Windows XP logon problem - Smab 2.2.5

[Yasser Sedky]

Hi all,
Thanks for the help, actually I changed nothing but using latest CVS
from the SAMBA_2_2 branch.

My windoze XP can login to the Samba box even after retart ;-).

Things worked fine, of course you still to patch XP registry for the
requiresignorseal key.

Thanks a lot.
Yasser Sedky

-----Original Message-----
From: Yashpal Nagar [mailto:yash at linux-delhi.org] 
Sent: Friday, August 23, 2002 1:48 PM
To: Yasser Sedky
Cc: samba-technical at lists.samba.org
Subject: Re: Windows XP logon problem - Smab 2.2.5


On Mon, Aug 19, 2002 at 01:49:56PM +0300, Yasser Sedky spoke out thus:
> Hi all,
> 
> I'm actually fed up with this problem. I saw many questions around 
> this problem, they are all giving same steps, and they are all failing

> to solve the problem!
> 
> I'm installing Samba 2.2.5 on FreeBSD 4.6 box, I followed all steps of

> HOW-TO to make Samba act as PDC.
> 
> I did the following:
> 
> 1- Samba successfully installed as PDC.
> 2- WinXP patched with the RequireSignorSeal patch.
  You mean you have "Disabled Secure Sign & seal always" ?

> 2- WinXP stations joined the Domain successfully , machine accounts 
> created manually with the "$" at end of machine name.
> 3- WinXP restarted successfully ;-)
> 4- I tried to login using an enabled user, sometimes I can log , other

> times I get "Domain Controller is not available"

add user script = /usr/sbin/useradd -g machines -d /dev/null -s
/bin/false -c Ma chine %m$

use the line above in smb.conf. to create m/c accounts automatically.

I have used 2.2.1a samba release.

> 6- In all cases I can see the SAMBA shares, when I log locally I get 
> an authentication dialog box to reach the Samba Shares!
Ok
> 7- Profile/Homes directory persmissions are checked.
Ok
> 
> PS: should I downgrade to Samba 2.2.3a ? Or should I through my XP 
> away?
> 
> Anyone has solution to this very COMMON problem ????
> 
> 
> On my WinXP I set:
> WINS IP = Samba IP
> NetBIOS over TCP/IP enabled
ok
> 
> On my smb.conf I made:
> 
> <snip>-------------
> 
> [global]
>         ;basic server settings
>         workgroup = MISRTECH
>         netbios name = ZEUS
>         interfaces = 192.168.1.1/24 127.0.0.0/24
>         server string = Zeus Domain Controller
>         socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 
> SO_RCVBUF=8192
> 
>         ;PDC and master browser settings
>         os level = 64

You can use it as higher as 255. This is responsible when actual
election is going on whether SAMBA server has to act as PDC or what is
its weightage.

>         preferred master = yes
>         local master = yes
>         domain master = yes
> 
>         ;security and logging settings
>         security = user
>         encrypt passwords = yes
>         log file = /var/log/samba/log.%m
>         log level = 10
>         max log size = 50
>         hosts allow = 192.168.1., 127.

Do you really need this ? "host allow ". I would recommend to comment it
first and see. It actually denies the smb connection to these network
hosts. check it.

> 
>         ;user profiles and home directory
>         logon home = \\%L\%U\
>         logon drive = Z:
>         logon path = \\%L\profiles\%U
> 
>         domain logons = Yes
>         dns proxy = No
>         wins support = Yes
>         admin users = root
> 
> [homes]
>         comment = Home Directories
>         path = /my/samba/homes
>         valid users = %S
>         read only = No
>         browseable = No
>         writable = yes
> 
> [netlogon]
>         comment = Network Logon Service
>         path = /usr/local/samba/lib/netlogon
>         guest ok = No
>         share modes = No
>         writable = no
>         browseable = No
> 
> [Profiles]
>         path = /my/samba/profiles
>         create mask = 0600
>         directory mask = 0700
>         guest ok = No
>         browseable = No
>         writable = Yes
> 
> <snip>-------------
> 
> 
> Many thanks,
> Yasser Sedky
> 
> 

Bye

-Yash


-- 
Yashpal Nagar
Systems Administrator
Delhicall Centres 'Gurgaon'
Ph 0124-6223849 , cell 9811499273
---------------------------