similar to: Unable to add Windows 2K/XP Pro clients to Samba domain

Sorry, I missed some relevant part of the logs after the suggested changes: Kerberos: AS-REQ user2 at MYDOMAIN from ipv4:192.168.44.56:2080 for krbtgt/MYDOMAIN at MYDOMAIN [2017/04/21 12:47:37.526742, 3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: Client sent patypes: encrypted-timestamp, 128 [2017/04/21 12:47:37.526772, 3]

On Fri, 21 Apr 2017 10:39:58 -0400 Eleuterio Contracampo via samba <samba at lists.samba.org> wrote: > Hello everyone, > > First time with Samba 4. > I've got it running mostly (with Windows 7 clients, everything works > like a charm.), but I-m struggling with an issue that is driving me > nuts (spent countless hours trying out stuff and googleing without > luck):

Thank you Rowland!! Sorry about my ignorance. I guess I tried many different things and polluted the smb.conf file. I've removed every single line you mentioned off my smb.conf. Still the problem persists: MYDOMAIN\Administrator (S-1-5-21-1965676298-842383976-2353361141-500) is changing password of user2 at MYDOMAIN.org.ar [2017/04/21 12:05:42.233899, 3]

Hello everyone, First time with Samba 4. I've got it running mostly (with Windows 7 clients, everything works like a charm.), but I-m struggling with an issue that is driving me nuts (spent countless hours trying out stuff and googleing without luck): When users log in from Win XP Pro terminals, and are forced to change initially assigned passwords, they get an error (1728: error in RCP

Hi, I've implemented an LDAPv2 server with samba support but find that smbpasswd does not work as expected. I am using berkeley db-4.1.25_p1, openldap-2.1.26, and samba-3.0.2a. Anybody have any clue why I get the following error when attempting to add samba support for a user (specifically a DB_KEYEXIST error). I get the following output (excerpt) from smbpasswd: ldapsam_add_sam_account:

Thank you once again! I'll research that link, and let everyone interested know about the results. EC On Fri, Apr 21, 2017 at 12:50 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Fri, 21 Apr 2017 12:00:59 -0400 > Eleuterio Contracampo via samba <samba at lists.samba.org> wrote: > > > [2017/04/21 12:47:55.219297, 0] > >

I think the "client ip signing options" don't matter on the domain controller, since the domain controller is not functioning as a server. (If this was a samba member server, then it would matter.) You MAY want to try server signing = no On 04/25/17 12:14, Eleuterio Contracampo via samba wrote: > Just a follow-up. Still, no resolution. I've tried different

On Fri, 21 Apr 2017 12:00:59 -0400 Eleuterio Contracampo via samba <samba at lists.samba.org> wrote: > [2017/04/21 12:47:55.219297, 0] > ../auth/gensec/gensec.c:257(gensec_verify_dcerpc_auth_level) > > Did not manage to negotiate mandetory feature SIGN for dcerpc > auth_level 6 > I think you may be running into an artefact of the badlock patches, for which Win7 will

Just a follow-up. Still, no resolution. I've tried different combinations with "client ipc signing" without luck. A traffic dump shows the problem as: i) windows XP client sends a DCE/RPC SAMR command GetDomPwInfo ii) samba DC responds with DCE/RPC Fault nca_proto_error I've also tried fiddling with Local Security Policy registry values at the Win XP machine, but got nothing

Hi, I have an small network with about 50 Clients. I use Samba4.0alpha14 als PDC and Samba3.5.4 als File- an Printserver on different (virtual) machines. On both machines a bind-dnsserver is running (master and slave). The Samba3-Machine is configured as local master browser and as a domainmember of the samba4-machine. Sometimes WinXP Clients loose connection to the Samba3-Fileserver, connection

Does anyone know how to fix this? **** The following error occurred attempting to join the domain MYDOMAIN: No mapping between account names and security IDs was done. **** I'm migrating from samba2.2.8a to Samba3, with samba2 I didn?t have this problem, and is almost the same conf. This is my smb.conf [global] workgroup = MYGROUP server string = Samba Server

Hi, my name is Gonzalo, I have the following problem: I have a Samba 2.2.8a configured as a PDC server?running on Solaris 9 and pointing to a users database acceded by LDAP (SunOne Directory Server 5.2). Everything works very well while I register hosts with W2000 Proffesional in the Domain. ? The problem appears when I want to join the domain with WXP or W2K AS?hosts (I didn't? prove

Please!!! does anyone know what's going on? I?really need to solve this problem and don't know how and didn't find bug report that matched with my description. ? ----- Original Message?----- From?: Gonzalo Britti [mailto:gonzalo.britti@idea-factory.net] Sent?: S?bado, 11 de Septiembre de 2004 04:24 p.m. To?: 'samba@lists.samba.org' Subject?: Samba(PDC) - LDAP problem only with

On Wed, 25 Jul 2018 12:14:30 -0400 Gaiseric Vandal <gaiseric.vandal at gmail.com> wrote: > My partial smb.conf and nsswitch.conf is as follows.  FYI the user in > question is able to access directories via ssh so the permissions and > group membership seems correct - at least on the unix level. > > > root at weirdserver:~# getent passwd | grep myname >

I'm running Samba 3.0.1 on a Linux 2.6.1 kernel and I'm seeing a problem of the XP client missing an ack, the server having to resend, and then the process repeats. This _ONLY_ happens when touching files in a directory, such as clicking on an icon, then clicking on another one causes this problem. If I drag the file and copy it across, I don't see the problem. Here's a

Hi, I am migrating a ubuntu server to a centos one. The ubuntu server is working and new server even tough it's running I can't join the domain from a new machine. The new server is not on production so the client (win xp) is connected via a crossover cable. The error message on the client is something like user/password invalid (I am using the root user/password of the server). The

Hi, My config: samba 2.2.11 on linux 2.4.26, nss_ldap 215, glibc 2.2.3. Clients: XP Pro SP1. It's a domain style setup with a Ldap server over ssl. The server is Sun DS 5.2. Users complain that sometimes (and not on all computers) they are unable to log in after some time (several hours) has passed since they were last accessed. They have to reboot them and the problem disappears. I

I'm seeing inconsistent behavior with XP pro clients on a Samba PDC. In one case, (a virtual machine) it appears to log in and everything looks great. In another ( a slower PC ), the PC rejects the user login ( even with the registry hack ), and in a third, the PC takes a long time to "synchronize" not just the user that logged in that time, but all users that have logged in

hi, been running samba 2.2.3 (debian stable) and using it with windows 98 clients no problem. domain logins, logon.bat and config.pol stuff all working. the customer now wants to add XP Pro PC's to the domain. now, after following the instructions in 'Using Samba' I have set up an XP PC to log on to a test server. once the PC has been added to the domain the users can log in no

I found this from http://charon.minilab.bdeb.qc.ca/anonym/nt/2000/ads/TTGW2KGP_Vol1through4.pdf I would like to figure out how to do this gpedit.msc+AD+gpc+gpt magic for win2k/xp with linux+samba(2.2/3.0/tng)+openldap and is it possible at all? Thanks. Although GPOs provide significantly more policy features than NT 4.0 System Policy provides, GPOs are stored and processed differently than NT