Hello Andrey Thanks for the trick. I'll try it. But it's a pity it doesn't work natively, right ? 2015-04-22 14:08 GMT+02:00 Andrey Repin <anrdaemon at yandex.ru>:> Greetings, William LIM! > > > Hi, > > > I have set a Samba AD DC on my network. Version is 4.1.17 on a Debian > > Wheezy. > > > I have an issue on my Windows XP SP3 clients : the time on these > computers > > is not synchronized with my Domain Controler. > > > Big problem is, if time difference is considerable (more or less 5 > > minutes), users can not log in. > > > On the other hand, my server is correctly synchronized with NTP server. > > > I don't understand the reason of my problem, and don't know were to start > > investigating. > > > Has anybody got this issue ? > > Got exactly your problem two days ago. > From elevated shell: > > w32tm /unregister > reboot > w32tm /register > w32tm /config /manualpeerlist:time.example.com /syncfromflags:MANUAL > /update > time /T (To test if synchronization done correctly) > > time.example.com is your domain time server - either AD DC or an NTP > server it > is synchronized with. I prefer NTP, though. Domain time service seems to be > unreliable in my setup, or needs to be enabled manually. > > > -- > With best regards, > Andrey Repin > Wednesday, April 22, 2015 15:01:06 > > Sorry for my terrible english...
Greetings, William LIM!>> > I have set a Samba AD DC on my network. Version is 4.1.17 on a Debian >> > Wheezy. >> >> > I have an issue on my Windows XP SP3 clients : the time on these >> computers >> > is not synchronized with my Domain Controler. >> >> > Big problem is, if time difference is considerable (more or less 5 >> > minutes), users can not log in. >> >> > On the other hand, my server is correctly synchronized with NTP server. >> >> > I don't understand the reason of my problem, and don't know were to start >> > investigating. >> >> > Has anybody got this issue ? >> >> Got exactly your problem two days ago. >> From elevated shell: >> >> w32tm /unregister >> reboot >> w32tm /register >> w32tm /config /manualpeerlist:time.example.com /syncfromflags:MANUAL >> /update >> time /T (To test if synchronization done correctly) >> >> time.example.com is your domain time server - either AD DC or an NTP >> server it >> is synchronized with. I prefer NTP, though. Domain time service seems to be >> unreliable in my setup, or needs to be enabled manually.> Thanks for the trick. I'll try it.> But it's a pity it doesn't work natively, right ?I'm not judging. I didn't have the time to research. I knew a short way and I did it in 5 minutes. -- With best regards, Andrey Repin Wednesday, April 22, 2015 17:02:07 Sorry for my terrible english...
Hi ! Actually, problem was located on client side, not samba side. w32time has "disappeared" from services list (!) the w32tm /unregister and w32tm /register solve the problem My clients seem to be correctly synchronised with my AD DC now. If i find out why w32time has disappeared, I'll post a message here. Thank you for your help ! 2015-04-22 16:02 GMT+02:00 Andrey Repin <anrdaemon at yandex.ru>:> Greetings, William LIM! > > >> > I have set a Samba AD DC on my network. Version is 4.1.17 on a Debian > >> > Wheezy. > >> > >> > I have an issue on my Windows XP SP3 clients : the time on these > >> computers > >> > is not synchronized with my Domain Controler. > >> > >> > Big problem is, if time difference is considerable (more or less 5 > >> > minutes), users can not log in. > >> > >> > On the other hand, my server is correctly synchronized with NTP > server. > >> > >> > I don't understand the reason of my problem, and don't know were to > start > >> > investigating. > >> > >> > Has anybody got this issue ? > >> > >> Got exactly your problem two days ago. > >> From elevated shell: > >> > >> w32tm /unregister > >> reboot > >> w32tm /register > >> w32tm /config /manualpeerlist:time.example.com /syncfromflags:MANUAL > >> /update > >> time /T (To test if synchronization done correctly) > >> > >> time.example.com is your domain time server - either AD DC or an NTP > >> server it > >> is synchronized with. I prefer NTP, though. Domain time service seems > to be > >> unreliable in my setup, or needs to be enabled manually. > > > Thanks for the trick. I'll try it. > > > But it's a pity it doesn't work natively, right ? > > I'm not judging. I didn't have the time to research. > I knew a short way and I did it in 5 minutes. > > > -- > With best regards, > Andrey Repin > Wednesday, April 22, 2015 17:02:07 > > Sorry for my terrible english... > >