > > > > Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > > From: wikked1(a)hotmail.com
> > > > > > To: samba(a)lists.samba.org
> > > > > > Date: Wed, 9 Jun 2010 18:30:19 +0000
> > > > > > Subject: [Samba] Domain Trusts
> > > > > >
> > > > > >
> > > > > > Anybody?
> > > > > >
> > > > > > > Greetings List,
> > > > > > >
> > > > > > > I've
> > > > > > > been attempting to establish a two way domain trust between Samba
> > > > > Domains. The reasons why are numerous but mainly so
> > > > > > > that our Samba PDC supports Window7.
> > > > > > > Domain A is Samba 3.0.33 and domain B is Samba 3.3.12 and I've
> > > > > > > established that domain B trusts domain A without
> > > issue,however when I
> > > > > attempt
> > > > > > > to trust domain B on domain A, I get the following error.
> > > "Could not
> > > > > connect to
> > > > > > > server DomainA PDC. Storing password for trusted domain failed."
> > > > > > >
> > > > > > > I'm certain the password is correct.
> > > > > > >
> > > > > > >
> > > > > > > _________________________________________________________________
> > > > > > > Hotmail is redefining busy with tools for the New Busy. Get
> > > more from
> > > > > your inbox.
> > > > > > >
> > > > >
> > > >
> > > http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
> > > > > L:en-US:WM_HMP:042010_2
> > > > > > > --
> > > > > > > To unsubscribe from this list go to the following URL and read the
> > > > > > > instructions: https://lists.samba.org/mailman/options/samba
> > > > > >
> > > > > > _________________________________________________________________
> > > > > > Hotmail is redefining busy with tools for the New Busy. Get more
> > > from
> > > > your
> > > > > inbox.
> > > > > >
> > > > >
> > > >
> > > http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
> > > > > L:en-US:WM_HMP:042010_2
> > > > > > --
> > > > > > To unsubscribe from this list go to the following URL and read the
> > > > > > instructions: https://lists.samba.org/mailman/options/samba
> > > > >
> > > > > _________________________________________________________________
> > > > > Hotmail has tools for the New Busy. Search, chat and e-mail from your
> > > > inbox.
> > > > >
> > > >
> > > http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
> > > > > L:en-US:WM_HMP:042010_1
> > > > > --
> > > > > To unsubscribe from this list go to the following URL and read the
> > > > > instructions: https://lists.samba.org/mailman/options/samba
> > > > >
> > > > > --
> > > > > To unsubscribe from this list go to the following URL and read the
> > > > > instructions: https://lists.samba.org/mailman/options/samba
> > > >
> > > > _____
> > > >
> > > > The New Busy is not the old busy. Search, chat and e-mail from your
> > > inbox.
> > > > Get started.
> > > >
> > > <http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:
> > > > WL:en-US:WM_HMP:042010_3>
> > > >
> > > > --
> > > > To unsubscribe from this list go to the following URL and read the
> > > > instructions: https://lists.samba.org/mailman/options/samba
> > >
> > > ------------------------------------------------------------------------
> > > Hotmail has tools for the New Busy. Search, chat and e-mail from your
> > > inbox. Learn more.
> > > <http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_1>
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions: https://lists.samba.org/mailman/options/samba
>
> _________________________________________________________________
> The New Busy is not the old busy. Search, chat and e-mail from your inbox.
> http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_3
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba

_________________________________________________________________
The New Busy is not the too busy. Combine all your e-mail accounts with Hotmail.
http://www.windowslive.com/campaign/thenewbusy?tile=multiaccount&ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_4
From: Wikked one on

I'm still hoping for hints,suggestions,this should work shouldn't it?

> From: wikked1(a)hotmail.com
> To: gaiseric.vandal(a)gmail.com; samba(a)lists.samba.org
> Date: Tue, 15 Jun 2010 16:02:47 +0000
> Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
>
>
> Log file from PDC Domain A attached.
> Any suggestions??
>
> > From: wikked1(a)hotmail.com
> > To: gaiseric.vandal(a)gmail.com; samba(a)lists.samba.org
> > Date: Mon, 14 Jun 2010 16:47:28 +0000
> > Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> >
> >
> > I have set those parameters as you suggested without NT4 problems.
