Marco Gaiarin via samba ha scritto il 28/08/20 alle 09:53:> Mandi! L.P.H. van Belle via samba > In chel di` si favelave... > >> And i dont change registry keys to "make things work".. > > A light blink in my head. Louis, you have keeped WINS server (in old or > new domain)? Your client use it? > > When i had, as you, two domain (NT and AD), the NT domain was also a > WINS server, and i propagate the WINS server info to client via DHCP. > > Paolo, you have enabled WINS? You assign it to your client?yes of course: the dhcp send the wins server that is the NTdomain DC IP. Piviul
Mandi! Piviul via samba In chel di` si favelave...> > Paolo, you have enabled WINS? You assign it to your client? > yes of course: the dhcp send the wins server that is the NTdomain DC IP.Ok. But probably in this way the wins server know nothing about 'AD' servers... please, try to add to AD domain MEMBERS (NOT DC!!!): wins server = <IP_of_wins_server> and restart samba. I verify my current configuration, and probably for a sake of 'smooth' upgrade, i've still a WINS server (in one of the AD DM), and all other DM point to this wins server. -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/ Polo FVG - Via della Bont?, 7 - 33078 - San Vito al Tagliamento (PN) marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797 Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA! http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000 (cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)
Marco Gaiarin via samba ha scritto il 28/08/20 alle 12:21:> Mandi! Piviul via samba > In chel di` si favelave... > >>> Paolo, you have enabled WINS? You assign it to your client? >> yes of course: the dhcp send the wins server that is the NTdomain DC IP. > > Ok. But probably in this way the wins server know nothing about 'AD' > servers... please, try to add to AD domain MEMBERS (NOT DC!!!): > > wins server = <IP_of_wins_server> > > and restart samba.nothing to do. As we can see from logs when an AD user try to access to a samba NT domain server member share, samba can't try to authenticate the AD user to the NT DOMAIN: it simply try to authenticate it locally instead of try to authenticate it into the NT domain...> I verify my current configuration, and probably for a sake of 'smooth' > upgrade, i've still a WINS server (in one of the AD DM), and all other > DM point to this wins server.probably samba has introduced this bug after your migration to AD. Any way thank you very much indeed! Piviul