[Samba] Problem with trust relationship

[Leonardo Carneiro]

On Thu, Feb 10, 2011 at 3:20 PM, Leonardo Carneiro
<chesterman86 at gmail.com> wrote:
> On Thu, Feb 10, 2011 at 11:32 AM,  <tms3 at tms3.com> wrote:
>>
>>
>>
>> --- Original message ---
>> Subject: Re: [Samba] Problem with trust relationship
>> From: Leonardo Carneiro <chesterman86 at gmail.com>
>> To: <samba at lists.samba.org>
>> Date: Thursday, 10/02/2011 2:46 AM
>>
>> On Wed, Feb 9, 2011 at 4:36 PM, <tms3 at tms3.com> wrote:
>>
>>
>> Hi John and others,
>>
>> Tks for the feedback. I tried the configs you showed to me and
>> unfortunally did not work. Also, there is a [small] number of windows
>> xp and vista getting the same problem too. Any new ideas?
>>
>> You need to re add the systems back to the domain after the trust
>> expires. The registry entries are to prevent the expiration not to fix
>> an already expired trust.
>>
>> The easy way to test is to use the Windoze network wizard and keep the name
>> the same. If the join works and on reboot the trust works then it is most
>> definately the machine pass issue.
>>
>>
>> John
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions: https://lists.samba.org/mailman/options/samba
>>
>>
>>
>> I tried both the "sambaRefuseMachinePwdChange = 1" in LDAP and the
>> test in the network wizard. The wizard fails with a RPC error message.
>>
>> Hmmm. Details?
>>
>> This is begining to smell of browsing issues. Do you have a WINS server?
>>
>> The setting in ldap had no effect. In fact, almost all machines are
>> having this issue now, but it seems to be occasional. Once in a while,
>> someone just logs in OK. It happens that the error is now happening on
>> every windows machine, not just the the ones with windows 7. =S
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions: <a target="_blank"
>> href="https://lists.samba.org/mailman/options/sa </body></html>
>
> As recommended in the link, i'd set the the following:
>
> HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
>  DisablePasswordChange = dword:1
> "MaximumPasswordAge = 1000000"
>
> in some machines to test. At first, it seems to solve the problem in
> the windows xp machines, but after a while some clients start to show
> the same problem again. It had no effect in Windows Vista and 7
> machines.
>
> My samba is configured to act as a Wins Server.
>
> Here is the error that occurs when i try to run the wizard:
> http://img140.imageshack.us/i/capturezo.png/
>
> The text in the box is the following:
>
> Files that help describe the problem:
>  C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_svchost.exe_Lanm_80bd52c3108cb58e777eac405860db8a5dca280_cab_0af31c3e\WER11D2.tmp.appcompat.txt
>  C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_svchost.exe_Lanm_80bd52c3108cb58e777eac405860db8a5dca280_cab_0af31c3e\WER1231.tmp.WERInternalMetadata.xml
>  C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_svchost.exe_Lanm_80bd52c3108cb58e777eac405860db8a5dca280_cab_0af31c3e\WER1BA5.tmp.mdmp
> ...
>

Hi everyone. Applying the registry patch and readding the machines in
the domain seems to work on windows XP, but not for vista or 7. In
fact, i cannot add the machine in the domain again with those versions
of windows. it gives me that "remote procedure call failed" error.
There is any new ideas that i should try? I'm getting crazy over here
XD~