[Samba] Re: Windows 7 RC

[Patrick Rynhart]

Sorry - I think

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Netlogon\Parameters
RequireStrongKey=0

is currently required (at least with Samba 3.3.4).  The client will
successfully join the domain without this key, but attempting to log in
with a domain account (after a reboot) will give "The trust relationship
between this workstation and the primary domain failed."

Regards,

Patrick

Volker Lendecke wrote:
> On Tue, May 12, 2009 at 03:28:07PM +0900, Yasuma Takeda wrote:
>>> That won't work. Your only chance is Samba 3.3.4 with
>>>
>>>         HKLM\System\CCS\Services\LanmanWorkstation\Parameters
>>>             DWORD  DomainCompatibilityMode = 1
>>>             DWORD  DNSNameResolutionRequired = 0
>>>
>>>         HKLM\System\CCS\Services\Netlogon\Parameters
>>>             DWORD  RequireSignOnSeal = 0
>>>             DWORD  RequireStrongKey = 0
>>>
>>> Haven't tested that yet, but you should get some steps
>>> further.
>>>
>>> Volker
>>>   
>> I succeeded to join Windows 7(RC) to Samba 3.3.4 domain.
>>
>> 1. I installed Windows 7.
>> 2. I changed above 4 parameters by regedit on Windows 7.
>> 3. Windows 7 can join to the domain which is provided by Samba 3.3.4.
> 
> Just FYI: I haven't tried myself, but probably the keys in
> HKLM\System\CCS\Services\Netlogon\Parameters are not
> required, Samba does all the necessary crypto.
> 
> Volker
> 


-- 
Dr Patrick Rynhart
Linux Systems Administrator / Team Leader
IT Support Group
School of Engineering and Advanced Technology
AgHort A Room 3.61
Turitea Campus
Massey University
NEW ZEALAND
Phone +64 6 356 9099 extn 2444