[Samba] Samba 3.6.23 and Windows 7

Harry Jede walk2sun at arcor.de
Wed Nov 5 05:09:32 MST 2014


On 13:03:44 wrote Jeff Workman:
> I am using a new name and machine account for the new laptop, and
> using a test login that has no NTUSER.DAT file yet.   Where else can
> I look to see what's going on?
> 
> On 10/30/2014 8:43 PM, Karel Lang AFD wrote:
> > Hi,
> > i think - the SID of the workstation (laptop) respectively the RID
> > part of the SID number has changed due the fact it's new machine.
> > And - in your profile, that is stored somewhere at network drive,
> > there is somewhere stored NTUSER.DAT file referring still to
> > SID-RID of old laptop.
> > 
> > you can compare:
> > strings NTUSER.DAT | grep -i S-1-5-21
> > with
> > pdbedit -Lv machinename
> > 
> > the SID-RID should be same
> > 
> > I had same message after migration and changing/rearraging SID
> > numbers for machines.
> > 
> > cheers,
> > 
> > On 10/31/2014 01:04 AM, Jeff Workman wrote:
> >> After being content with an old laptop running XP for years, my
> >> job decided to provide me with a shiny new one running Windows 7
> >> Professional.
> >> 
> >> The biggest problem with this is that I can't get the Windows 7
> >> box to login to my Samba NT4-style domain controller. I have
> >> upgraded samba from 3.0.33 to 3.6.23, and copied my smbpasswd
> >> file to where the new samba expects to find it in
> >> /var/samba/lib/private. I've applied the following registry
> >> changes to my Windows 7 machine:
> >> 
> >> ; Win7_Samba3DomainMember
> >> [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManWorkst
> >> ation\Parameters]
> >> 
> >> 
> >> "DNSNameResolutionRequired"=dword:00000000
> >> "DomainCompatibilityMode"=dword:00000001
> >> 
> >> ; Speedup settings
> >> [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
> >> "SlowLinkDetectEnabled"=dword:00000000
> >> "DeleteRoamingCache"=dword:00000001
> >> "WaitForNetwork"=dword:00000000
> >> "CompatibleRUPSecurity"=dword:00000001
> >> 
> >> ; Can drive you nuts
> >> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Poli
> >> cies\System]
> >> 
> >> 
> >> "EnableLUA"=dword:00000000
> >> 
> >> 
> >> What's funny is that I can join the Windows 7 machine to the
> >> domain, but just as soon as I reboot and then try to login as a
> >> domain user, I get this message:
> >> 
> >> The trust relationship between this workstation and the primary
> >> domain failed.
> >> 
> >> I imagine there's something in my smb.conf that I need to change.
> >> The only change I made from my old 3.0 smb.conf was I added the
> >> following line in the [global] section:
> >> 
> >> passdb backend = smbpasswd
> >> 
> >> What else do I need to do?
Do not use smbpasswd as passdb backend !!!

Convert your passdb backend to tdbsam and then join your PC again.

read
man pdbedit
for example or search this mailing list.

-- 

Regards
	Harry Jede


More information about the samba mailing list