From: Wikked one on



> From: wikked1(a)hotmail.com
> To: samba(a)lists.samba.org
> Date: Wed, 9 Jun 2010 18:30:19 +0000
> Subject: [Samba] Domain Trusts
>
>
> Anybody?
>
> > Greetings List,
> >
> > I’ve
> > been attempting to establish a two way domain trust between Samba Domains. The reasons why are numerous but mainly so
> > that our Samba PDC supports Window7.
> > Domain A is Samba 3.0.33 and domain B is Samba 3.3.12 and I’ve
> > established that domain B trusts domain A without issue,however when I attempt
> > to trust domain B on domain A, I get the following error. “Could not connect to
> > server DomainA PDC. Storing password for trusted domain failed.”
> >
> > I’m certain the password is correct.
> >
> >
> > _________________________________________________________________
> > Hotmail is redefining busy with tools for the New Busy. Get more from your inbox.
> > http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_2
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions: https://lists.samba.org/mailman/options/samba
>
> _________________________________________________________________
> Hotmail is redefining busy with tools for the New Busy. Get more from your inbox.
> http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_2
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba

_________________________________________________________________
Hotmail has tools for the New Busy. Search, chat and e-mail from your inbox.
http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_1
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
From: Gaiseric Vandal on
What is the backend?

In domain A, you should have a user account for domain B (so that A can be
trusted by B.) And vice versa. The passwords created for those accounts
should be the passwords used when establishing trusts. So you should be
100% certain about those passwords.

Any chance you can upgrade DomainA to samba 3.3.12? Do the log files show
anything (maybe the wrong encryption levels for authenticating passwords?)



-----Original Message-----
From: samba-bounces(a)lists.samba.org [mailto:samba-bounces(a)lists.samba.org]
On Behalf Of Wikked one
Sent: Friday, June 11, 2010 5:05 AM
To: samba(a)lists.samba.org
Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????




> From: wikked1(a)hotmail.com
> To: samba(a)lists.samba.org
> Date: Wed, 9 Jun 2010 18:30:19 +0000
> Subject: [Samba] Domain Trusts
>
>
> Anybody?
>
> > Greetings List,
> >
> > I've
> > been attempting to establish a two way domain trust between Samba
Domains. The reasons why are numerous but mainly so
> > that our Samba PDC supports Window7.
> > Domain A is Samba 3.0.33 and domain B is Samba 3.3.12 and I've
> > established that domain B trusts domain A without issue,however when I
attempt
> > to trust domain B on domain A, I get the following error. "Could not
connect to
> > server DomainA PDC. Storing password for trusted domain failed."
> >
> > I'm certain the password is correct.
> >
> >
> > _________________________________________________________________
> > Hotmail is redefining busy with tools for the New Busy. Get more from
your inbox.
> >
http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
L:en-US:WM_HMP:042010_2
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions: https://lists.samba.org/mailman/options/samba
>
> _________________________________________________________________
> Hotmail is redefining busy with tools for the New Busy. Get more from your
inbox.
>
http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
L:en-US:WM_HMP:042010_2
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba

_________________________________________________________________
Hotmail has tools for the New Busy. Search, chat and e-mail from your inbox.
http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
L:en-US:WM_HMP:042010_1
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
From: Wikked one on

LDAP backend.
I am 100% sure about the passwords since I set them up just previous to the process.
The short answer to upgrading domain A is no,and the log files do not indicate anything.
I will increase the log level when I resume testing tomorrow.
The long answer to upgrading is this: Since we are looking towards Windows 7 workstation deployment,we
realize we need to use Samba 3.3 ,our existing domain (Samba 3.0.33) has NT4 workstations and legacy Netbios system names that we do not want to carry forward. So the solution I am hoping to implement is a new Samba 3.3 domain with a new domain name and SID that supports windows 7 (got that working) but also has a two way domain trust established. This would allow incremental deployment rather than a hard cut over.
Thanks!

