[Samba] Win7 client, Samba PDC

[Bastien Semene]

The samba wiki tolds to only modify DomainCompatibilityMode and 
DNSNameResolutionRequired keys : http://wiki.samba.org/index.php/Windows7

Le 06/05/2010 16:59, Steve Wolfe a écrit :
> I'm trying to set up Samba as a PDC for some Win7 clients, and could use
> some help.  I can successfully join the domain, with the message "Changing
> the primary domain DNS name of this computer to "" failed.", but I am still
> told that it was successful.
>
> However, when I try to log in, I am told  "The trust relationship between
> this workstation and the primary domain failed".  Looking in
> /var/log/samba/pi-69.log, I see:
>
> [2010/05/06 08:45:45,  0]
> rpc_server/srv_netlog_nt.c:603(_netr_ServerAuthenticate3)
>    _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting
> auth request from client PI-69 machine account PI-69$
> [2010/05/06 08:45:45,  0]
> rpc_server/srv_netlog_nt.c:603(_netr_ServerAuthenticate3)
>    _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting
> auth request from client PI-69 machine account PI-69$
>
> Trying:
>
> smbpasswd -x pi-69$
> userdel -r pi-69$
> useradd pi-69$
> smbpasswd -a -m pi-69$
>
> does no good.
>
> Client has :
>
> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Netlogon\Parameters]
> “RequireSignOrSeal”=dword:00000000
> “RequireStrongKey”=dword:00000000
>
> and
>
> [HKLM\System\CCS\Services\LanmanWorkstation\Parameters]
> DWORD DomainCompatibilityMode = 1
> DWORD DNSNameResolutionRequired = 0
>
> Config/specs:
>
> Samba version 3.4.7-58.fc12
> Widows 7 64-bit professional clients
>
> smb.conf:
> [global]
> netbios name = PinnacleFS
> workgroup = PinnacleDom
> logon drive= P:
> logon home = \\PinnacleFS\%u
> locking = yes
> server string = PDC
> hosts allow=10.0.0.0/255.255.255.0
> load printers = no
> log file = /var/log/samba/%m.log
> security=user
> encrypt passwords=yes
> socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
> local master = yes
> os level = 128
> domain master = yes
> prefered master = yes
> domain logons = yes
> logon script = login.bat
> dns proxy = no
>
>    idmap uid = 16777216-33554431
>     idmap gid = 16777216-33554431
>     template shell = /bin/false
>     winbind use default domain = no
>
> [homes]
>     comment = Home Directories
>     browseable = no
>     writable = yes
>      create mode = 0700
>      directory mode = 0700
>
> # Un-comment the following and create the netlogon directory for Domain
> Logons
>   [netlogon]
>     comment = Network Logon Service
>     path = /home/netlogon
>     guest ok = yes
>     writable = no
>     share modes = no
> [Profiles]
>      browseable = no
>      guest ok = yes
>      create mode = 0700
>      directory mode = 0700
>      default case = lower
>      case sensitive = no
>
> [Apps]
>          path=/home/apps
>          force user=apps
>          force group=apps
>    

-- 
Bastien Semene
Administrateur Réseau&  Système

Cyanide Studio - FRANCE