[Samba] NTP doesnt work for Win2000 clients + Samba 4.0.4 (see tcpdump)

[Andrew Bartlett]

On Tue, 2013-04-09 at 19:01 +0400, ?icro MEGAS wrote:
> Hi all,
> 
> I am using Samba 4.0.4 as AD DC on my test environment and realized that all my W2k clients (default installation, no special setups made on the clients) cannot receive the correct time of my samba 4.0.4 AD domain controller. Windows XP and 7 work fine though. The problem occurs at three W2k test clients I tried with. The default behavior of Windows clients is to use the update type "Nt5DS" which means, that the client tries to get the time of its domain controller. Unfortunately this fails for my W2k clients in conjunction with Samba 4.0.4 and also an error in event log appears, that says that the time couldnt be retrieved of my samba4 server "mysmb4srv.ad.mycompany.com".
> 
> As soon as I execute on win2000 clients cmd prompt "net time /setsntp:mysmb4srv.ad.mycompany.com" it works. This command causes the registry entries under HKLM\System\Current Control Set\Services\W32Time\Parameters to change the default behavior from type=Nt5DS to type=NTP and adds a line NTP server=mysmb4srv.ad.mycompany.com". With this setting the time sync works fine as soon as I restart the Windows Time Service. I have logged the received ntp packets at samba4's side:
> 
> Issue: Win2000 clients cannot update time through NTP of my samba 4.0.4 server which is installed
> and configured like shown on the Samba4 HowTo (+NTP HowTo). Seems that the "Nt5DS" discovery mode
> on win2000 clients doesnt interact fine with samba4 ??? Here are the "tcpdump -vv udp port 123" logs

To even have a chance of offering an opionin on this, you need to get us
the pcap file, not the text output (this applies at any time anybody is
asking for a packet capture - the text output is next to useless). 

> Any help appreciated.
> 
> Lucas (local at irc.freenode.net)

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org