samba - Mar 2014 - Samba 4.1 Active Directory and Windows 2012 Standard Evaluation

Hi all,

I've been slowly coming to grips with ActiveDirectory, having set up a
test network to figure out its innards and rehearse setting up a network
in preparation of replacing our existing NT4-based domain.

One of the machines I'm trying to join as a member server, is running
Windows 2012 Standard Evaluation.  It's actually an OpenStack image
retrieved from here:

http://www.cloudbase.it/openstack-windows-server-2012-r2-evalution-images/

The VM is on the same VLAN as the domain controllers (which are
themselves, VMs), same subnets, and I've tried disabling firewalls.

I have a Windows XP and a Windows 2000 VM, both joined to the domain,
and both work.  When I try to join the others to the domain, I specify
Administrator and my chosen password, and they happily join.

Windows 2012 on the other hand tells me I got the password wrong.

The closest thing I can find is trying to join a Samba machine to a
domain that's run by a Win2012 PDC.  At the time it was reported that
the two were incompatible:

http://lists.samba.org/archive/samba/2013-April/173050.html

My situation is the reverse: joining a Win2012 machine to a Samba PDC.
Is this schema problem still an issue today?  Is there something else I
could be doing wrong?

Regards,
-- 
Stuart Longland
Systems Engineer
     _ ___
\  /|_) |                           T: +61 7 3535 9619
 \/ | \ |     38b Douglas Street    F: +61 7 3535 9699
   SYSTEMS    Milton QLD 4064       http://www.vrt.com.au

On 17/03/14 15:51, Stuart Longland wrote:
> I have a Windows XP and a Windows 2000 VM, both joined to the domain,
> and both work.  When I try to join the others to the domain, I specify
> Administrator and my chosen password, and they happily join.
One of my colleagues managed to download some evaluation copies of
Windows Server from Microsoft's site, intended for deployment in a
Hyper-V environment.

The EULA makes no requirement where you run them other than they have to
understand .vhd format images: which QEMU does.  We got three images:

- Windows 2003
- Windows 2008 R2
- Windows 2012 R2

I couldn't get the '2003 image to run (it didn't like the disk
controller), but the other two came up fine.  So I connect them to my
test active directory VLAN.

Windows 2012 R2 first up, and I prepare myself for a fight.  Brought up
the system settings, told it to join the domain, entered my username and
password then got: "Welcome to the MYREALM.MYDOMAIN domain". 
Rebooted,
it joined the domain without question.  Having installed the necessary
add-ons, I'm happily administering Samba-based ActiveDirectory with the
Win2012R2 server as a member server.

Windows 2008 R2 is next, I go through the usual procedure, enter the
credentials, then it tells me that I got my Administrator password
wrong.  The same credentials I used for Windows 2000, XP and 2012R2.

Going back to the OpenStack evaluation image of 2012 I had (which was
the original 2012, not R2), it too reports that the password is incorrect.

So it seems there's something odd with the way Windows 2008 R2 and
Windows 2012 (original) that Samba4.1 doesn't like.  I'm doing a Windows
Update on the 2008 R2 VM to see if that clears things up.

If anyone else has ideas as to what I can check, that'd be appreciated.

Regards,
-- 
Stuart Longland
Systems Engineer
     _ ___
\  /|_) |                           T: +61 7 3535 9619
 \/ | \ |     38b Douglas Street    F: +61 7 3535 9699
   SYSTEMS    Milton QLD 4064       http://www.vrt.com.au