Multiple Forests / Samba File Servers

[TECHMAN007]

We currently have a single domain in a single forest with Windows 2003 Servers for Authentication and Linux FC file servers. We are switching domains and have two forests setup with Trusts and users can log into either of the domains. The problem comes from Winbind/Kerberos only authenticating to one domain for file permissions. Has anyone dealt with having two domains in seperate forests authenticating to a single samba server? We would like to transition users in groups rather then all at once but they all need to access the same file servers. Any ideas?

 

[ady2k]

Make your windows 2003 as Active directory and linux samba server as member of Active directory server.
You can use ldap for authentication.
Good luck....

 

[TECHMAN007]

I have 2k3 setup as the AD server and the samba server is a member of the domain but when you log in via domain2 when samba server is in domain1 you can't even get into the samba server. It looks like winbind/kerberos doesn't authenticate to trusted domains. Is this true? I haven't found documentation stating it anywhere but it just seems like that is the problem. Plus you have to put static domain information in the /etc/krb5.conf file.