> > This has had no effect on the trust relationship, I still get the same message.
> > I can submit a log file from DomainA,if it would help?
> >
> > > Date: Mon, 14 Jun 2010 11:45:29 -0400
> > > From: gaiseric.vandal(a)gmail.com
> > > To: samba(a)lists.samba.org
> > > Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> > >
> > > lanman and plaintext auth should only be needed if you are support
> > > Windows 95/98 machines. NT 4 with SP6 should not require this. So
> > > I would first disable lanman and plaintext on Domain A, and make sure it
> > > has not broken authentication with your NT4 machine.
> > >
> > >
> > >
> > > On 06/14/2010 11:39 AM, Wikked one wrote:
> > > > There are some differences when I run testparm -v.
> > > > PDC for Domain A
> > > > lanman auth=Yes
> > > > ntlm auth=Yes
> > > > client NTMLv2=No
> > > > client lanman auth=Yes
> > > > client plaintext auth=Yes
> > > >
> > > > PDC for Domain B
> > > > lanman auth=No
> > > > ntlm auth=Yes
> > > > client NTMLv2=No
> > > > client lanman auth=No
> > > > client plaintext auth=No
> > > >
> > > >
> > > >
> > > >
> > > > > From: gaiseric.vandal(a)gmail.com
> > > > > To: samba(a)lists.samba.org
> > > > > Date: Sun, 13 Jun 2010 21:31:58 -0400
> > > > > Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> > > > >
> > > > > If you run "testparm -v" on each, are the encryption parameters
> > > > (NTLM etc)
> > > > > the same?
> > > > >
> > > > >
> > > > >
> > > > > From: Wikked one [mailto:wikked1(a)hotmail.com]
> > > > > Sent: Sunday, June 13, 2010 7:56 AM
> > > > > To: gaiseric.vandal(a)gmail.com; samba(a)lists.samba.org
> > > > > Subject: RE: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> > > > >
> > > > >
> > > > >
> > > > > LDAP backend.
> > > > > I am 100% sure about the passwords since I set them up just previous
> > > > to the
> > > > > process.
> > > > > The short answer to upgrading domain A is no,and the log files do not
> > > > > indicate anything.
> > > > > I will increase the log level when I resume testing tomorrow.
> > > > > The long answer to upgrading is this: Since we are looking towards
> > > > Windows 7
> > > > > workstation deployment,we
> > > > > realize we need to use Samba 3.3 ,our existing domain (Samba 3.0.33)
> > > > has NT4
> > > > > workstations and legacy Netbios system names that we do not want to
> > > > carry
> > > > > forward. So the solution I am hoping to implement is a new Samba 3.3
> > > > domain
> > > > > with a new domain name and SID that supports windows 7 (got that
> > > > working)
> > > > > but also has a two way domain trust established. This would allow
> > > > > incremental deployment rather than a hard cut over.
> > > > > Thanks!
> > > > >
> > > > > > From: gaiseric.vandal(a)gmail.com
> > > > > > To: samba(a)lists.samba.org
> > > > > > Date: Sat, 12 Jun 2010 17:15:59 -0400
> > > > > > Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> > > > > >
> > > > > > What is the backend?
> > > > > >
> > > > > > In domain A, you should have a user account for domain B (so that
> > > > A can be
> > > > > > trusted by B.) And vice versa. The passwords created for those
> > > > accounts
> > > > > > should be the passwords used when establishing trusts. So you
> > > > should be
> > > > > > 100% certain about those passwords.
> > > > > >
> > > > > > Any chance you can upgrade DomainA to samba 3.3.12? Do the log
> > > > files show
> > > > > > anything (maybe the wrong encryption levels for authenticating
> > > > passwords?)
