[Samba] Problem with trust relationship

[Leonardo Carneiro]

On Thu, Feb 10, 2011 at 11:32 AM,  <tms3 at tms3.com> wrote:
>
>
>
> --- Original message ---
> Subject: Re: [Samba] Problem with trust relationship
> From: Leonardo Carneiro <chesterman86 at gmail.com>
> To: <samba at lists.samba.org>
> Date: Thursday, 10/02/2011 2:46 AM
>
> On Wed, Feb 9, 2011 at 4:36 PM, <tms3 at tms3.com> wrote:
>
>
> Hi John and others,
>
> Tks for the feedback. I tried the configs you showed to me and
> unfortunally did not work. Also, there is a [small] number of windows
> xp and vista getting the same problem too. Any new ideas?
>
> You need to re add the systems back to the domain after the trust
> expires. The registry entries are to prevent the expiration not to fix
> an already expired trust.
>
> The easy way to test is to use the Windoze network wizard and keep the name
> the same. If the join works and on reboot the trust works then it is most
> definately the machine pass issue.
>
>
> John
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
>
>
>
> I tried both the "sambaRefuseMachinePwdChange = 1" in LDAP and the
> test in the network wizard. The wizard fails with a RPC error message.
>
> Hmmm. Details?
>
> This is begining to smell of browsing issues. Do you have a WINS server?
>
> The setting in ldap had no effect. In fact, almost all machines are
> having this issue now, but it seems to be occasional. Once in a while,
> someone just logs in OK. It happens that the error is now happening on
> every windows machine, not just the the ones with windows 7. =S
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: <a target="_blank"
> href="https://lists.samba.org/mailman/options/sa </body></html>

As recommended in the link, i'd set the the following:

HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
 DisablePasswordChange = dword:1
"MaximumPasswordAge = 1000000"

in some machines to test. At first, it seems to solve the problem in
the windows xp machines, but after a while some clients start to show
the same problem again. It had no effect in Windows Vista and 7
machines.

My samba is configured to act as a Wins Server.

Here is the error that occurs when i try to run the wizard:
http://img140.imageshack.us/i/capturezo.png/

The text in the box is the following:

Files that help describe the problem:
  C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_svchost.exe_Lanm_80bd52c3108cb58e777eac405860db8a5dca280_cab_0af31c3e\WER11D2.tmp.appcompat.txt
  C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_svchost.exe_Lanm_80bd52c3108cb58e777eac405860db8a5dca280_cab_0af31c3e\WER1231.tmp.WERInternalMetadata.xml
  C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_svchost.exe_Lanm_80bd52c3108cb58e777eac405860db8a5dca280_cab_0af31c3e\WER1BA5.tmp.mdmp
...