Samba AD trust relationship, Windows Server 2016

Come here to share your tips and tricks for using Samba4
Locked
lasejix
Messages: 1
Registration: June 13, 2022 - 2:52 PM

June 13, 2022 - 3:03 PM

Hello,

I set up a domain dom1.com with a Samba AD server (I'm using Samba 4.14.13) and a second domain dom2.com on a Windows Server 2016. I'm trying to establish a two-way trust relationship between my two domains using the following command:

`samba-tool domain trust create dom2.com --direction=both --create-location=both -U administrator@dom2.com`.

Here's what I get:

`RemoteDomain Netbios[dom2] DNS[dom2.com] SID[S-1-5-21-1003621666-1838721297-3333835474]
Creating remote TDO.
Remote TDO created.
Setting supported encryption types on remote TDO.
Creating local TDO.
Local TDO created
Setting supported encryption types on local TDO.`
Validating outgoing trust...
ERROR: LocalValidation: DC[\\dc-ad.dom2.com] CONNECTION[WERR_NO_LOGON_SERVERS] TRUST[WERR_NO_LOGON_SERVERS] VERIFY_STATUS_RETURNED.


When I try to validate this trust relationship on the Windows Server 2016, I get the following error message: Outgoing trust has been validated.

The Secure Channel (CS) reset on Active Directory Domain Controller \\dc-samba.dom1.com from domain dom1.com to domain dom2.com failed with the error: No access server is currently available to process the logon request.

Can you help me? What additional file(s) do you need to help me?

Sincerely,
Locked