> > > > > >
> > > > > >
> > > > > >
> > > > > > -----Original Message-----
> > > > > > From: samba-bounces(a)lists.samba.org
> > > > [mailto:samba-bounces(a)lists.samba.org]
> > > > > > On Behalf Of Wikked one
> > > > > > Sent: Friday, June 11, 2010 5:05 AM
> > > > > > To: samba(a)lists.samba.org
> > > > > > Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > > > From: wikked1(a)hotmail.com
> > > > > > > To: samba(a)lists.samba.org
> > > > > > > Date: Wed, 9 Jun 2010 18:30:19 +0000
> > > > > > > Subject: [Samba] Domain Trusts
> > > > > > >
> > > > > > >
> > > > > > > Anybody?
> > > > > > >
> > > > > > > > Greetings List,
> > > > > > > >
> > > > > > > > I've
> > > > > > > > been attempting to establish a two way domain trust between Samba
> > > > > > Domains. The reasons why are numerous but mainly so
> > > > > > > > that our Samba PDC supports Window7.
> > > > > > > > Domain A is Samba 3.0.33 and domain B is Samba 3.3.12 and I've
> > > > > > > > established that domain B trusts domain A without
> > > > issue,however when I
> > > > > > attempt
> > > > > > > > to trust domain B on domain A, I get the following error.
> > > > "Could not
> > > > > > connect to
> > > > > > > > server DomainA PDC. Storing password for trusted domain failed."
> > > > > > > >
> > > > > > > > I'm certain the password is correct.
> > > > > > > >
> > > > > > > >
> > > > > > > > _________________________________________________________________
> > > > > > > > Hotmail is redefining busy with tools for the New Busy. Get
> > > > more from
> > > > > > your inbox.
> > > > > > > >
> > > > > >
> > > > >
> > > > http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
> > > > > > L:en-US:WM_HMP:042010_2
> > > > > > > > --
> > > > > > > > To unsubscribe from this list go to the following URL and read the
> > > > > > > > instructions: https://lists.samba.org/mailman/options/samba
> > > > > > >
> > > > > > > _________________________________________________________________
> > > > > > > Hotmail is redefining busy with tools for the New Busy. Get more
> > > > from
> > > > > your
> > > > > > inbox.
> > > > > > >
> > > > > >
> > > > >
> > > > http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
> > > > > > L:en-US:WM_HMP:042010_2
> > > > > > > --
> > > > > > > To unsubscribe from this list go to the following URL and read the
> > > > > > > instructions: https://lists.samba.org/mailman/options/samba
> > > > > >
> > > > > > _________________________________________________________________
> > > > > > Hotmail has tools for the New Busy. Search, chat and e-mail from your
> > > > > inbox.
> > > > > >
> > > > >
> > > > http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
> > > > > > L:en-US:WM_HMP:042010_1
> > > > > > --
> > > > > > To unsubscribe from this list go to the following URL and read the
> > > > > > instructions: https://lists.samba.org/mailman/options/samba
> > > > > >
> > > > > > --
> > > > > > To unsubscribe from this list go to the following URL and read the
> > > > > > instructions: https://lists.samba.org/mailman/options/samba
> > > > >
> > > > > _____
> > > > >
> > > > > The New Busy is not the old busy. Search, chat and e-mail from your
> > > > inbox.
> > > > > Get started.
> > > > >
> > > > <http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:
> > > > > WL:en-US:WM_HMP:042010_3>
> > > > >
> > > > > --
> > > > > To unsubscribe from this list go to the following URL and read the
> > > > > instructions: https://lists.samba.org/mailman/options/samba
> > > >
> > > > ------------------------------------------------------------------------
> > > > Hotmail has tools for the New Busy. Search, chat and e-mail from your
> > > > inbox. Learn more.
> > > > <http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_1>
> > >
> > > --
> > > To unsubscribe from this list go to the following URL and read the
> > > instructions: https://lists.samba.org/mailman/options/samba
> >
> > _________________________________________________________________
> > The New Busy is not the old busy. Search, chat and e-mail from your inbox.
> > http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_3
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions: https://lists.samba.org/mailman/options/samba
>
> _________________________________________________________________
> The New Busy is not the too busy. Combine all your e-mail accounts with Hotmail.
> http://www.windowslive.com/campaign/thenewbusy?tile=multiaccount&ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_4

_________________________________________________________________
The New Busy is not the old busy. Search, chat and e-mail from your inbox.
http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_3
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba