WinXP on Samba 2.2.2 PDC: Sign/Seal

[Tobias Burnus]

Hi,

we tried to us Windows XP Prof. to join a domain with a Samba 2.2.2 PDC
(on Tru64 Unix).

The joining worked well, but as one tried to log in, it said that the PDC
is offline (or something like that).
As admistrator one could find that the server doesn't support Sign or Seal
and that one should update the server ;-) or set the registry entry
"RequiresSignOrSeal" to '0'. We failed to do so somehow (we probably set
the wrong item) and then the XP-Person run out of time.

1. Any hints where to turn off RequiresSignOrSeal exactly?
   We found one entry (left side) and four items on the rightside
   in regedit. (I'm really not a windows specialist ...)
   But we failed to have any success.
   The only thing I found was here: http://www.sans.org/infosecFAQ/win/logon.htm
   and here: http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnntmag00/html/secure.asp
   but I haven't tried those yet.

2. Does anyone know more about this feature? (So it could be implemented
in Samba 2.2.x? (This is NT 4.0 sp 4 stuff as it seems.)

With warm regards,

Tobias