Re: [Samba] windows 7 unable to join domain
Cain, Marc wrote: On Jun 15, 2010, at 1:42 AM, Ciernik Tomas wrote: See: http://wiki.samba.org/index.php/Windows7 for the correct settings. That page is correct, but for me, when using Windows 7, the pages in http://www.samba.org/samba/docs/man/... are wrong. I spent so long on this, it's not funny, but if you run, smbldap-add --help you'll see the difference between lower case w and upper case W: -w is a Windows Workstation (otherwise, Posix stuff only) -W is a Windows Workstation, with Samba atributes (otherwise, Posix stuff only) With the capital W several more ldap values are set than with the lower case w. Windows XP doesn't care, but I was only, finally successful with Windows 7 once I switched to the capital W. Specifically, in my /etc/samba/smb.conf file, add machine script = /usr/sbin/smbldap-useradd -W %u Search engines being case-insensitive, this is likely to be very hard to figure out. Maybe there's more to the story--I can't believe this isn't more widely posted, so maybe my installation is somehow special--but it worked for me, and it's easy enough to try, so give it a try. --Fred PS: Don't mean to spam this list, but am sending this yet again, after joining the mailing list, waiting, sending again -- View this message in context: http://old.nabble.com/windows-7-unable-to-join-domain-tp28886230p29210011.html Sent from the Samba - General mailing list archive at Nabble.com. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] windows 7 unable to join domain
On Mon, Jun 14, 2010 at 6:11 PM, t...@tms3.com wrote: SNIP I'm currently running Samba3x-3.3.8-0.51 on CentOS 5.5. I currently have many Windows XP clients associated with the domain and behaving correctly. However, I am unable to join a Windows 7 PC. I receive The specified network name is no longer available. I've verified that DNS is configured correctly, and as stated XP machines have no problem joining. http://wiki.samba.org/index.php/Windows7 There's a reg file that comes with the source code. Not sure about binary packages. Cheers, SNIP -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba Like tms3 told u, we have to make some changes to the register before we join ms 7 to the domain, I already did and works, no issue. Another thing I see in your smb.conf: security = DOMAIN. In my little knowledge about samba, if u have a PDC it must say: security = user. Went u add a BDC it must say: security = DOMAIN. In domain security mode, the Samba server has a machine account (domain security trust account) and causes all authentication requests to be passed through to the domain controllers. The Samba server is made into a domain member server by using the following directives in smb.conf. security = domain Last thing, smbldap-tools using the base repo from Centos 5.5 depend on Samba-3.0.x, u must build your own rpm to work with samba3x. My two cents. -- LIving the dream... -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] windows 7 unable to join domain
--- Original message --- Subject: Re: [Samba] windows 7 unable to join domain From: Alberto Moreno ports...@gmail.com To: samba@lists.samba.org Date: Monday, 14/06/2010 11:03 PM On Mon, Jun 14, 2010 at 6:11 PM, t...@tms3.com wrote: SNIP I'm currently running Samba3x-3.3.8-0.51 on CentOS 5.5. I currently have many Windows XP clients associated with the domain and behaving correctly. However, I am unable to join a Windows 7 PC. I receive The specified network name is no longer available. I've verified that DNS is configured correctly, and as stated XP machines have no problem joining. http://wiki.samba.org/index.php/Windows7 There's a reg file that comes with the source code. Not sure about binary packages. Cheers, SNIP -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba Like tms3 told u, we have to make some changes to the register before we join ms 7 to the domain, I already did and works, no issue. Another thing I see in your smb.conf: security = DOMAIN. In my little knowledge about samba, if u have a PDC it must say: security = user. Went u add a BDC it must say: security = DOMAIN. I disagree on the last point. Security = user is default, so no entry necessary. For PDC I use: os level = 64 preferred master = Yes domain logons =Yes domain master = Yes For BDC I use (if on separate nodes) os level = 64 preferred master = Yes domain logons =Yes domain master = no If on same node os level = 60 preferred master = Auto domain logons =Yes domain master = no In domain security mode, the Samba server has a machine account (domain security trust account) and causes all authentication requests to be passed through to the domain controllers. The Samba server is made into a domain member server by using the following directives in smb.conf. security = domain Last thing, smbldap-tools using the base repo from Centos 5.5 depend on Samba-3.0.x, u must build your own rpm to work with samba3x. My two cents. -- LIving the dream... -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] windows 7 unable to join domain
Hi, Dňa 15. 6. 2010 3:05, delpheye wrote / napísal(a): Hi, I'm currently running Samba3x-3.3.8-0.51 on CentOS 5.5. I currently have many Windows XP clients associated with the domain and behaving correctly. However, I am unable to join a Windows 7 PC. I receive The specified network name is no longer available. I use Samba 3.4.5 on FreeBSD 7.2. I've verified that DNS is configured correctly, and as stated XP machines have no problem joining. Per some googling, I've turned off both: *- Network security:Minimum session security for NTLM SSP (including RPC based) Clients* - *Network security:Minimum session security for NTLM SSP (including RPC based) Servers* and changed *Network Security LAN Manager authentication level* to *Send LM NTLM – use NTLMv2 session security if negotiated* in the Local Security Policies. It is not needed to make these changes (I think you should change them back to origininal settings), I just added in registry: Computer\HKLM\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Parameters\DomainCompatibilityMode = dword 1 Computer\HKLM\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Parameters\DNSNameResolutionRequired = dword 0 and after joining domain changed Computer\HKLM\System\CurrentControlSet\services\Tcpip\Parameters\NV Domain from DOMAIN to domain.local Any ideas? My google-fu has become ineffective on this problem. I am sorry, but I really don't know where I found this :( Tomas. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] windows 7 unable to join domain
On Tue, Jun 15, 2010 at 9:57 AM, t...@tms3.com wrote: On Tuesday 15/06/2010 at 9:17 am, Alberto Moreno wrote: On Mon, Jun 14, 2010 at 11:45 PM, t...@tms3.com wrote: --- Original message --- Subject: Re: [Samba] windows 7 unable to join domain From: Alberto Moreno ports...@gmail.com To: samba@lists.samba.org Date: Monday, 14/06/2010 11:03 PM On Mon, Jun 14, 2010 at 6:11 PM, t...@tms3.com wrote: SNIP I'm currently running Samba3x-3.3.8-0.51 on CentOS 5.5. I currently have many Windows XP clients associated with the domain and behaving correctly. However, I am unable to join a Windows 7 PC. I receive The specified network name is no longer available. I've verified that DNS is configured correctly, and as stated XP machines have no problem joining. http://wiki.samba.org/index.php/Windows7 There's a reg file that comes with the source code. Not sure about binary packages. Cheers, SNIP -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba Like tms3 told u, we have to make some changes to the register before we join ms 7 to the domain, I already did and works, no issue. Another thing I see in your smb.conf: security = DOMAIN. In my little knowledge about samba, if u have a PDC it must say: security = user. Went u add a BDC it must say: security = DOMAIN. I disagree on the last point. Security = user is default, so no entry necessary. For PDC I use: os level = 64 preferred master = Yes domain logons =Yes domain master = Yes For BDC I use (if on separate nodes) �� os level = 64 preferred master = Yes domain logons =Yes domain master = no If on same node os level = 60 preferred master = Auto domain logons =Yes domain master = no In domain security mode, the Samba server has a machine account (domain security trust account) and causes all authentication requests to be passed through to the domain controllers. The Samba server is made into a domain member server by using the following directives in smb.conf. security = domain Hi. I point this because on his smb.conf file he us using security=domain, by default like u say is =user. Oh, not trying to be a snit, just that if you use sec=domain then the BDC will call the PDC for authing. It will work, it's just that it kinda (IMHO) makes the BDC sorta useless. And over WAN links wastes bandwidth. Cheers, Thanks!!! Last thing, smbldap-tools using the base repo from Centos 5.5 depend on Samba-3.0.x, u must build your own rpm to work with samba3x. My two cents. -- LIving the dream... -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- LIving the dream... -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba No problem my friend, we are here to learn, thanks for sharing. -- LIving the dream... -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] windows 7 unable to join domain
On Tue, Jun 15, 2010 at 10:40 AM, Alberto Moreno ports...@gmail.com wrote: On Tue, Jun 15, 2010 at 9:57 AM, t...@tms3.com wrote: On Tuesday 15/06/2010 at 9:17 am, Alberto Moreno wrote: On Mon, Jun 14, 2010 at 11:45 PM, t...@tms3.com wrote: --- Original message --- Subject: Re: [Samba] windows 7 unable to join domain From: Alberto Moreno ports...@gmail.com To: samba@lists.samba.org Date: Monday, 14/06/2010 11:03 PM On Mon, Jun 14, 2010 at 6:11 PM, t...@tms3.com wrote: SNIP I'm currently running Samba3x-3.3.8-0.51 on CentOS 5.5. I currently have many Windows XP clients associated with the domain and behaving correctly. However, I am unable to join a Windows 7 PC. I receive The specified network name is no longer available. I've verified that DNS is configured correctly, and as stated XP machines have no problem joining. http://wiki.samba.org/index.php/Windows7 There's a reg file that comes with the source code. Not sure about binary packages. Cheers, SNIP -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba Like tms3 told u, we have to make some changes to the register before we join ms 7 to the domain, I already did and works, no issue. Another thing I see in your smb.conf: security = DOMAIN. In my little knowledge about samba, if u have a PDC it must say: security = user. Went u add a BDC it must say: security = DOMAIN. I disagree on the last point. Security = user is default, so no entry necessary. For PDC I use: os level = 64 preferred master = Yes domain logons =Yes domain master = Yes For BDC I use (if on separate nodes) �� os level = 64 preferred master = Yes domain logons =Yes domain master = no If on same node os level = 60 preferred master = Auto domain logons =Yes domain master = no In domain security mode, the Samba server has a machine account (domain security trust account) and causes all authentication requests to be passed through to the domain controllers. The Samba server is made into a domain member server by using the following directives in smb.conf. security = domain Hi. I point this because on his smb.conf file he us using security=domain, by default like u say is =user. Oh, not trying to be a snit, just that if you use sec=domain then the BDC will call the PDC for authing. It will work, it's just that it kinda (IMHO) makes the BDC sorta useless. And over WAN links wastes bandwidth. Cheers, Thanks!!! Last thing, smbldap-tools using the base repo from Centos 5.5 depend on Samba-3.0.x, u must build your own rpm to work with samba3x. My two cents. -- LIving the dream... -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- LIving the dream... -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba No problem my friend, we are here to learn, thanks for sharing. -- LIving the dream... U say that u already have some XP clients on your domain, which meant that works. U are trying to add a Windows 7 capable of being able to be part of a Domain, like Ultimate Edition or compatible right? not a Home Edition. U are using ldap on centos, which is working? Because u have XP clients inside the domain, they can see the PDC of your domain? Could u please give us the output of testparm+testparm of your PDC. Thanks!!! -- LIving the dream... -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] windows 7 unable to join domain
On Jun 15, 2010, at 1:42 AM, Ciernik Tomas wrote: Hi, I'm currently running Samba3x-3.3.8-0.51 on CentOS 5.5. I currently have many Windows XP clients associated with the domain and behaving correctly. However, I am unable to join a Windows 7 PC. I receive The specified network name is no longer available. I've verified that DNS is configured correctly, and as stated XP machines have no problem joining. Per some googling, I've turned off both: *- Network security:Minimum session security for NTLM SSP (including RPC based) Clients* - *Network security:Minimum session security for NTLM SSP (including RPC based) Servers* and changed *Network Security LAN Manager authentication level* to *Send LM NTLM – use NTLMv2 session security if negotiated* in the Local Security Policies. See: http://wiki.samba.org/index.php/Windows7 for the correct settings. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] windows 7 unable to join domain
= copy = include = preexec = preexec close = No postexec = root preexec = root preexec close = No root postexec = available = Yes volume = fstype = NTFS set directory = No wide links = Yes follow symlinks = Yes dont descend = magic script = magic output = delete readonly = No dos filemode = No dos filetimes = Yes dos filetime resolution = No fake directory create times = No vfs objects = msdfs root = No msdfs proxy = [homes] comment = Home Directories valid users = %S read only = No browseable = No [netlogon] comment = Network Logon Service path = /home/netlogon guest ok = Yes [profiles] comment = Network Profiles Share path = /data/profiles read only = No create mask = 0600 directory mask = 0700 hide files = /desktop.ini/outlook*.lnk/*Briefcase*/ store dos attributes = Yes browseable = No [public] path = /data/public valid users = @Domain Users read only = No create mask = 0755 guest ok = Yes [former.employees] path = /data/former.employees valid users = @Domain Users read only = No create mask = 0755 guest ok = Yes [temp] path = /data/temp valid users = @Domain Users read only = No create mask = 0755 guest ok = Yes [joadmin] comment = Jo Admin path = /data/jo-admin valid users = joxxx write list = @domain users read only = No create mask = 0775 directory mask = 0775 [labs] comment = Labs Data path = /data/labs valid users = @Domain Users write list = @Domain Users read only = No create mask = 0775 directory mask = 0770 guest ok = Yes [business] comment = Business Docs path = /data/Business valid users = @Business Users read only = No create mask = 0775 directory mask = 0775 On Tue, Jun 15, 2010 at 12:52 PM, Alberto Moreno ports...@gmail.com wrote: On Tue, Jun 15, 2010 at 10:40 AM, Alberto Moreno ports...@gmail.com wrote: On Tue, Jun 15, 2010 at 9:57 AM, t...@tms3.com wrote: On Tuesday 15/06/2010 at 9:17 am, Alberto Moreno wrote: On Mon, Jun 14, 2010 at 11:45 PM, t...@tms3.com wrote: --- Original message --- Subject: Re: [Samba] windows 7 unable to join domain From: Alberto Moreno ports...@gmail.com To: samba@lists.samba.org Date: Monday, 14/06/2010 11:03 PM On Mon, Jun 14, 2010 at 6:11 PM, t...@tms3.com wrote: SNIP I'm currently running Samba3x-3.3.8-0.51 on CentOS 5.5. I currently have many Windows XP clients associated with the domain and behaving correctly. However, I am unable to join a Windows 7 PC. I receive The specified network name is no longer available. I've verified that DNS is configured correctly, and as stated XP machines have no problem joining. http://wiki.samba.org/index.php/Windows7 There's a reg file that comes with the source code. Not sure about binary packages. Cheers, SNIP -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba Like tms3 told u, we have to make some changes to the register before we join ms 7 to the domain, I already did and works, no issue. Another thing I see in your smb.conf: security = DOMAIN. In my little knowledge about samba, if u have a PDC it must say: security = user. Went u add a BDC it must say: security = DOMAIN. I disagree on the last point. Security = user is default, so no entry necessary. For PDC I use: os level = 64 preferred master = Yes domain logons =Yes domain master = Yes For BDC I use (if on separate nodes) �� os level = 64 preferred master = Yes domain logons =Yes domain master = no If on same node os level = 60 preferred master = Auto domain logons =Yes domain master = no In domain security mode, the Samba server has a machine account (domain security trust account) and causes all authentication requests to be passed through to the domain controllers. The Samba server is made into a domain member server by using the following directives in smb.conf. security = domain Hi. I point this because on his smb.conf file he us using security=domain, by default like u say is =user. Oh, not trying to be a snit, just that if you use sec=domain then the BDC will call the PDC for authing. It will work, it's just that it kinda (IMHO) makes the BDC sorta useless. And over WAN links wastes bandwidth. Cheers, Thanks!!! Last thing, smbldap-tools using the base repo from Centos 5.5 depend on Samba-3.0.x, u must build your own rpm to work with samba3x. My two cents
Re: [Samba] windows 7 unable to join domain
SNIP I'm currently running Samba3x-3.3.8-0.51 on CentOS 5.5. I currently have many Windows XP clients associated with the domain and behaving correctly. However, I am unable to join a Windows 7 PC. I receive The specified network name is no longer available. I've verified that DNS is configured correctly, and as stated XP machines have no problem joining. http://wiki.samba.org/index.php/Windows7 There's a reg file that comes with the source code. Not sure about binary packages. Cheers, SNIP -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
