samba - Aug 2016 - Windows 10 Domainlogon Samba 4.4.5 NT4-style domain

Hello,

I have try windows 10 in an Samba 4.4.5 NT4-style domain.
With some registry hacks (DomainCompatibilityMode and
DNSNameResolutionRequired) it can be an member of the domain.

When i try to login with domain member i get the error

"There are currently no logon servers available to service the logon
request"

At
https://wiki.samba.org/index.php/Required_settings_for_NT4-style_domains#Windows_10:_There_are_currently_no_logon_servers_available_to_service_the_logon_request.
say that setting

server max protocol = NT1

fix the problem, but when i set it windows 7 isn't able to connect to samba.

Then i found this mailinglist entry
https://lists.samba.org/archive/samba/2016-April/198763.html

and try

client ipc max protocol = SMB2
client ipc min protocol = SMB2
client max protocol = SMB2
client min protocol = CORE
server max protocol = SMB2
server min protocol = LANMAN1

i also test

SMB2_10
SMB3_10
SMB3_11

without success.

I use

samba 4.4.5

pdc in nt4-style with ldap backend

windows 7 upgraded to win 10 "works out of the box" but that can be
that
it works because all "tested" userprofiles already exist on this
machine


Is there a way to fix this?
Is it a problem of my "old" NT4-style domain?

thanks for any help.
Best regards,
basti

I had this issue as well; unfortunately, the fix that isn't recommended by
the Samba team is to disable SMB 2/3 on Windows 10, which can break them
from connecting to other systems (and that's why it's not recommended).
Any
reason you can't migrate soon to Samba4 AD?

On Thu, Aug 18, 2016 at 11:28 AM, basti via samba <samba at
lists.samba.org>
wrote:
> Hello,
>
> I have try windows 10 in an Samba 4.4.5 NT4-style domain.
> With some registry hacks (DomainCompatibilityMode and
> DNSNameResolutionRequired) it can be an member of the domain.
>
> When i try to login with domain member i get the error
>
> "There are currently no logon servers available to service the logon
> request"
>
> At
> https://wiki.samba.org/index.php/Required_settings_for_NT4-
> style_domains#Windows_10:_There_are_currently_no_logon_
> servers_available_to_service_the_logon_request.
> say that setting
>
> server max protocol = NT1
>
> fix the problem, but when i set it windows 7 isn't able to connect to
> samba.
>
> Then i found this mailinglist entry
> https://lists.samba.org/archive/samba/2016-April/198763.html
>
> and try
>
> client ipc max protocol = SMB2
> client ipc min protocol = SMB2
> client max protocol = SMB2
> client min protocol = CORE
> server max protocol = SMB2
> server min protocol = LANMAN1
>
> i also test
>
> SMB2_10
> SMB3_10
> SMB3_11
>
> without success.
>
> I use
>
> samba 4.4.5
>
> pdc in nt4-style with ldap backend
>
> windows 7 upgraded to win 10 "works out of the box" but that can
be that
> it works because all "tested" userprofiles already exist on this
machine
>
>
> Is there a way to fix this?
> Is it a problem of my "old" NT4-style domain?
>
> thanks for any help.
> Best regards,
> basti
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

There are only a small network with 10 win7 and 1 win10 at the moment. I
think the work of a migration is overkilled. At all this is only a test
PC so an generic user profile is the simpler solution in my opinion.

Thank you luke.

On 19.08.2016 03:38, Luke Barone via samba wrote:
> Any
> reason you can't migrate soon to Samba4 AD?

> 10 win7 and 1 win10
> I think the work of a migration is overkilled
I dont agree on that, yes setup takes time, but in the long end, 
you will save time.

As of 3 pc's i setup and AD, why because it saves me time in maintaining. 
Just keep is simple with minimal changes, so thats quickly setup. 

Greetz, 

Louis

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens basti via samba
> Verzonden: vrijdag 19 augustus 2016 8:46
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] Windows 10 Domainlogon Samba 4.4.5 NT4-style domain
> 
> There are only a small network with 10 win7 and 1 win10 at the moment. I
> think the work of a migration is overkilled. At all this is only a test
> PC so an generic user profile is the simpler solution in my opinion.
> 
> Thank you luke.
> 
> On 19.08.2016 03:38, Luke Barone via samba wrote:
> > Any
> > reason you can't migrate soon to Samba4 AD?
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

Works here in Samba 4.4.4 with NT4-style domain, with only the two 
registry changes (DomainCompatibilityMode and
DNSNameResolutionRequired), and server max protocol = NT1. Clients both 
Win7 and 10.