SNIP> Windows 7 joins domain but trust relation fails after month or so with > "netlogon_creds_server_check failed" error. Needless to say, XP and > Vista work ok. > > Can anyone (please) confirm possibility of windows 7 joining samba > domain and staying joined for more than a month. > If so, what version of samba is working? Is samba 3.5 required, or > other > registry patches mentioned (as not needed) in wiki?Version samba34-3.4.5_1 on FreeBSD 8.0 and 7.2 with LDAP backend, 14 WAN connected nodes, no account expiration.> > > > ?????: 16.12.2009. 06:06, Alex Ferrara ????: >> >> _netr_ServerAuthenticate3: netlogon_creds_server_check failed. >> Rejecting auth request from client AC-2150 machine account AC-2150$ >> >> I have noticed that the new Windows 7 machines say the password has >> expired on the same date that is in "sambaPwdLastSet". I added the >> "X" attribute in sambaAcctFlags in an attempt to stop the accounts >> from expiring. Below is an ldif of a Windows 7 machine trust account >> >> dn: uid=ac-2150$,ou=computers,dc=domain,dc=local >> objectClass: top >> objectClass: account >> objectClass: posixAccount >> objectClass: sambaSamAccount >> cn: ac-2150$ >> uid: ac-2150$ >> uidNumber: 1111 >> gidNumber: 515 >> homeDirectory: /dev/null >> loginShell: /bin/false >> description: Computer >> gecos: Computer >> sambaDomainName: DOMAIN >> sambaPrimaryGroupSID: S-1-5-21-3581057417-3103041693-70022037-515 >> sambaSID: S-1-5-21-3581057417-3103041693-70022037-3222 >> sambaNTPassword: DABA25E3910551C63347D399520C123D >> sambaAcctFlags: [WX ] >> sambaPwdLastSet: 1260776037 >> >> Any help would be appreciated. >> >> aF >> -- To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba
Predrag Gavrilovic
2010-May-19 13:36 UTC
[Samba] Windows 7 machine trust accounts expiring
Thank you all for prompt responses Have you applied any other registry patches beside those that I have applied? Predrag Gavrilovic ?????: 19.05.2010. 14:57, tms3 at tms3.com ????:> > SNIP >> Windows 7 joins domain but trust relation fails after month or so with >> "netlogon_creds_server_check failed" error. Needless to say, XP and >> Vista work ok. >> >> Can anyone (please) confirm possibility of windows 7 joining samba >> domain and staying joined for more than a month. >> If so, what version of samba is working? Is samba 3.5 required, or other >> registry patches mentioned (as not needed) in wiki? > > Version samba34-3.4.5_1 on FreeBSD 8.0 and 7.2 with LDAP backend, 14 WAN > connected nodes, no account expiration. >> >> >> >> ?????: 16.12.2009. 06:06, Alex Ferrara ????: >>> >>> _netr_ServerAuthenticate3: netlogon_creds_server_check failed. >>> Rejecting auth request from client AC-2150 machine account AC-2150$ >>> >>> I have noticed that the new Windows 7 machines say the password has >>> expired on the same date that is in "sambaPwdLastSet". I added the >>> "X" attribute in sambaAcctFlags in an attempt to stop the accounts >>> from expiring. Below is an ldif of a Windows 7 machine trust account >>> >>> dn: uid=ac-2150$,ou=computers,dc=domain,dc=local >>> objectClass: top >>> objectClass: account >>> objectClass: posixAccount >>> objectClass: sambaSamAccount >>> cn: ac-2150$ >>> uid: ac-2150$ >>> uidNumber: 1111 >>> gidNumber: 515 >>> homeDirectory: /dev/null >>> loginShell: /bin/false >>> description: Computer >>> gecos: Computer >>> sambaDomainName: DOMAIN >>> sambaPrimaryGroupSID: S-1-5-21-3581057417-3103041693-70022037-515 >>> sambaSID: S-1-5-21-3581057417-3103041693-70022037-3222 >>> sambaNTPassword: DABA25E3910551C63347D399520C123D >>> sambaAcctFlags: [WX ] >>> sambaPwdLastSet: 1260776037 >>> >>> Any help would be appreciated. >>> >>> aF >>> -- To unsubscribe from this list go to the following URL and read the >>> instructions: https://lists.samba.org/mailman/options/samba >> >> >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba >
> Have you applied any other registry patches beside those that I have > applied? >I have not and I do not have any trust problems. John
SNIP> > Have you applied any other registry patches beside those that I have > applied?Well, yes, I have (erm...had) a reg patch to change DNS. This actually can cause some problems on Win7. However, with or without it, I had no expiration. Cheers, TMS III> > > > Predrag Gavrilovic > > ?????: 19.05.2010. 14:57, tms3 at tms3.com ????: >> >> >> SNIP >>> >>> Windows 7 joins domain but trust relation fails after month or so with >>> "netlogon_creds_server_check failed" error. Needless to say, XP and >>> Vista work ok. >>> >>> Can anyone (please) confirm possibility of windows 7 joining samba >>> domain and staying joined for more than a month. >>> If so, what version of samba is working? Is samba 3.5 required, or >>> other >>> registry patches mentioned (as not needed) in wiki? >> >> Version samba34-3.4.5_1 on FreeBSD 8.0 and 7.2 with LDAP backend, 14 >> WAN >> connected nodes, no account expiration. >>> >>> >>> >>> >>> ?????: 16.12.2009. 06:06, Alex Ferrara ????: >>>> >>>> >>>> _netr_ServerAuthenticate3: netlogon_creds_server_check failed. >>>> Rejecting auth request from client AC-2150 machine account AC-2150$ >>>> >>>> I have noticed that the new Windows 7 machines say the password has >>>> expired on the same date that is in "sambaPwdLastSet". I added the >>>> "X" attribute in sambaAcctFlags in an attempt to stop the accounts >>>> from expiring. Below is an ldif of a Windows 7 machine trust account >>>> >>>> dn: uid=ac-2150$,ou=computers,dc=domain,dc=local >>>> objectClass: top >>>> objectClass: account >>>> objectClass: posixAccount >>>> objectClass: sambaSamAccount >>>> cn: ac-2150$ >>>> uid: ac-2150$ >>>> uidNumber: 1111 >>>> gidNumber: 515 >>>> homeDirectory: /dev/null >>>> loginShell: /bin/false >>>> description: Computer >>>> gecos: Computer >>>> sambaDomainName: DOMAIN >>>> sambaPrimaryGroupSID: S-1-5-21-3581057417-3103041693-70022037-515 >>>> sambaSID: S-1-5-21-3581057417-3103041693-70022037-3222 >>>> sambaNTPassword: DABA25E3910551C63347D399520C123D >>>> sambaAcctFlags: [WX ] >>>> sambaPwdLastSet: 1260776037 >>>> >>>> Any help would be appreciated. >>>> >>>> aF >>>> -- To unsubscribe from this list go to the following URL and read the >>>> instructions: https://lists.samba.org/mailman/options/samba >>> >>> >>> -- >>> To unsubscribe from this list go to the following URL and read the >>> instructions: https://lists.samba.org/mailman/options/samba >> > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba