Re: [Samba] Trouble with trusted domains

2008-04-11 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Volker Lendecke wrote: | On Thu, Apr 10, 2008 at 05:27:24PM -0500, Gerald (Jerry) Carter wrote: | We should ask CONTOSO.COM. I'm afraid this is a known | limitation right now. It could be coded up, but it is not | yet. | Volker, This is already done

Re: [Samba] Trouble with trusted domains

2008-04-11 Thread Volker Lendecke
On Fri, Apr 11, 2008 at 08:34:40AM -0500, Gerald (Jerry) Carter wrote: | Oh, I did not see that code. Can you point me at the right | lines? Hey Volker, $ git-log b442644bac2a7d5853440254257ca34a8e7c25de (SVN r22072). Okay, thanks! Volker pgpPEWSEC5hQK.pgp Description: PGP signature

[Samba] Trouble with trusted domains

2008-04-10 Thread Martin Zielinski
Hello list, perhaps someone can guide me, finding out what's going wrong in the following scenario (Active Directory , Samba 3.0.20b same with 3.0.28a): CHILD1.CONTOSO.COM -trusts- CONTOSO.COM -trusts-CHILD2.CONTOSO.COM || | User:

Re: [Samba] Trouble with trusted domains

2008-04-10 Thread Volker Lendecke
On Thu, Apr 10, 2008 at 02:20:28PM +0200, Martin Zielinski wrote: winbind does this with a LSA RPC call to CHILD2 (not to CHILD1, where the user comes from) and receives a NO MAPPED USER reply. Now my question is: shouldn't Samba ask CHILD1 for the user CHILD1\testtest or should CHILD2 know

Re: [Samba] Trouble with trusted domains

2008-04-10 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Martin Zielinski wrote: Hello list, perhaps someone can guide me, finding out what's going wrong in the following scenario (Active Directory , Samba 3.0.20b same with 3.0.28a): CHILD1.CONTOSO.COM -trusts- CONTOSO.COM -trusts-CHILD2.CONTOSO.COM

Re: [Samba] Trouble with trusted domains

2008-04-10 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Volker Lendecke wrote: On Thu, Apr 10, 2008 at 02:20:28PM +0200, Martin Zielinski wrote: winbind does this with a LSA RPC call to CHILD2 (not to CHILD1, where the user comes from) and receives a NO MAPPED USER reply. Now my question is: shouldn't

Re: [Samba] Trouble with trusted domains

2008-04-10 Thread Volker Lendecke
On Thu, Apr 10, 2008 at 05:27:24PM -0500, Gerald (Jerry) Carter wrote: We should ask CONTOSO.COM. I'm afraid this is a known limitation right now. It could be coded up, but it is not yet. Volker, This is already done in 3.2 so I'm guessing you say we should backport this fix? Oh, I did