Hi, I have set a Samba AD DC on my network. Version is 4.1.17 on a Debian Wheezy. I have an issue on my Windows XP SP3 clients : the time on these computers is not synchronized with my Domain Controler. Big problem is, if time difference is considerable (more or less 5 minutes), users can not log in. On the other hand, my server is correctly synchronized with NTP server. I don't understand the reason of my problem, and don't know were to start investigating. Has anybody got this issue ? Thanks Will
Hai, i had this also .. First set the xp machines within 5 min time difference compaired to the server, then time should be in sync because time is passed by AD. If you already had 8 failures of time sync then the sources is excluded.. please read : https://support.microsoft.com/en-us/kb/314054 for more info. Greetz, Louis>-----Oorspronkelijk bericht----- >Van: william.epci at gmail.com >[mailto:samba-bounces at lists.samba.org] Namens William LIM >Verzonden: woensdag 22 april 2015 11:08 >Aan: samba at lists.samba.org >Onderwerp: [Samba] Time synchronization issue > >Hi, > >I have set a Samba AD DC on my network. Version is 4.1.17 on a Debian >Wheezy. > >I have an issue on my Windows XP SP3 clients : the time on >these computers >is not synchronized with my Domain Controler. > >Big problem is, if time difference is considerable (more or less 5 >minutes), users can not log in. > >On the other hand, my server is correctly synchronized with NTP server. > >I don't understand the reason of my problem, and don't know >were to start >investigating. > >Has anybody got this issue ? > >Thanks > >Will >-- >To unsubscribe from this list go to the following URL and read the >instructions: https://lists.samba.org/mailman/options/samba > >
Ok, good it works now.. ? Yes, clients should be synced with the DC.. i can only think of?3 reasons why it didnt work or stopped working. ? 1)?If the pc time gets out of sync (+5min) ?for some reason, then the client wil try 8 more times and then it marks the source as unusable.. ??? ( if a pc is never rebooted, this can happen also?) ? 2) u used w32time to set time, and if you run than from within a login script, i wil fail, users dont have rights to set time. ??? this can be set by policy that users are allowed to sync time.. ? 3) other which i dont now..? ;-) ??? changed time server, winter/summertime change which went wrong.. ? ? ? Greetz, ? Louis ? ? Van: William LIM [mailto:william.epci at gmail.com] Verzonden: woensdag 22 april 2015 12:43 Aan: L.P.H. van Belle Onderwerp: Re: [Samba] Time synchronization issue Hello Louis, I have applied patch from kb314054 to set NTP server on the client computer. It works now. BUT normally, shouldn't clients synchronise with DC by default ? Why doesn't it work ? 2015-04-22 11:24 GMT+02:00 L.P.H. van Belle <belle at bazuin.nl>: Hai, i had this also .. First set the xp machines within 5 min time difference compaired to the server, then time should be in sync because time is passed by AD. If you already had 8 failures of time sync then the sources is excluded.. please read : https://support.microsoft.com/en-us/kb/314054 for more info. Greetz, Louis>-----Oorspronkelijk bericht----- >Van: william.epci at gmail.com >[mailto:samba-bounces at lists.samba.org] Namens William LIM >Verzonden: woensdag 22 april 2015 11:08 >Aan: samba at lists.samba.org >Onderwerp: [Samba] Time synchronization issue > >Hi, > >I have set a Samba AD DC on my network. Version is 4.1.17 on a Debian >Wheezy. > >I have an issue on my Windows XP SP3 clients : the time on >these computers >is not synchronized with my Domain Controler. > >Big problem is, if time difference is considerable (more or less 5 >minutes), users can not log in. > >On the other hand, my server is correctly synchronized with NTP server. > >I don't understand the reason of my problem, and don't know >were to start >investigating. > >Has anybody got this issue ? > >Thanks > >Will >-- >To unsubscribe from this list go to the following URL and read the >instructions:? https://lists.samba.org/mailman/options/samba > >-- To unsubscribe from this list go to the following URL and read the instructions:? https://lists.samba.org/mailman/options/samba
Greetings, William LIM!> Hi,> I have set a Samba AD DC on my network. Version is 4.1.17 on a Debian > Wheezy.> I have an issue on my Windows XP SP3 clients : the time on these computers > is not synchronized with my Domain Controler.> Big problem is, if time difference is considerable (more or less 5 > minutes), users can not log in.> On the other hand, my server is correctly synchronized with NTP server.> I don't understand the reason of my problem, and don't know were to start > investigating.> Has anybody got this issue ?Got exactly your problem two days ago. From elevated shell: w32tm /unregister reboot w32tm /register w32tm /config /manualpeerlist:time.example.com /syncfromflags:MANUAL /update time /T (To test if synchronization done correctly) time.example.com is your domain time server - either AD DC or an NTP server it is synchronized with. I prefer NTP, though. Domain time service seems to be unreliable in my setup, or needs to be enabled manually. -- With best regards, Andrey Repin Wednesday, April 22, 2015 15:01:06 Sorry for my terrible english...
