Samba authentication - domain vs server?

[jabr at blu.org (John Abreau)]

I had a problem with a samba server that stopped working a couple weeks 
ago; it started failing to authenticate users against the Samba PDC on 
another server. It was configured with "security = domain", and had 
worked fine since before I started working here. The PDC was built using 
the IDEALX smbldap-tools.

Changing the setting to "security = server" got it working again, but 
I'm not sure what the differences are between "domain" and "server", or 
why it worked for so long and then  failed. The results I found in 
google only indicated that others had tried this change, but they didn't 
seem to know why it worked, either.

The error I'd see in the samba logs when trying to connect to the server was

    NT_STATUS_TRUSTED_RELATIONSHIP_FAILURE

Any ideas what might be going on here?

-- 
John Abreau / Executive Director, Boston Linux & Unix 
IM: jabr at jabber.blu.org / abreauj at aim / abreauj at yahoo / 28611923 at icq
Email jabr at blu.org / WWW http://www.abreau.net / PGP-Key-ID 0xD5C7B5D9
PGP-Key-Fingerprint 72 FB 39 4F 3C 3B D6 5B E0 C8 5A 6E F1 2C BE 99