I have set those parameters as you suggested without NT4 problems. This has had no effect on the trust relationship, I still get the same message. I can submit a log file from DomainA,if it would help?
> Date: Mon, 14 Jun 2010 11:45:29 -0400 > From: [email protected] > To: [email protected] > Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ???? > > lanman and plaintext auth should only be needed if you are support > Windows 95/98 machines. NT 4 with SP6 should not require this. So > I would first disable lanman and plaintext on Domain A, and make sure it > has not broken authentication with your NT4 machine. > > > > On 06/14/2010 11:39 AM, Wikked one wrote: > > There are some differences when I run testparm -v. > > PDC for Domain A > > lanman auth=Yes > > ntlm auth=Yes > > client NTMLv2=No > > client lanman auth=Yes > > client plaintext auth=Yes > > > > PDC for Domain B > > lanman auth=No > > ntlm auth=Yes > > client NTMLv2=No > > client lanman auth=No > > client plaintext auth=No > > > > > > > > > > > From: [email protected] > > > To: [email protected] > > > Date: Sun, 13 Jun 2010 21:31:58 -0400 > > > Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ???? > > > > > > If you run "testparm -v" on each, are the encryption parameters > > (NTLM etc) > > > the same? > > > > > > > > > > > > From: Wikked one [mailto:[email protected]] > > > Sent: Sunday, June 13, 2010 7:56 AM > > > To: [email protected]; [email protected] > > > Subject: RE: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ???? > > > > > > > > > > > > LDAP backend. > > > I am 100% sure about the passwords since I set them up just previous > > to the > > > process. > > > The short answer to upgrading domain A is no,and the log files do not > > > indicate anything. > > > I will increase the log level when I resume testing tomorrow. > > > The long answer to upgrading is this: Since we are looking towards > > Windows 7 > > > workstation deployment,we > > > realize we need to use Samba 3.3 ,our existing domain (Samba 3.0.33) > > has NT4 > > > workstations and legacy Netbios system names that we do not want to > > carry > > > forward. So the solution I am hoping to implement is a new Samba 3.3 > > domain > > > with a new domain name and SID that supports windows 7 (got that > > working) > > > but also has a two way domain trust established. This would allow > > > incremental deployment rather than a hard cut over. > > > Thanks! > > > > > > > From: [email protected] > > > > To: [email protected] > > > > Date: Sat, 12 Jun 2010 17:15:59 -0400 > > > > Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ???? > > > > > > > > What is the backend? > > > > > > > > In domain A, you should have a user account for domain B (so that > > A can be > > > > trusted by B.) And vice versa. The passwords created for those > > accounts > > > > should be the passwords used when establishing trusts. So you > > should be > > > > 100% certain about those passwords. > > > > > > > > Any chance you can upgrade DomainA to samba 3.3.12? Do the log > > files show > > > > anything (maybe the wrong encryption levels for authenticating > > passwords?) > > > > > > > > > > > > > > > > -----Original Message----- > > > > From: [email protected] > > [mailto:[email protected]] > > > > On Behalf Of Wikked one > > > > Sent: Friday, June 11, 2010 5:05 AM > > > > To: [email protected] > > > > Subject: Re: [Samba] Domain Trusts with Samba 3.0.33 and 3.3.12 ???? > > > > > > > > > > > > > > > > > > > > > From: [email protected] > > > > > To: [email protected] > > > > > Date: Wed, 9 Jun 2010 18:30:19 +0000 > > > > > Subject: [Samba] Domain Trusts > > > > > > > > > > > > > > > Anybody? > > > > > > > > > > > Greetings List, > > > > > > > > > > > > I've > > > > > > been attempting to establish a two way domain trust between Samba > > > > Domains. The reasons why are numerous but mainly so > > > > > > that our Samba PDC supports Window7. > > > > > > Domain A is Samba 3.0.33 and domain B is Samba 3.3.12 and I've > > > > > > established that domain B trusts domain A without > > issue,however when I > > > > attempt > > > > > > to trust domain B on domain A, I get the following error. > > "Could not > > > > connect to > > > > > > server DomainA PDC. Storing password for trusted domain failed." > > > > > > > > > > > > I'm certain the password is correct. > > > > > > > > > > > > > > > > > > _________________________________________________________________ > > > > > > Hotmail is redefining busy with tools for the New Busy. Get > > more from > > > > your inbox. > > > > > > > > > > > > > > > http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W > > > > L:en-US:WM_HMP:042010_2 > > > > > > -- > > > > > > To unsubscribe from this list go to the following URL and read the > > > > > > instructions: https://lists.samba.org/mailman/options/samba > > > > > > > > > > _________________________________________________________________ > > > > > Hotmail is redefining busy with tools for the New Busy. Get more > > from > > > your > > > > inbox. > > > > > > > > > > > > > > http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W > > > > L:en-US:WM_HMP:042010_2 > > > > > -- > > > > > To unsubscribe from this list go to the following URL and read the > > > > > instructions: https://lists.samba.org/mailman/options/samba > > > > > > > > _________________________________________________________________ > > > > Hotmail has tools for the New Busy. Search, chat and e-mail from your > > > inbox. > > > > > > > > > http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:W > > > > L:en-US:WM_HMP:042010_1 > > > > -- > > > > To unsubscribe from this list go to the following URL and read the > > > > instructions: https://lists.samba.org/mailman/options/samba > > > > > > > > -- > > > > To unsubscribe from this list go to the following URL and read the > > > > instructions: https://lists.samba.org/mailman/options/samba > > > > > > _____ > > > > > > The New Busy is not the old busy. Search, chat and e-mail from your > > inbox. > > > Get started. > > > > > <http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON: > > > WL:en-US:WM_HMP:042010_3> > > > > > > -- > > > To unsubscribe from this list go to the following URL and read the > > > instructions: https://lists.samba.org/mailman/options/samba > > > > ------------------------------------------------------------------------ > > Hotmail has tools for the New Busy. Search, chat and e-mail from your > > inbox. Learn more. > > <http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_1> > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba _________________________________________________________________ The New Busy is not the old busy. Search, chat and e-mail from your inbox. http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_3 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
