[Samba] Windows 7 machine trust accounts expiring
tms3 at tms3.com
tms3 at tms3.com
Wed May 19 06:57:49 MDT 2010
> Windows 7 joins domain but trust relation fails after month or so with
> "netlogon_creds_server_check failed" error. Needless to say, XP and
> Vista work ok.
> Can anyone (please) confirm possibility of windows 7 joining samba
> domain and staying joined for more than a month.
> If so, what version of samba is working? Is samba 3.5 required, or
> registry patches mentioned (as not needed) in wiki?
Version samba34-3.4.5_1 on FreeBSD 8.0 and 7.2 with LDAP backend, 14
WAN connected nodes, no account expiration.
> Време: 16.12.2009. 06:06, Alex Ferrara пише:
>> _netr_ServerAuthenticate3: netlogon_creds_server_check failed.
>> Rejecting auth request from client AC-2150 machine account AC-2150$
>> I have noticed that the new Windows 7 machines say the password has
>> expired on the same date that is in "sambaPwdLastSet". I added the
>> "X" attribute in sambaAcctFlags in an attempt to stop the accounts
>> from expiring. Below is an ldif of a Windows 7 machine trust account
>> dn: uid=ac-2150$,ou=computers,dc=domain,dc=local
>> objectClass: top
>> objectClass: account
>> objectClass: posixAccount
>> objectClass: sambaSamAccount
>> cn: ac-2150$
>> uid: ac-2150$
>> uidNumber: 1111
>> gidNumber: 515
>> homeDirectory: /dev/null
>> loginShell: /bin/false
>> description: Computer
>> gecos: Computer
>> sambaDomainName: DOMAIN
>> sambaPrimaryGroupSID: S-1-5-21-3581057417-3103041693-70022037-515
>> sambaSID: S-1-5-21-3581057417-3103041693-70022037-3222
>> sambaNTPassword: DABA25E3910551C63347D399520C123D
>> sambaAcctFlags: [WX ]
>> sambaPwdLastSet: 1260776037
>> Any help would be appreciated.
>> -- To unsubscribe from this list go to the following URL and read the
>> instructions: https://lists.samba.org/mailman/options/samba
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
More information about the samba