Hi all, a bit late to the party, but here it goes.
After updating from 4.17.9 to 4.21.5 (last June, from bookworm
Backports) my Chrony conf stopped working for windows pcs; it works
fine for linux members. I always get "The computer did not resync
because no time data was available".
Not exactly sure when it stopped since, in the meantime, I also
raised functional level to 2016 using ad dc functional level = 2016 in
smb.conf (followed
https://wiki.samba.org/index.php/Raising_the_Functional_Levels)
I (re)checked https://wiki.samba.org/index.php/Time_Synchronisation
and http://samba.bigbird.es/doku.php?id=samba:install-chrony but no
matter what I did I could not get it to work.
The only thing that worked out of the box was the registry hack.
Right now, the pcs with hack work just fine, the others "no data is
available"
Did I miss something, or is this still a thing? Any other solution
that doesn't break authentication?
Best regards!
Luis Peromarta via samba <samba at lists.samba.org> escreveu (ter?a,
11/03/2025 ?(s) 10:48):>
> This is my same experience, never needed the reg key nor I could reproduce
the problem if following my notes in samba.bigbird.es
>
> All the best.
> On 11 Mar 2025 at 10:30 +0100, Stefan G. Weichinger via samba <samba at
lists.samba.org>, wrote:
> > Am 10.03.25 um 18:13 schrieb Peter Milesson via samba:
> >
> > > Hi Stefan,
> > >
> > > I can confirm that setting
> > >
> > >
HKLM\SYSTEM\CurrentControlSet\Services\w32time\TimeProviders\NtpClient/
> > > SignatureAuthAllowed
> > >
> > > to 0 is working. You don't need any more complex GPOs than
that. I have
> > > tried it with Windows 7, Windows 10 and Windows 11.
> > >
> > > On the flip side, the clients will synchronize with the DCs, the
> > > drawback is naturally, without the security features. Any other
method
> > > previously described, where time data is supplied by external
servers,
> > > is a last resort option.
> >
> > thank you.
> >
> > So far the customer told me that all the tested PCs (Windows 11) have
> > the correct time today after setting up samba with chrony yesterday.
> >
> > bingo
> >
> > I don't have that registry key in place, I think. I'd have to
check on
> > site ... that might have been set years ago. But I assume: no.
> >
> >
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions: https://lists.samba.org/mailman/options/samba
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba