[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference ranger::pwosf

Title:PATHWORKS for OSF/1
Notice:see also NOTED::PWDOSWINV5 (PW client) & TURRIS::DIGITAL_UNIX
Moderator:CPEEDY::LONG
Created:Thu Apr 22 1993
Last Modified:Fri Jun 06 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:1874
Total number of notes:6870

1779.0. "Setting up TRUSTS with V6.1" by NETRIX::"[email protected]" () Wed Mar 12 1997 06:53

Does anyone have experience in setting up trust-relationships with PW V6.1?

I tried to set this up and got very frustrated - it seems that the PW-product
is not jet capable of "fully" participating in a NT trust relationship.

Please give me - and all who will read this note in future - your experience,
your hints, ... and so help us save some time in supporting the customer.
------------------------------------------------------------------------------

some questions:

- what does work? what does not work?
  >prior to 6.1, at least the pass-through authentication for identical
  >accounts between domains did work, it now doesn't work since upgrading
  >to 6.1. The pass-through authentication still works for the pre 6.1 pw
  >and nt machines.  But the 6.1 give "access denied" messages to the user

- Do any of the net commands at the UNIX level understand trusts?

- which utilities can be used to set up and manage/verify the trusts?
  >You can not use pwadmin or ASTOOLS to manage a remote
  >trusted domain.  This is because these tools do not allow you
  >to logon to the remote domain.

- when you use the Domain Monitor from NT Resource Kit to verify the
  trust Relationship, you see the following outputs:
  NT-PDC   Link to trusted domain: Success
  PWV6-BDC Link to trusted domain: Error
  What does this mean?

- how about PWV6-trusts when using a NT-DomainControler in German version?

...

- are there any more sources of information
  (PW System Guide, PW Concepts and Planing Guide, TechNet, ...?)

------------------------------------------------------------------------------

your help would be very appreciated

Regards
Richard Mottinger
CSC Munich
[Posted by WWW Notes gateway]
T.RTitleUserPersonal
Name		DateLines
1779.1CPEEDY::HORGANCraicailte indiadh damhsa agus cricta�l!Thu Mar 13 1997 12:3921
Once you set up a trust, the pass-through authentication for identical accounts
will not work.  

The net commands do not understand trusts.

You need to administer the trusts using pwadmin on the PW Server or
use usrmgr -> policies -> trust releationships on a client connected to 
the PW server.  Use usrmgr for the NT server.

I'm not sure what Domain Monitor link errors mean.  I'll try it here.
A trust relationship is from primary to primary.  

I don't know about using a NT German Version.  I know we have a problem 
using umlauts.

The documentation for setting up trusted domains is in the System Admin
Guide under Establishing Trust Relationships.  Chapter 2.

Julia
1779.2not working: V6.1 in trusting Domain)NETRIX::"[email protected]"Mon Mar 17 1997 10:0833
Hello Julia,
thanks for your help, but there are still some things which do not work:

The V6.1-Server does not participate in a Trust-Relationship when he 
is in the trusting Domain.

MasterDomain (trusted)       <------      ResourceDomain (trusting)
NT4 PDC                                   PWV6.1 PDC

In this scenario, the ResourceDomain should be able to see the accounts
in MasterDomain.(assign permissions for users in MDom to resources in RDom)
This does not work, do it?

- how can i assign permissions for users in MDom to resources in RDom
  when pwadmin does not see the accounts from MDom and when net commands 
  do not understand trusts?

- when i set up the trust in the other direction (PWV6.1 is PDC in the
  trusted domain) the trust seems to work.
 
You said that >A trust relationship is from primary to primary.  
When the primary is offline, the BDC should be able to work with 
the trusts until the PDC is up again.
I tested this with PWV6.1 as BDC. This doesn't work either.

Regards
Richard Mottinger
CSC Munich


                             

[Posted by WWW Notes gateway]
1779.3tested with NT3.51 OK!EVTAI1::CASTELLOUNIX and PCI SupportTue Mar 18 1997 12:1716
Hi Richard,

I've tested the trusted relationship in both way
with NT3.51(SP5) and PWKS V6.1ECO1 and no problem.

From PWKS you can't do lot of thing but using NT server tools
from WIN95 once logged in NT domain once in PWKS you can
set up every things.

Path-through authentication does not work. :-(

>how about PWV6-trusts when using a NT-DomainControler in German version?

mixed language is not recommended and not supported by PWKS (at this time).

Jean-Pierre
1779.4EVTAI1::CASTELLOUNIX and PCI SupportMon Mar 24 1997 13:456
> Path-through authentication does not work. :-(

I mean Net logon Path-through authentication does not work

Jean-Pierre