Hello, 

Is this possible to establish a two-way trust relationship between a Windows domain (functionnal level 2012 R2) and a SAMBA 3.8 domain ?? 

The samba domain work with a NETBIOS name..

I have one domain  Windows 2012 R2 : example.com et one domain (SAMBA) : domain

 Thank you

Do not expect miracles from Samba. Version 3 "pairs" with NT 4 which is quite different model.

Perhaps Samba forum will give you better answers or suggest workaround.

Regards,

Milos

Do not expect miracles from Samba. Version 3 "pairs" with NT 4 which is quite different model.

Perhaps Samba forum will give you better answers or suggest workaround.

Regards,

Milos

• Proposed as answer by Mary DongMicrosoft contingent staff, Moderator 5 hours 57 minutes ago

Do not expect miracles from Samba. Version 3 "pairs" with NT 4 which is quite different model.

Perhaps Samba forum will give you better answers or suggest workaround.

Regards,

Milos

• Proposed as answer by Mary DongMicrosoft contingent staff, Moderator Friday, July 31, 2015 1:03 AM

Hi Jeremy,

Thanks for your post.

You could have a check about the article

Samba AD vs. MS AD compatibility

https://wiki.samba.org/index.php/FAQ#Does_Samba_AD_allow_Windows_Server_2008_.2F_2008_R2_to_be_joined_as_DC.3F

Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

For more support, you could also post in Samba forum

https://www.samba.org/

Best Regards,

Mary Dong

A. On another place of Wiki that Mary is pointing to, there is question and statement:

Do trusts only not work in Samba AD only environments, and are fine in Samba AD/Windows environments?

No. The Samba DC just won't know much about the trust.

B. IMHO Whenever you have heterogeneous system, namely LINUX/WINDOWS, this requires broader support and you are still not safe. Every update can potentionally bring change of security settings and systems are disconnected (automatically). Samba is "like" Windows and always is behind AD in development, which is natural. However Samba team is taking useful features that tries to "replicate". Unless you have great support I recommend stick with homogeneous system, either based on Linux or based on Windows - and half of problems disappear automatically. There are exceptions to this "rule", namely when you need to run two sets of applications, while one group will run on Linux and other group will run in Windows environment.

As we are in Windows forum, consider Windows system... :-)

Regards

Milos

A. On another place of Wiki that Mary is pointing to, there is question and statement:

Do trusts only not work in Samba AD only environments, and are fine in Samba AD/Windows environments?

No. The Samba DC just won't know much about the trust.

B. IMHO Whenever you have heterogeneous system, namely LINUX/WINDOWS, this requires broader support and you are still not safe. Every update can potentionally bring change of security settings and systems are disconnected (automatically). Samba is "like" Windows and always is behind AD in development, which is natural. However Samba team is taking useful features that tries to "replicate". Unless you have great support I recommend stick with homogeneous system, either based on Linux or based on Windows - and half of problems disappear automatically. There are exceptions to this "rule", namely when you need to run two sets of applications, while one group will run on Linux and other group will run in Windows environment.

As we are in Windows forum, consider Windows system... :-)

Regards

Milos

• Proposed as answer by Mary DongMicrosoft contingent staff, Moderator Tuesday, August 04, 2015 2:07 AM
• Marked as answer by Mary DongMicrosoft contingent staff, Moderator Thursday, August 06, 2015 2:10 AM

Thanks for your help,

Its resolved with a one-way trust, i can add samba user in a domain local group and i can authenticate these users.