Score:0

Ubuntu 21.10 with Samba AD unable to create domain trust account

ck flag

I am trying to add domain trust account for additional kerberos5 (MIT) domain in Samba AD DC with command:

net rpc trustdom add <domain_name> -UAdministrator%<administrator_password>

What happens is that the account is created into Samba ldap database and I can see it in Windows 11 machine.

the command gives an error message:

Could not set trust account password: NT_STATUS_ACCESS_DENIED

with command pdbedit -Lw <account_name>$ i see:

<account_name>$:3000052:NO PASSWORDXXXXXXXXXXXXXXXXXXXXX:2D2C9A3DC21D9CAFD008D1232D77B9D0:[NDU ]:LCT-6207FF7A:

the [NDU ] should be [I ] according to Samba Wiki documentation.

My version of samba is: Version 4.13.17-Ubuntu

There is nothing on logs I could see of related to this incident. How should I debug this?

-- Sami Hulkko

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.