Hello Andrey Thanks for the trick. I'll try it. But it's a pity it doesn't work natively, right ? 2015-04-22 14:08 GMT+02:00 Andrey Repin <anrdaemon at yandex.ru>:> Greetings, William LIM! > > > Hi, > > > I have set a Samba AD DC on my network. Version is 4.1.17 on a Debian > > Wheezy. > > > I have an issue on my Windows XP SP3 clients : the time on these > computers > > is not synchronized with my Domain Controler. > > > Big problem is, if time difference is considerable (more or less 5 > > minutes), users can not log in. > > > On the other hand, my server is correctly synchronized with NTP server. > > > I don't understand the reason of my problem, and don't know were to start > > investigating. > > > Has anybody got this issue ? > > Got exactly your problem two days ago. > From elevated shell: > > w32tm /unregister > reboot > w32tm /register > w32tm /config /manualpeerlist:time.example.com /syncfromflags:MANUAL > /update > time /T (To test if synchronization done correctly) > > time.example.com is your domain time server - either AD DC or an NTP > server it > is synchronized with. I prefer NTP, though. Domain time service seems to be > unreliable in my setup, or needs to be enabled manually. > > > -- > With best regards, > Andrey Repin > Wednesday, April 22, 2015 15:01:06 > > Sorry for my terrible english...
but It does work out of the box.. If al was setup ok.. It the time server also the DC with FSMO role PDC ? if not, then thats your error. this is a good read. https://technet.microsoft.com/en-us/library/cc773013(v=ws.10).aspx Greetz, Louis>-----Oorspronkelijk bericht----- >Van: william.epci at gmail.com >[mailto:samba-bounces at lists.samba.org] Namens William LIM >Verzonden: woensdag 22 april 2015 14:57 >Aan: samba at lists.samba.org >Onderwerp: Re: [Samba] Time synchronization issue > >Hello Andrey > >Thanks for the trick. I'll try it. > >But it's a pity it doesn't work natively, right ? > >2015-04-22 14:08 GMT+02:00 Andrey Repin <anrdaemon at yandex.ru>: > >> Greetings, William LIM! >> >> > Hi, >> >> > I have set a Samba AD DC on my network. Version is 4.1.17 >on a Debian >> > Wheezy. >> >> > I have an issue on my Windows XP SP3 clients : the time on these >> computers >> > is not synchronized with my Domain Controler. >> >> > Big problem is, if time difference is considerable (more or less 5 >> > minutes), users can not log in. >> >> > On the other hand, my server is correctly synchronized >with NTP server. >> >> > I don't understand the reason of my problem, and don't >know were to start >> > investigating. >> >> > Has anybody got this issue ? >> >> Got exactly your problem two days ago. >> From elevated shell: >> >> w32tm /unregister >> reboot >> w32tm /register >> w32tm /config /manualpeerlist:time.example.com /syncfromflags:MANUAL >> /update >> time /T (To test if synchronization done correctly) >> >> time.example.com is your domain time server - either AD DC or an NTP >> server it >> is synchronized with. I prefer NTP, though. Domain time >service seems to be >> unreliable in my setup, or needs to be enabled manually. >> >> >> -- >> With best regards, >> Andrey Repin >> Wednesday, April 22, 2015 15:01:06 >> >> Sorry for my terrible english... >-- >To unsubscribe from this list go to the following URL and read the >instructions: https://lists.samba.org/mailman/options/samba > >