2011/1/14 TAKAHASHI Motonobu <mo...@monyo.com>: > 2011/1/13 Robert Fitzpatrick <li...@webtent.net>: >>> If your Samba's version is 3.3.2 - 3.3.4, then the additional settings >>> below are needed: >>> >>> HKLM\System\CCS\Services\Netlogon\Parameters >>> DWORD RequireSignOrSeal = 0 >>> DWORD RequireStrongKey = 0 >>> >> >> I am using Samba 3.5.6 and the registry entries above are as you show >> currently. > > As I mentioned, > > ----- > If your Samba's version is 3.3.5 - and the registries above are set, > remove them and try again. > ----- > > You must set these 2 entries below: > > ----- > HKLM\System\CCS\Services\LanmanWorkstation\Parameters > DWORD DomainCompatibilityMode = 1 > DWORD DNSNameResolutionRequired = 0 > ----- > > You must not set these 2 entries below: > > ----- > DWORD RequireSignOrSeal = 0 > DWORD RequireStrongKey = 0 > ----- > > In my knowledge, your error messages: > > [2011/01/13 09:24:48.031223, 0] > rpc_server/srv_netlog_nt.c:714(_netr_ServerAuthenticate3) > _netr_ServerAuthenticate3: netlogon_creds_server_check failed. > Rejecting auth request from client COLUMBUS-LAPTOP machine account > COLUMBUS-LAPTOP$ > > occurs if you do not correctly set these 4 entries. > If you still have problem, I recommend to examine with simple settings > (not to use LDAP) like: > > ----- > [global] > workgroup = WEBTENT > domain logons = yes > add machine script = useradd %u > > [homes] > writeable = yes > browseable = no > ----- > > If your Windows 7 can join to Samba domain with the settings above, at > least you could know that > Windows 7 registries are correctly set.
Sorry, under FreeBSD, use ----- add machine script = /usr/sbin/pw useradd %u ----- instead of ----- add machine script = useradd %u ----- --- TAKAHASHI Motonobu <mo...@samba.gr.jp> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba