Re: [Samba] Samba 4 and gpo in win7
Hello! Attached a trace file while running gpupdate. Accessing sysvol works through: \\ip\sysvol and \\dc.domain_name\sysvol Doesn´t work through \\domainname\sysvol - Ursprungligt meddelande - Från: Matthieu Patou m...@samba.org Till: samba@lists.samba.org, samba-technical samba-techni...@lists.samba.org Skickat: torsdag, 19 maj 2011 15:31:34 Ämne: Re: [Samba] Samba 4 and gpo in win7 On 12/05/2011 11:21, tae...@bredband.net wrote: Hello! Having an issue with getting gpo to apply for my win7 clients. Running samba4. Creating gpo with gpmc and they are created under var/locks/sysvol/mydomain/policies They applies just perfect on win xp clients but when trying on win7 clients they just won´t apply. When runnin gpupdate /force we get this(summary): So I pushed a few fixes in the Git tree of samba and made a lot of tests about this. First you need: host msdfs = yes in the [global] part of your configuration. Then reboot XP / windows7. Try to access \\domain.tld\sysvol and also navigate inside it. If it works it means that dfs for sysvol is working in most the case it will solve Windows7 problems with fetching the GPO. If not make trace from the samba server and send us for analysis, trace can be done like this: tcpdump -i any host ip_of_the_client -s 16000 -w /tmp/trace.pcap. Matthieu. -- Matthieu Patou Samba Team http://samba.org Private repo http://git.samba.org/?p=mat/samba.git;a=summary -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 4 and gpo in win7
Attached a wireshark file with captures during a gpupdate from a win7 client. In fact we have more then one DC. All of the times when trying to access sysvol folder I´v tried through \\ip-nr\sysvol and not through \\domain.com\sysvol. Through \\domain.com\sysvol I cannot access sysvol. Is it must to access it that way? Or is it me that getting this all wrong? - Ursprungligt meddelande - Från: Matthieu Patou m...@samba.org Till: samba@lists.samba.org Skickat: fredag, 13 maj 2011 22:22:50 Ämne: Re: [Samba] Samba 4 and gpo in win7 On 13/05/2011 20:34, Michael Wood wrote: On 13 May 2011 13:23, Kalle Petterssontae...@bredband.net wrote: Hi! Could access sysvol directory per default from xp and win7 machines. Tried adding adding host msdfs = yes in smb.conf. Afterwards non of the clients could access sysvol directory through explorer view. First, what path did you try to connect to exactly? Assuming your server is called server.example.com, did you connect to \\SERVER\... or was it \\example.com\...? you have to try \\domain.tld\ because that's the way client will do. And still no gpo applying for win7 clients. I´m kinda confused. Are gpo suppose to work with samba4 and win7? It works perfect with my win xp clients. I think it is supposed to work, but I've not tried it. I'm sure one of the Samba developers will say if it's not supposed to work. Might be a bug (what a surprise ;-) ) in the dfs referal naming resolution, I really happy to help I just need more information. Like a trace and the fact if you have more than 1 DC. In short if you don't have host msdfs = yes, the client will revert to NT4 authentication when trying to access \\domain.tld\sysvol ... as the client can't do kerberos authentication on a domain SPN. XP is quite ok with this degradation, w7 has some problems some time and tend to do unauthenticated mode which of course fail ! Starting samba in more verbose mode could help too (-d 4 should be good). Matthieu -- Matthieu Patou Samba Team http://samba.org Private repo http://git.samba.org/?p=mat/samba.git;a=summary -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 4 and gpo in win7
Hi! Could access sysvol directory per default from xp and win7 machines. Tried adding adding host msdfs = yes in smb.conf. Afterwards non of the clients could access sysvol directory through explorer view. And still no gpo applying for win7 clients. I´m kinda confused. Are gpo suppose to work with samba4 and win7? It works perfect with my win xp clients. - Ursprungligt meddelande - Från: Daniel Müller muel...@tropenklinik.de Till: m...@samba.org, samba@lists.samba.org Skickat: fredag, 13 maj 2011 11:14:21 Ämne: Re: [Samba] Samba 4 and gpo in win7 Hi, I thought dfs is not working with samba4, Try to add: host msdfs = yes???!! Is it or not? My last tries failed. --- EDV Daniel Müller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 Tübingen Tel.: 07071/206-463, Fax: 07071/206-499 eMail: muel...@tropenklinik.de Internet: www.tropenklinik.de --- -Ursprüngliche Nachricht- Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im Auftrag von Matthieu Patou Gesendet: Freitag, 13. Mai 2011 10:49 An: samba@lists.samba.org Betreff: Re: [Samba] Samba 4 and gpo in win7 On 12/05/2011 11:21, tae...@bredband.net wrote: Hello! Having an issue with getting gpo to apply for my win7 clients. Running samba4. Creating gpo with gpmc and they are created under var/locks/sysvol/mydomain/policies They applies just perfect on win xp clients but when trying on win7 clients they just won´t apply. When runnin gpupdate /force we get this(summary): Could not read the file path to policy. Possible problems. a. Namematch/connection to dc b. Delay in file replication service c. dfs client inactive Anyone got any ideas? Try to add: host msdfs = yes in [Global] section. Also try to access your sysvol folder this way \\mydomain.tld\sysvol\mydomain.tld\Policies in windows XP and then in windows 7. Finally you can send us a tcpdump/tshark capture between you windows client and samba server, see here for instruction on tracing: https://wiki.samba.org/index.php/Capture_Packets. Matthieu. -- Matthieu Patou Samba Team http://samba.org Private repo http://git.samba.org/?p=mat/samba.git;a=summary -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
