[Samba] Problems connecting win7 client to new Samba PDC

[Gaiseric Vandal]

that looks OK.

You should not need a login script defined for a computer account.

Are you able to login as the Domain Administrator?

Are your group mappings correct?   I ask because it may be that the
"Domain Users" is not properly recognized as a member of the "Users"
group on the PC.  Can you login as the domain (or local) admins and
explicitly add domain users and domain groups to a local group?



On 08/09/12 10:37, Brandon wrote:
> > did you make the appropriate registry changes on Win 7 as per
> > http://wiki.samba.org/index.php/Windows7
>
> Yes, I've downloaded the 3.6.3 script and ran it on the client, as
> well as manually checked that the settings were only the two described
> in the wiki article
>
> > Have you tried adding a machine account for your CLIENTPC
> > i.e.  #> pdbedit -a -m -u CLIENTPC
>
> Yes, I let the account be auto-generated when connecting to the
> domain.  I should have specified that there are other users I didn't
> include in the print out.  Here is the machine account from pdbedit
> (note that I changed the logon script in smb.conf from .cmd to .bat a
> few minutes ago, and the update can be seen here):
>
> ---------------
> Unix username:        CLIENTPC$
> NT username:
> Account Flags:        [W          ]
> User SID:             S-1-5-21-2762049607-2166809996-183419993-1001
> Primary Group SID:    S-1-5-21-2762049607-2166809996-183419993-513
> Full Name:            CLIENTPC$
> Home Directory:
> HomeDir Drive:
> Logon Script:         logon.bat
> Profile Path:
> Domain:               MYWORKGROUP
> Account desc:
> Workstations:
> Munged dial:
> Logon time:           0
> Logoff time:          Wed, 06 Feb 2036 10:06:39 EST
> Kickoff time:         Wed, 06 Feb 2036 10:06:39 EST
> Password last set:    Wed, 08 Aug 2012 13:44:36 EDT
> Password can change:  Wed, 08 Aug 2012 13:44:36 EDT
> Password must change: never
> Last bad password   : 0
> Bad password count  : 0
> Logon hours         : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
> ---------------
>
> Also, I've got a bit more information from the log.CLIENTPC:
>
> [2012/08/09 10:14:56.686577,  0]
> rpc_server/srv_pipe.c:500(pipe_schannel_auth_bind)
>   pipe_schannel_auth_bind: Attempt to bind using schannel without
> successful serverauth2
> [2012/08/09 10:14:56.794994,  0]
> rpc_server/netlogon/srv_netlog_nt.c:976(_netr_ServerAuthenticate3)
>   _netr_ServerAuthenticate3: netlogon_creds_server_check failed.
> Rejecting auth request from client CLIENTPC machine account CLIENTPC$
>
>
> There are also a number of windows events:
>
> --- begin windows events paste ---
> The winlogon notification subscriber <Profiles> failed a critical
> notification event.
> Windows cannot copy file C:\Users\Default\NTUSER.DAT to location
> C:\Users\myadmin\NTUSER.DAT. This error may be caused by network
> problems or insufficient security rights.
> Windows cannot copy file \\?\C:\Users\Default\Videos to location
> \\?\C:\Users\myadmin\Videos. This error may be caused by network
> problems or insufficient security rights.
> Windows cannot copy file \\?\C:\Users\Default\Saved Games to location
> \\?\C:\Users\myadmin\Saved Games. This error may be caused by network
> problems or insufficient security rights.
> <Note: To keep e-mail shorter I won't paste them all, but the last
> events repeat with a bunch of similar directories>
> There are too many profile copy errors. Refer to the previous events
> for details. Windows will not log any additional copy errors for this
> copy process.
> Windows cannot find the local profile and is logging you on with a
> temporary profile. Changes you make to this profile will be lost when
> you log off.
> Windows cannot copy file C:\Users\Default\NTUSER.DAT to location
> C:\Users\TEMP.MYWORKGROUP\NTUSER.DAT. This error may be caused by
> network problems or insufficient security rights.
> <Note: This last event again repeats with a number of similar
> directories>
> There are too many profile copy errors. Refer to the previous events
> for details. Windows will not log any additional copy errors for this
> copy process.
> Windows cannot log you on because your profile cannot be loaded. Check
> that you are connected to the network, and that your network is
> functioning correctly.
> The winlogon notification subscriber <Sens> failed a notification event.
> --- end windows events paste ---
>
>
>
>
>
>