[Samba] Windows 7 machine trust accounts expiring

[Predrag Gavrilovic]

I also have this problem, running samba 3.4.7 from debian backports on 
Lenny.
I have applied registry patches as suggested on samba wiki:

	HKLM\System\CCS\Services\LanmanWorkstation\Parameters
             DWORD  DomainCompatibilityMode = 1
             DWORD  DNSNameResolutionRequired = 0

Windows 7 joins domain but trust relation fails after month or so with 
"netlogon_creds_server_check failed" error. Needless to say, XP and 
Vista work ok.

Can anyone (please) confirm possibility of windows 7 joining samba 
domain and staying joined for more than a month.
If so, what version of samba is working? Is samba 3.5 required, or other 
registry patches mentioned (as not needed) in wiki?

Време: 16.12.2009. 06:06, Alex Ferrara пише:
>    _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client AC-2150 machine account AC-2150$
>
> I have noticed that the new Windows 7 machines say the password has expired on the same date that is in  "sambaPwdLastSet". I added the "X" attribute in sambaAcctFlags in an attempt to stop the accounts from expiring. Below is an ldif of a Windows 7 machine trust account
>
> dn: uid=ac-2150$,ou=computers,dc=domain,dc=local
> objectClass: top
> objectClass: account
> objectClass: posixAccount
> objectClass: sambaSamAccount
> cn: ac-2150$
> uid: ac-2150$
> uidNumber: 1111
> gidNumber: 515
> homeDirectory: /dev/null
> loginShell: /bin/false
> description: Computer
> gecos: Computer
> sambaDomainName: DOMAIN
> sambaPrimaryGroupSID: S-1-5-21-3581057417-3103041693-70022037-515
> sambaSID: S-1-5-21-3581057417-3103041693-70022037-3222
> sambaNTPassword: DABA25E3910551C63347D399520C123D
> sambaAcctFlags: [WX         ]
> sambaPwdLastSet: 1260776037
>
> Any help would be appreciated.
>
> aF
> -- To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba