Two way trust from DomainB (not the root) Forest1 to DomainA (root) Forest2
Forest1 has an empty root, Forest2 does not. From: Ken Schaefer [mailto:k...@adopenstatic.com] Sent: Wednesday, September 19, 2012 7:19 PM To: NT System Admin Issues Subject: RE: NetApp CIFS, Windows Servers and Send unencrypted password to third-party SMB servers What types of trusts do you have setup, and at what levels? From: David Lum [mailto:david....@nwea.org]<mailto:[mailto:david....@nwea.org]> Sent: Thursday, 20 September 2012 6:14 AM To: NT System Admin Issues Subject: RE: NetApp CIFS, Windows Servers and Send unencrypted password to third-party SMB servers They were joined to Forest 1 DomainB. The error is when trying to map from a server in Forest2 DomainA. There's a trust at that level as well, if that matters. From: Michael B. Smith [mailto:mich...@smithcons.com]<mailto:[mailto:mich...@smithcons.com]> Sent: Wednesday, September 19, 2012 12:48 PM To: NT System Admin Issues Subject: RE: NetApp CIFS, Windows Servers and Send unencrypted password to third-party SMB servers His response: OK, it's guesswork at this stage but I want to suggest that when they ran CIFS setup on the controllers they selected Option 4. That suggests they did not join the controllers to the domain and are using some LDAP/NIS authentication mechanism and therefore, yes, the controllers are suddenly not Windows boxes & members of the domain, but are, sadly, probably exposing CIFS and NFS in the same volume (perfectly supported and legal etc) but not what the Windows clients prefer to play with......... Check with them, are the controllers (or the VFilers (they'll know what you mean)) ON the domain..... If they are then you shouldn't need the setting you specify (even with the old Windows 2003 clients) but if the controllers are NOT part of the domain then you're dealing with "3rd party" and will probably need that setting. That would be time for an infrastructure review to understand why Windows SERVER clients are accessing files off a NetApp NAS when that NAS is not inside the home forest, or at least a trusted Windows forest. From: Michael B. Smith [mailto:mich...@smithcons.com]<mailto:[mailto:mich...@smithcons.com]> Sent: Wednesday, September 19, 2012 3:07 PM To: NT System Admin Issues Subject: RE: NetApp CIFS, Windows Servers and Send unencrypted password to third-party SMB servers I've passed the info along. From: David Lum [mailto:david....@nwea.org]<mailto:[mailto:david....@nwea.org]> Sent: Wednesday, September 19, 2012 2:49 PM To: NT System Admin Issues Subject: RE: NetApp CIFS, Windows Servers and Send unencrypted password to third-party SMB servers DFL: 2003 OTAP version: 803Pp2 Windows versions of client devices are 2003 and 2008 R2 From: Michael B. Smith [mailto:mich...@smithcons.com]<mailto:[mailto:mich...@smithcons.com]> Sent: Wednesday, September 19, 2012 11:29 AM To: NT System Admin Issues Subject: RE: NetApp CIFS, Windows Servers and Send unencrypted password to third-party SMB servers This is what a senior NetApp engineer says: You're not dealing with storage as a matter of fact. We natively join the domain and look like a Windows box - for the most part. Question to ask them before I answer you. DFL of AD. Version on OnTAP on the storage and Windows version of the client devices. I'll get back to you when near a big keyboard and armed with the answer i those questions. First pass? Old information. Probably no longer accurate. So...what are the answers to his questions? :) From: Michael B. Smith [mailto:mich...@smithcons.com]<mailto:[mailto:mich...@smithcons.com]> Sent: Wednesday, September 19, 2012 1:58 PM To: NT System Admin Issues Subject: RE: NetApp CIFS, Windows Servers and Send unencrypted password to third-party SMB servers I wouldn't do that. But let me check with a netapp guy. From: David Lum [mailto:david....@nwea.org]<mailto:[mailto:david....@nwea.org]> Sent: Wednesday, September 19, 2012 12:27 PM To: NT System Admin Issues Subject: NetApp CIFS, Windows Servers and Send unencrypted password to third-party SMB servers I am being asked to enable the setting "Send unencrypted password to third-party SMB servers" so we can map Windows Servers to NetApp CIFS shares. This thread shows it worked for him: https://communities.netapp.com/thread/24037 Anyone here have any experience with NetApp, CIFS and Windows servers? David Lum Systems Engineer // NWEATM Office 503.548.5229 // Cell (voice/text) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
