can the user connect to a non-Samba resource in org.company.com? if so, I'd focus on analysing the Network traffic between the Samba-Server and the Client and go from there. Likely something missing on the Samba side.
/Guido -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Happy Sent: Wednesday, November 17, 2004 6:15 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Cross-domain authentication problem? Dear ActiveDir colleagues: I am connected to the network hosting the org.company.com domain. org.domain.com is the root of a Windows 2000 forest. There is a one-way trust from org.domain.com to domain.com. I have a workstation in the company.com domain and am logged in as a user in the company.com domain. Company.com is the root of a distinct Windows Server 2003 forest. When I attempt to connect from that workstation to a Samba server which is a member of the org.company.com domain using an org.company.com user account's credentials, several things happen: (1) the org.company.com domain controller returns NT_STATUS_WRONG_PASSWORD to the Samba server for the org.company.com user (2) my company.com account (frequently) becomes locked out after multiple attempts What is happening? Why? If it's unclear, how should I diagnose the problem further. If it's a "no-brainer," how can I correct the problem? Warmly, --Pete Thomas -- Pete 'Happy' Thomas ([EMAIL PROTECTED]) Web Site: https://www.painless-computing.com/peteandpam Blog: http://happypete.livejournal.com List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