> From: gaiseric.vandal(a)gmail.com
> To: samba(a)lists.samba.org
> Date: Sat, 12 Jun 2010 17:15:59 -0400
> Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
>
> What is the backend?
>
> In domain A, you should have a user account for domain B (so that A can be
> trusted by B.) And vice versa. The passwords created for those accounts
> should be the passwords used when establishing trusts. So you should be
> 100% certain about those passwords.
>
> Any chance you can upgrade DomainA to samba 3.3.12? Do the log files show
> anything (maybe the wrong encryption levels for authenticating passwords?)
>
>
>
> -----Original Message-----
> From: samba-bounces(a)lists.samba.org [mailto:samba-bounces(a)lists.samba.org]
> On Behalf Of Wikked one
> Sent: Friday, June 11, 2010 5:05 AM
> To: samba(a)lists.samba.org
> Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
>
>
>
>
> > From: wikked1(a)hotmail.com
> > To: samba(a)lists.samba.org
> > Date: Wed, 9 Jun 2010 18:30:19 +0000
> > Subject: [Samba] Domain Trusts
> >
> >
> > Anybody?
> >
> > > Greetings List,
> > >
> > > I've
> > > been attempting to establish a two way domain trust between Samba
> Domains. The reasons why are numerous but mainly so
> > > that our Samba PDC supports Window7.
> > > Domain A is Samba 3.0.33 and domain B is Samba 3.3.12 and I've
> > > established that domain B trusts domain A without issue,however when I
> attempt
> > > to trust domain B on domain A, I get the following error. "Could not
> connect to
> > > server DomainA PDC. Storing password for trusted domain failed."
> > >
> > > I'm certain the password is correct.
> > >
> > >
> > > _________________________________________________________________
> > > Hotmail is redefining busy with tools for the New Busy. Get more from
> your inbox.
> > >
> http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
> L:en-US:WM_HMP:042010_2
> > > --
> > > To unsubscribe from this list go to the following URL and read the
> > > instructions: https://lists.samba.org/mailman/options/samba
> >
> > _________________________________________________________________
> > Hotmail is redefining busy with tools for the New Busy. Get more from your
> inbox.
> >
> http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
> L:en-US:WM_HMP:042010_2
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions: https://lists.samba.org/mailman/options/samba
>
> _________________________________________________________________
> Hotmail has tools for the New Busy. Search, chat and e-mail from your inbox.
> http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
> L:en-US:WM_HMP:042010_1
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba

_________________________________________________________________
The New Busy is not the old busy. Search, chat and e-mail from your inbox.
http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_3
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
From: Gaiseric Vandal on
If you run "testparm -v" on each, are the encryption parameters (NTLM etc)
the same?



From: Wikked one [mailto:wikked1(a)hotmail.com]
Sent: Sunday, June 13, 2010 7:56 AM
To: gaiseric.vandal(a)gmail.com; samba(a)lists.samba.org
Subject: RE: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????



LDAP backend.
I am 100% sure about the passwords since I set them up just previous to the
process.
The short answer to upgrading domain A is no,and the log files do not
indicate anything.
I will increase the log level when I resume testing tomorrow.
The long answer to upgrading is this: Since we are looking towards Windows 7
workstation deployment,we
realize we need to use Samba 3.3 ,our existing domain (Samba 3.0.33) has NT4
workstations and legacy Netbios system names that we do not want to carry
forward. So the solution I am hoping to implement is a new Samba 3.3 domain
with a new domain name and SID that supports windows 7 (got that working)
but also has a two way domain trust established. This would allow
incremental deployment rather than a hard cut over.
Thanks!

> From: gaiseric.vandal(a)gmail.com
> To: samba(a)lists.samba.org
> Date: Sat, 12 Jun 2010 17:15:59 -0400
> Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
>
> What is the backend?
>
> In domain A, you should have a user account for domain B (so that A can be
> trusted by B.) And vice versa. The passwords created for those accounts
> should be the passwords used when establishing trusts. So you should be
> 100% certain about those passwords.
>
> Any chance you can upgrade DomainA to samba 3.3.12? Do the log files show
> anything (maybe the wrong encryption levels for authenticating passwords?)
>
>
>
> -----Original Message-----
> From: samba-bounces(a)lists.samba.org [mailto:samba-bounces(a)lists.samba.org]
> On Behalf Of Wikked one
> Sent: Friday, June 11, 2010 5:05 AM
> To: samba(a)lists.samba.org
> Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
>
>
>
>
> > From: wikked1(a)hotmail.com
> > To: samba(a)lists.samba.org
> > Date: Wed, 9 Jun 2010 18:30:19 +0000
> > Subject: [Samba] Domain Trusts
> >
> >
> > Anybody?
> >
> > > Greetings List,
> > >
> > > I've
> > > been attempting to establish a two way domain trust between Samba
> Domains. The reasons why are numerous but mainly so
> > > that our Samba PDC supports Window7.
> > > Domain A is Samba 3.0.33 and domain B is Samba 3.3.12 and I've
> > > established that domain B trusts domain A without issue,however when I
> attempt
> > > to trust domain B on domain A, I get the following error. "Could not
> connect to
> > > server DomainA PDC. Storing password for trusted domain failed."
> > >
> > > I'm certain the password is correct.
> > >
> > >
> > > _________________________________________________________________
> > > Hotmail is redefining busy with tools for the New Busy. Get more from
> your inbox.
> > >
>
http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
> L:en-US:WM_HMP:042010_2
> > > --
> > > To unsubscribe from this list go to the following URL and read the
> > > instructions: https://lists.samba.org/mailman/options/samba
> >
> > _________________________________________________________________
> > Hotmail is redefining busy with tools for the New Busy. Get more from
your
> inbox.
> >
>
http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
> L:en-US:WM_HMP:042010_2
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions: https://lists.samba.org/mailman/options/samba
>
> _________________________________________________________________
> Hotmail has tools for the New Busy. Search, chat and e-mail from your
inbox.
>
http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
> L:en-US:WM_HMP:042010_1
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba

_____

The New Busy is not the old busy. Search, chat and e-mail from your inbox.
Get started.
<http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:
WL:en-US:WM_HMP:042010_3>

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
From: Wikked one on

There are some differences when I run testparm -v.
PDC for Domain A
lanman auth=Yes
ntlm auth=Yes
client NTMLv2=No
client lanman auth=Yes
client plaintext auth=Yes

PDC for Domain B
lanman auth=No

ntlm auth=Yes

client NTMLv2=No

client lanman auth=No

client plaintext auth=No




> From: gaiseric.vandal(a)gmail.com
> To: samba(a)lists.samba.org
> Date: Sun, 13 Jun 2010 21:31:58 -0400
> Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
>
> If you run "testparm -v" on each, are the encryption parameters (NTLM etc)
> the same?
>
>
>
> From: Wikked one [mailto:wikked1(a)hotmail.com]
> Sent: Sunday, June 13, 2010 7:56 AM
> To: gaiseric.vandal(a)gmail.com; samba(a)lists.samba.org
> Subject: RE: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
>
>
>
> LDAP backend.
> I am 100% sure about the passwords since I set them up just previous to the
> process.
> The short answer to upgrading domain A is no,and the log files do not
> indicate anything.
> I will increase the log level when I resume testing tomorrow.
> The long answer to upgrading is this: Since we are looking towards Windows 7
> workstation deployment,we
> realize we need to use Samba 3.3 ,our existing domain (Samba 3.0.33) has NT4
> workstations and legacy Netbios system names that we do not want to carry
> forward. So the solution I am hoping to implement is a new Samba 3.3 domain
> with a new domain name and SID that supports windows 7 (got that working)
> but also has a two way domain trust established. This would allow
> incremental deployment rather than a hard cut over.
> Thanks!
>
> > From: gaiseric.vandal(a)gmail.com
> > To: samba(a)lists.samba.org
> > Date: Sat, 12 Jun 2010 17:15:59 -0400
> > Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> >
> > What is the backend?
> >
> > In domain A, you should have a user account for domain B (so that A can be
> > trusted by B.) And vice versa. The passwords created for those accounts
> > should be the passwords used when establishing trusts. So you should be
> > 100% certain about those passwords.
> >
> > Any chance you can upgrade DomainA to samba 3.3.12? Do the log files show
> > anything (maybe the wrong encryption levels for authenticating passwords?)
> >
> >
> >
> > -----Original Message-----
> > From: samba-bounces(a)lists.samba.org [mailto:samba-bounces(a)lists.samba.org]
> > On Behalf Of Wikked one
> > Sent: Friday, June 11, 2010 5:05 AM
> > To: samba(a)lists.samba.org
> > Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ????
> >
> >
> >
> >
> > > From: wikked1(a)hotmail.com
> > > To: samba(a)lists.samba.org
> > > Date: Wed, 9 Jun 2010 18:30:19 +0000
> > > Subject: [Samba] Domain Trusts
> > >
> > >
> > > Anybody?
> > >
> > > > Greetings List,
> > > >
> > > > I've
> > > > been attempting to establish a two way domain trust between Samba
> > Domains. The reasons why are numerous but mainly so
> > > > that our Samba PDC supports Window7.
> > > > Domain A is Samba 3.0.33 and domain B is Samba 3.3.12 and I've
> > > > established that domain B trusts domain A without issue,however when I
> > attempt
> > > > to trust domain B on domain A, I get the following error. "Could not
> > connect to
> > > > server DomainA PDC. Storing password for trusted domain failed."
> > > >
> > > > I'm certain the password is correct.
> > > >
> > > >
> > > > _________________________________________________________________
> > > > Hotmail is redefining busy with tools for the New Busy. Get more from
> > your inbox.
> > > >
> >
> http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
> > L:en-US:WM_HMP:042010_2
> > > > --
> > > > To unsubscribe from this list go to the following URL and read the
> > > > instructions: https://lists.samba.org/mailman/options/samba
> > >
> > > _________________________________________________________________
> > > Hotmail is redefining busy with tools for the New Busy. Get more from
> your
> > inbox.
> > >
> >
> http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
> > L:en-US:WM_HMP:042010_2
> > > --
> > > To unsubscribe from this list go to the following URL and read the
> > > instructions: https://lists.samba.org/mailman/options/samba
> >
> > _________________________________________________________________
> > Hotmail has tools for the New Busy. Search, chat and e-mail from your
> inbox.
> >
> http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W
> > L:en-US:WM_HMP:042010_1
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions: https://lists.samba.org/mailman/options/samba
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions: https://lists.samba.org/mailman/options/samba
>
> _____
>
> The New Busy is not the old busy. Search, chat and e-mail from your inbox.
> Get started.
> <http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:
> WL:en-US:WM_HMP:042010_3>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba

_________________________________________________________________
Hotmail has tools for the New Busy. Search, chat and e-mail from your inbox.
http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_1
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba