[Samba] windows 7 unable to join domain

[Alberto Moreno]

On Tue, Jun 15, 2010 at 10:52 AM, Alberto Moreno <portsbsd at gmail.com> wrote:
> On Tue, Jun 15, 2010 at 10:40 AM, Alberto Moreno <portsbsd at gmail.com> wrote:
>> On Tue, Jun 15, 2010 at 9:57 AM,  <tms3 at tms3.com> wrote:
>>>
>>>
>>>
>>> On Tuesday 15/06/2010 at 9:17 am, Alberto Moreno wrote:
>>>
>>> On Mon, Jun 14, 2010 at 11:45 PM, <tms3 at tms3.com> wrote:
>>>
>>>
>>>
>>> --- Original message ---
>>> Subject: Re: [Samba] windows 7 unable to join domain
>>> From: Alberto Moreno <portsbsd at gmail.com>
>>> To: <samba at lists.samba.org>
>>> Date: Monday, 14/06/2010 11:03 PM
>>>
>>> On Mon, Jun 14, 2010 at 6:11 PM, <tms3 at tms3.com> wrote:
>>>
>>>
>>>
>>>
>>> SNIP
>>>
>>> I'm currently running Samba3x-3.3.8-0.51 on CentOS 5.5.  I currently have
>>> many Windows XP clients associated with the domain and behaving correctly.
>>> However, I am unable to join a Windows 7 PC.  I receive "The specified
>>> network name is no longer available."
>>>
>>> I've verified that DNS is configured correctly, and as stated XP machines
>>> have no problem joining.
>>>
>>> http://wiki.samba.org/index.php/Windows7
>>>
>>> There's a reg file that comes with the source code.  Not sure about binary
>>> packages.
>>>
>>> Cheers,
>>>
>>> SNIP
>>> --
>>> To unsubscribe from this list go to the following URL and read the
>>> instructions:  https://lists.samba.org/mailman/options/samba
>>>
>>>
>>> Like tms3 told u, we have to make some changes to the register before
>>> we join ms 7 to the domain, I already did and works, no issue.
>>>
>>> Another thing I see in your smb.conf:
>>>
>>> security = DOMAIN.
>>>
>>> In my little knowledge about samba, if u have a PDC it must say:
>>>
>>> security = user.
>>>
>>> Went u add a BDC it must say:
>>>
>>> security = DOMAIN.
>>>
>>> I disagree on the last point.
>>>
>>> Security = user is default, so no entry necessary.
>>>
>>> For PDC I use:
>>>
>>>         os level = 64
>>>         preferred master = Yes
>>>         domain logons =Yes
>>>         domain master = Yes
>>>
>>> For BDC I use (if on separate nodes)
>>>
>>>      ��  os level = 64
>>>         preferred master = Yes
>>>         domain logons =Yes
>>>         domain master = no
>>>
>>> If on same node
>>>
>>>         os level = 60
>>>         preferred master = Auto
>>>         domain logons =Yes
>>>         domain master = no
>>>
>>>
>>> "In domain security mode, the Samba server has a machine account
>>> (domain security trust account) and causes all authentication requests
>>> to be passed through to the domain controllers. The Samba server is
>>> made into a domain member server by using the following directives in
>>> smb.conf."
>>>
>>> "security = domain"
>>>
>>> Hi.
>>>
>>> I point this because on his smb.conf file he us using security=domain,
>>> by default like u say is =user.
>>>
>>> Oh, not trying to be a snit, just that if you use sec=domain then the BDC
>>> will call the PDC for authing.  It will work, it's just that it kinda (IMHO)
>>> makes the BDC sorta useless.  And over WAN links wastes bandwidth.
>>>
>>> Cheers,
>>>
>>>
>>> Thanks!!!
>>>
>>> Last thing, smbldap-tools using the base repo from Centos 5.5 depend
>>> on Samba-3.0.x, u must build your own rpm to work with samba3x.
>>>
>>> My two cents.
>>> --
>>> LIving the dream...
>>> --
>>> To unsubscribe from this list go to the following URL and read the
>>> instructions: https://lists.samba.org/mailman/options/samba
>>>
>>>
>>>
>>> --
>>> LIving the dream...
>>> --
>>> To unsubscribe from this list go to the following URL and read the
>>> instructions: https://lists.samba.org/mailman/options/samba
>>>
>>>
>>
>> No problem my friend, we are here to learn, thanks for sharing.
>>
>> --
>> LIving the dream...
>>
>
> U say that u already have some XP clients on your domain, which meant
> that works.
>
> U are trying to add a Windows 7 capable of being able to be part of a
> Domain, like Ultimate Edition or compatible right? not a Home Edition.
>
> U are using ldap on centos, which is working? Because u have XP
> clients inside the domain, they can see the PDC of your domain?
>
> Could u please give us the output of testparm+testparm of your PDC.
>
> Thanks!!!
>
> --
> LIving the dream...
>

Sorry: testparm && testparm -v

-- 
LIving the dream...