Solution to XP/2000 joining Samba 2.2.x Domain Problem!

[Andrew Bartlett]

Alu Angus wrote:
> 
> I finally found the solution that many people faced about joining a samba
> 2.2.x domain with XP or 2000
> I've recently upgraded a Win98SE to WinXP, and attempt to join this to the
> Samba Domain (of ver 2.2.2), which already have 2 Win2000 as member.
> However, although the XP accept the Domain Joining, it denied me to log into
> the domain  after a reboot, so I tried to view the System Event in the XP
> and found this:
> 
> ------------------------------------------------------------------
> Source : Netlogon
> Type : Error
> Description:
> The session setup to the Windows NT or Windows 2000 Domain Controller
> \\ORACLE for the domain SIAD failed because \\ORACLE does not support
> signing or sealing the Netlogon session.  Either upgrade the Domain
> controller or set the RequireSignOrSeal registry entry on this machine to 0.

That's a surprisingly useful error message!  I think (hope) somebody is
looking into getting the sign/seal stuff working (therefore 'upgrading'
samba) but messing about with MS's encryption isn't easy work...

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net