Re: [Samba] RE: SID resolution to Username

2007-04-10 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Diego Alencar Alves de Lima wrote:
> Did you set up the trust both ways (i.e. they both trust 
> and are trusted by the other domain)?

For the record, Windows allows a DC to translate SIDs/names
with only a one-way, outgoing trust in place.  So you don't
have to have a two way trust.

>> When I add an user of each domain to the permissions of 
>> a file on a windows machine (W2k, WXP), it shows for
>> them DOMAIN\USERNAME. Everything> is fine. But when
>> i close the permission window and reopen it, then the
>> user out of the trusted domain is only shown as SID. 
>> The one of the own domain is resolved fine. This
>> happens on clients of both domains.

First suggestion is to take a network trace and see
who the client is sending the LsaLookupSids() call to
and figure out why that is failing.





cheers, jerry
=
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
"What man is a man who does not make the world better?"  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGG4JjIR7qMdg1EfYRAujYAJ9pg7TgRsni++t4RuF5liYff/xoWACfWOEl
FR4uKHRbhRpSERK2hEUErAk=
=fTWp
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] RE: SID resolution to Username

2007-04-10 Thread Diego Alencar Alves de Lima
Did you set up the trust both ways (i.e. they both trust and are trusted by 
the other domain)?

On Tuesday 10 April 2007 07:21:20 Marc Muehlfeld wrote:
> Nobody any idea? :-(
>
> --
> Marc Muehlfeld
> Zentrum fuer Humangenetik und Laboratoriumsmedizin Dr. Klein und Dr. Rost
> Lochhamer Str. 29 - D-82152 Martinsried
> Telefon: +49(0)89/895578-0 - Fax: +49(0)89/895578-78
> http://www.medizinische-genetik.de
>
>
>  Ursprüngliche Nachricht -
> Betreff: SID resolution to Username
> Von: "Marc Muehlfeld" <[EMAIL PROTECTED]>
> Datum:   Mi, 4.04.2007, 13:41
> An:  samba@lists.samba.org
> --
>
> Hello,
>
> I have two Samba 3.0.22 PDCs and each trust each other.
>
> When I add an user of each domain to the permissions of a file on a
> windows machine (W2k, WXP), it shows for them DOMAIN\USERNAME. Everything
> is fine. But when i close the permission window and reopen it, then the
> user out of the trusted domain is only shown as SID. The one of the own
> domain is resolved fine. This happens on clients of both domains.
>
> Any ideas?
>
> Regards
> Marc
>
>
> --
> Marc Muehlfeld
> Zentrum fuer Humangenetik und Laboratoriumsmedizin Dr. Klein und Dr. Rost
> Lochhamer Str. 29 - D-82152 Martinsried
> Telefon: +49(0)89/895578-0 - Fax: +49(0)89/895578-78
> http://www.medizinische-genetik.de
>
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba



-- 
Diego Alencar Alves de Lima
Prodesan - Departamento de Informática
www.prodesan.com.br

-- 
Esta mensagem foi verificada pelo sistema de antivírus e
 acredita-se estar livre de perigo.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba