search for: 23h2

I have been busy with other things lately and have not been able to investigate issue more. But there were some issues before it got really bad. But strange thing is, that clean install of 22H2 had same issue after successfully joining domain. And issue remained after upgrading to 23H2. And 22H2 did not even have latest security updates available. For me strangest part is, that after using "Nltest /DBFlag:2080FFFF" to set netlogon service to provide debug logs (after that restarting service), that debug complains about being unable to log into ldap server. Also, wh...

...o not use 24H2. > I thought, that it might be something about my specific configuration/dc history (some kind of configuration issue). That is, why I started checking changes and then I discovered that schema update part. Whatever it is, it seems to affect other Windows 11 versions also (23H2 test vm has same problem). And even Windows 10 computers are having some issues (that started with January update and before Samba upgrade). Although, with win10 issues are only with rdp and ssh login and restart has fixed them (at least until now). -- Virgo P?rna virgo.parna at mail.ee

I just want to add, that this week I introduced first windows 11 24h2 to AD - everything up to 23h2 is working fine - but windows 11 24h2 has some strange kerberos-related issues. I added pc to domain successfully and can log in, but I can't access sysvol and netlogon and gpupdate fails. Automatic DNS update from the workstation fails with insufficient rights (running bind on samba ad dc)...

...14a585a1?page=3 > > Which appears to be a lot closer to what the problem the OP is getting. > If it is, then it appears to be a Windows bug that they are not > accepting. > I'll check this also. Changing allowed kerberos algorihms had no effect. Although for me fully updated 23H2 is also not working. That is why I started suspecting, that Windows expects something of Samba side, that is not working anymore. The whole schema update part. I did disable deprecated settings in Samba side. -- Virgo P?rna virgo.parna at mail.ee

...ich appears to be a lot closer to what the problem the OP is > > getting. If it is, then it appears to be a Windows bug that they > > are not accepting. > > > > I'll check this also. Changing allowed kerberos algorihms had > no effect. Although for me fully updated 23H2 is also not working. > That is why I started suspecting, that Windows expects something of > Samba side, that is not working anymore. The whole schema update > part. > I did disable deprecated settings in Samba side. > If it is a Samba problem, I would have expected to have seen...

El 13/2/25 a les 19:43, Kacper Wirski via samba ha escrit: > I just want to add, that this week I introduced first windows 11 24h2 to > AD - everything up to 23h2 is working fine - but windows 11 24h2 has > some strange kerberos-related issues. > > I added pc to domain successfully and can log in, but I can't access > sysvol and netlogon and gpupdate fails. Automatic DNS update from the > workstation fails with insufficient rights (run...

...00% reproducible. Increased logging produces tons of logs, but no decodable error messages in them, at least for me. Server side: Debian 12 (bookworm) with stock 4.17.x and bookworm-backports (4.19.4), but tried with old SLES 12 server with 4.6.x Client side: Windows 10 22H2 x64 and Windows 11 23H2 x64, "Print Management" with app. See my smb.conf below. Do you have any ideas? Is print driver uploading known to be broken? Is these Canon and HP drivers are known to be broken? Do you have working print servers with print drivers uploaded? What drivers are you using? Thanks! [glo...

...abling Core Protection did change anything (had this disabled, because Smart Card reader drived does not work with 24H2 otherwise). And just changing algorithms allowed for Kerberos had no effect. Strange thing was, that when I tested it Windows 11 22H2 test machine (that I today upgraded to 23H2) and enabled debug log on Windows NETLOGON service, then in that log it complained: 01/30 15:28:23 [ERROR] [1320] NlpStoreKeyInDS: Unable to get computer DN: 5 01/30 15:28:23 [ERROR] [1320] NlProvisionMachineAuthKey: Unable to store auth key in DS: 5 01/30 15:28:23 [ERROR] [7044] NetpLdapBind: ld...

El 13/2/25 a les 22:53, Kacper Wirski via samba ha escrit: > It's definately not that, i'm running local pki and CA is distributed to > all station, new win 11 24h2 has the root CA is the proper store (one of > the things I double checked), and samba ad dc servers use certificates > issued by this CA. > > Do You have windows 11 24h2 in samba ad with no issues? Which

On Tue, 4 Feb 2025 13:22:46 +0000 Rowland Penny via samba <samba at lists.samba.org> wrote: > On Tue, 4 Feb 2025 15:07:30 +0200 > Virgo P?rna via samba <samba at lists.samba.org> wrote: > > > And there has been some developement... > > > > test-computersecurechannel > > still reports True. > > But now > > test-computersecurechannel

...h samba-tool. That account works for accesing Windows 10 computers and Samba server. But when trying log into Windows 11 Windows says "The username or password is incorrect". So it is not about specific domain user. And that computer is also Windows 24H2.. I'll need to get myself 23H2 install media, to test it with that. Yet, when logged in with local account, test-computersecurechannel shows, that secure channel between local computer and domain is ok... But Windows NETLOGON service complains, that it could not set up secure session with DC... -- Virgo P?rna virgo.parna a...

On Fri, 24 Jan 2025 11:37:43 +0200 Virgo P?rna via samba <samba at lists.samba.org> wrote: > On 24.01.2025 11:30, Virgo P?rna via samba wrote: > > On 24.01.2025 11:23, Rowland Penny via samba wrote: > >> > >> Yes, I did look at the MSK years, but ignored them because > >> everything should be using EET and the time isn't stored like that > >>

...hich samba version You're running? Regards, Kacper W dniu 13.02.2025 o?22:19, Luca Olivetti via samba pisze: > El 13/2/25 a les 19:43, Kacper Wirski via samba ha escrit: > >> I just want to add, that this week I introduced first windows 11 24h2 >> to AD - everything up to 23h2 is working fine - but windows 11 24h2 >> has some strange kerberos-related issues. >> >> I added pc to domain successfully and can log in, but I can't access >> sysvol and netlogon and gpupdate fails. Automatic DNS update from the >> workstation fails with insuf...