ntlm_auth multiple domains

[Alan DeKok]

"Jamie Crawford" <crawford at cmsu1.cmsu.edu> wrote:
> When I run ntlm_auth --username=domainauser everything works
> great. When I run ntlm_auth --username=domainbuser it fails because
> the user does not exist in domaina which the server is joined to.

  You need to point winbindd to a global catalog server, and then
  establish trust relationships between the GC and all of the domains.

> Would setting up realms help? 

  No.  The limitation is due to Active Directory, not realms or
FreeRADIUS.

  Alan DeKok.