| Title: | PATHWORKS for OSF/1 |
| Notice: | see also NOTED::PWDOSWINV5 (PW client) & TURRIS::DIGITAL_UNIX |
| Moderator: | CPEEDY::LONG |
| Created: | Thu Apr 22 1993 |
| Last Modified: | Fri Jun 06 1997 |
| Last Successful Update: | Fri Jun 06 1997 |
| Number of topics: | 1874 |
| Total number of notes: | 6870 |
Does anyone have experience in setting up trust-relationships with PW V6.1? I tried to set this up and got very frustrated - it seems that the PW-product is not jet capable of "fully" participating in a NT trust relationship. Please give me - and all who will read this note in future - your experience, your hints, ... and so help us save some time in supporting the customer. ------------------------------------------------------------------------------ some questions: - what does work? what does not work? >prior to 6.1, at least the pass-through authentication for identical >accounts between domains did work, it now doesn't work since upgrading >to 6.1. The pass-through authentication still works for the pre 6.1 pw >and nt machines. But the 6.1 give "access denied" messages to the user - Do any of the net commands at the UNIX level understand trusts? - which utilities can be used to set up and manage/verify the trusts? >You can not use pwadmin or ASTOOLS to manage a remote >trusted domain. This is because these tools do not allow you >to logon to the remote domain. - when you use the Domain Monitor from NT Resource Kit to verify the trust Relationship, you see the following outputs: NT-PDC Link to trusted domain: Success PWV6-BDC Link to trusted domain: Error What does this mean? - how about PWV6-trusts when using a NT-DomainControler in German version? ... - are there any more sources of information (PW System Guide, PW Concepts and Planing Guide, TechNet, ...?) ------------------------------------------------------------------------------ your help would be very appreciated Regards Richard Mottinger CSC Munich [Posted by WWW Notes gateway]
| T.R | Title | User | Personal Name | Date | Lines |
|---|---|---|---|---|---|
| 1779.1 | CPEEDY::HORGAN | Thu Mar 13 1997 15:39 | 21 | ||
Once you set up a trust, the pass-through authentication for identical accounts will not work. The net commands do not understand trusts. You need to administer the trusts using pwadmin on the PW Server or use usrmgr -> policies -> trust releationships on a client connected to the PW server. Use usrmgr for the NT server. I'm not sure what Domain Monitor link errors mean. I'll try it here. A trust relationship is from primary to primary. I don't know about using a NT German Version. I know we have a problem using umlauts. The documentation for setting up trusted domains is in the System Admin Guide under Establishing Trust Relationships. Chapter 2. Julia | |||||
| 1779.2 | not working: V6.1 in trusting Domain) | NETRIX::"richard.mottinger@fkr.mts.dec.com" | Mon Mar 17 1997 13:08 | 33 | |
Hello Julia,
thanks for your help, but there are still some things which do not work:
The V6.1-Server does not participate in a Trust-Relationship when he
is in the trusting Domain.
MasterDomain (trusted) <------ ResourceDomain (trusting)
NT4 PDC PWV6.1 PDC
In this scenario, the ResourceDomain should be able to see the accounts
in MasterDomain.(assign permissions for users in MDom to resources in RDom)
This does not work, do it?
- how can i assign permissions for users in MDom to resources in RDom
when pwadmin does not see the accounts from MDom and when net commands
do not understand trusts?
- when i set up the trust in the other direction (PWV6.1 is PDC in the
trusted domain) the trust seems to work.
You said that >A trust relationship is from primary to primary.
When the primary is offline, the BDC should be able to work with
the trusts until the PDC is up again.
I tested this with PWV6.1 as BDC. This doesn't work either.
Regards
Richard Mottinger
CSC Munich
[Posted by WWW Notes gateway]
| |||||
| 1779.3 | tested with NT3.51 OK! | EVTAI1::CASTELLO | UNIX and PCI Support | Tue Mar 18 1997 15:17 | 16 |
Hi Richard, I've tested the trusted relationship in both way with NT3.51(SP5) and PWKS V6.1ECO1 and no problem. From PWKS you can't do lot of thing but using NT server tools from WIN95 once logged in NT domain once in PWKS you can set up every things. Path-through authentication does not work. :-( >how about PWV6-trusts when using a NT-DomainControler in German version? mixed language is not recommended and not supported by PWKS (at this time). Jean-Pierre | |||||
| 1779.4 | EVTAI1::CASTELLO | UNIX and PCI Support | Mon Mar 24 1997 16:45 | 6 | |
> Path-through authentication does not work. :-( I mean Net logon Path-through authentication does not work Jean-Pierre | |||||