[Samba] Samba 3.6.23 and Windows 7

[Jeff Workman]

On 11/5/2014 7:09 AM, Harry Jede wrote:
> On 13:03:44 wrote Jeff Workman:
>> I am using a new name and machine account for the new laptop, and
>> using a test login that has no NTUSER.DAT file yet.   Where else can
>> I look to see what's going on?
>>
>> On 10/30/2014 8:43 PM, Karel Lang AFD wrote:
>>> Hi,
>>> i think - the SID of the workstation (laptop) respectively the RID
>>> part of the SID number has changed due the fact it's new machine.
>>> And - in your profile, that is stored somewhere at network drive,
>>> there is somewhere stored NTUSER.DAT file referring still to
>>> SID-RID of old laptop.
>>>
>>> you can compare:
>>> strings NTUSER.DAT | grep -i S-1-5-21
>>> with
>>> pdbedit -Lv machinename
>>>
>>> the SID-RID should be same
>>>
>>> I had same message after migration and changing/rearraging SID
>>> numbers for machines.
>>>
>>> cheers,
>>>
>>> On 10/31/2014 01:04 AM, Jeff Workman wrote:
>>>> After being content with an old laptop running XP for years, my
>>>> job decided to provide me with a shiny new one running Windows 7
>>>> Professional.
>>>>
>>>> The biggest problem with this is that I can't get the Windows 7
>>>> box to login to my Samba NT4-style domain controller. I have
>>>> upgraded samba from 3.0.33 to 3.6.23, and copied my smbpasswd
>>>> file to where the new samba expects to find it in
>>>> /var/samba/lib/private. I've applied the following registry
>>>> changes to my Windows 7 machine:
>>>>
>>>> ; Win7_Samba3DomainMember
>>>> [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManWorkst
>>>> ation\Parameters]
>>>>
>>>>
>>>> "DNSNameResolutionRequired"=dword:00000000
>>>> "DomainCompatibilityMode"=dword:00000001
>>>>
>>>> ; Speedup settings
>>>> [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
>>>> "SlowLinkDetectEnabled"=dword:00000000
>>>> "DeleteRoamingCache"=dword:00000001
>>>> "WaitForNetwork"=dword:00000000
>>>> "CompatibleRUPSecurity"=dword:00000001
>>>>
>>>> ; Can drive you nuts
>>>> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Poli
>>>> cies\System]
>>>>
>>>>
>>>> "EnableLUA"=dword:00000000
>>>>
>>>>
>>>> What's funny is that I can join the Windows 7 machine to the
>>>> domain, but just as soon as I reboot and then try to login as a
>>>> domain user, I get this message:
>>>>
>>>> The trust relationship between this workstation and the primary
>>>> domain failed.
>>>>
>>>> I imagine there's something in my smb.conf that I need to change.
>>>> The only change I made from my old 3.0 smb.conf was I added the
>>>> following line in the [global] section:
>>>>
>>>> passdb backend = smbpasswd
>>>>
>>>> What else do I need to do?
> Do not use smbpasswd as passdb backend !!!
>
> Convert your passdb backend to tdbsam and then join your PC again.
>
> read
> man pdbedit
> for example or search this mailing list.
>
Ok I converted to tdbsam, changed my "passdb backend" to tdbsam, then I 
removed my machine account using pdbedit and re-added it.  I tried 
logging in with a new user account (and therefore no NTUSER.DAT) and I 
still get the same error.     What else do I need to do?