Description of problem: Linux servers (RHEL 8) joined to a local Active Directory (AD) forest/domain (windows server 2019) using samba-winbind. But logins to the Linux servers failed for users who coming in from a trusted(transitive) AD forest(windows server 2019).If we created one way trust.If we create bi-directoional trust, it's working. But we don't want to go for bi-directorional trust. Version-Release number of selected component (if applicable): samba-winbind-4.13.3-11.el8_4.x86_64 (Packages are from RHEL 8.4) How reproducible: Yes and reproducible Steps to Reproduce: 1. install samba-winbind-4.13.3-11.el8_4.x86_64 2. join Linux server (RHEL 8.4) into local Active Directory 3. Clear cache and restart winbind: systemctl stop winbind; net cache flush; rm -f /var/lib/samba/*.tdb; systemctl start winbind 3. do a `id <username>` which returns "no such user" for trusted domain user Actual results: Trusted domain/forest user information cannot be retrieved on the Linux servers running samba-winbind-4.13.3-11.el8_4.x86_64. Trusted domain users logins failed. Expected results: `id` command can returns user info from trusted domain and we could login with trusted domain users in Linux servers Additional info:
Did just the `id` command fail or did you really try to login as the user? The `id` command might not be able to get information about the user until the user actually has been logged in once ...
ping