Trust relationship between Win3k & Linux?

My previous post has gone unanswered so I will try a
different approach.
Does anyone have any experience with trust relationships
between a win3k domain and a linux domain?
Since I am having difficulty incorporating a win3k server
into a linux/samba domain, I thought I might have the
win3k server be it's own domain, establish a trust
relationship between the two, and then (hopefully) the
win2k/xp clients (which will remain in the linux domain)
will be able to connect to the win3k server to get windows
updates and virus definitions.
I would greatly appreciate any and all suggestions,
information, or ideas on the subject.
Thanks!

"Jim" <(E-Mail Removed)> wrote in message
news:10a0801c3f3c1$1a7a3480$(E-Mail Removed)...
> Does anyone have any experience with trust relationships
> between a win3k domain and a linux domain?

There is no such thing. "Trusts" can only exist between MS based Domains.
In my experiences an *individual* Linux box can participate in a Windows
Domain but in a limited (and troublesome) way. I am not aware that
Linux/Unix even has the concept of a Domain in the same sense MS uses the
concept. With Linux it is simply a DNS Domain, not a "Linux/Unix Domain",
which has nothing to do with the Authentication/Administration Domain
concept that MS uses.

If someone knows something I don't, I'd be glad to be wrong.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

On Sun, 15 Feb 2004 04:41:59 -0800, "Jim"
<(E-Mail Removed)> wrote:

>Does anyone have any experience with trust relationships
>between a win3k domain and a linux domain?

Trusts are a Windows domain concept. For Linux, you need to use Samba
or another NFS solution.

>Since I am having difficulty incorporating a win3k server
>into a linux/samba domain, I thought I might have the
>win3k server be it's own domain, establish a trust
>relationship between the two, and then (hopefully) the
>win2k/xp clients (which will remain in the linux domain)
>will be able to connect to the win3k server to get windows
>updates and virus definitions.

None of which actually requires a domain or trust be present.

>I would greatly appreciate any and all suggestions,
>information, or ideas on the subject.

The main suggestion is to use Linux where it works, providing services
to a Windows domain, not try to shoehorn it into something it doesn't
do. Put those workstations in the Server 2003 domain and use the
domain as intended, or don't run a Windows domain at all.

Jeff

Jim wrote:

> Does anyone have any experience with trust relationships
> between a win3k domain and a linux domain?
> Since I am having difficulty incorporating a win3k server
> into a linux/samba domain, I thought I might have the
> win3k server be it's own domain, establish a trust
> relationship between the two, and then (hopefully) the
> win2k/xp clients (which will remain in the linux domain)
> will be able to connect to the win3k server to get windows
> updates and virus definitions.

Yes, that is possible. But you will have to use Samba 3. Samba 2 is not able
to establish trust relationships with Windows Servers.

Probably you will only need to establish a one-way trust. The Linux domain
becomes the "trusted" domain on the Windows 2003 server. This way, the
Linux PDC users will have access rights to the Win2300 domain.
You can find detailed instructions on how to achieve that here:
http://samba.mirror.ac.uk/samba/docs...ainTrusts.html

Also pay attention to this:
http://samba.mirror.ac.uk/samba/docs...html#id2901405

Consider checking the Samba newsgroups (linux.samba for instance), since
users of microsoft.public.windows.server.networking will not be able to
help you with Linux questions.


Joao