Re: [Samba] speed of samba vs Windows

2012-06-28 Thread Cain, Marc

On Jun 28, 2012, at 7:02 AM, Todor Fassl wrote:

 Is there any reason to believe that a samba server would be slower when 
 serving up roaming profiles than a real Windows server? I know roaming 
 profiles are slow by nature and that there are things you can do to help like 
 configuring ffolder redirection. But all else being equal, how would a samba 
 server compare to a Windows server when it comes to speed specifically with 
 respect to roaming profiles?
 
 Our Windows guy insists samba is slow but I don't believe it.  He claims that 
 when you load a roamng profile, Windows downloads only files that have 
 changed and samba downloads everything. But he doesn't know anything about 
 samba and I don't know where he got that from.

True roaming profiles upload and download the entire profile at every logon, 
logoff.  Doesn't matter what server is on the other end.  If folder redirectoin 
is not implemented the profile grows over time and this copying of the entire 
profile will slow down logons over time -- whether you're using a Windows 
server or a Samba server.

If one sets GroupPolicy to only create local profiles for domain users it's 
possible that the local Windows box will do an rsync-ish changes only, though 
I've not tested this.  It's also possible to implement local profiles with 
folder redirection and no roaming component which will never copy the 
NTUSER.DAT and other files at logon/logoff.

It's important to remember that the server is not doing any of the roaming 
profile work other than informing the client of the user's profile folder 
location (though in the case of Active Directory -- delivering additional 
GroupPolicy behaviors). The client's copy of Windows is doing the roaming work 
and it's behavior is determined by local Group Policy settings.

The only way to really control the amount of data going up and down for true 
roaming profiles is implementing folder redirection where at least the AppData 
folder is redirected to a location on the server outside of the roaming profile 
store -- typically to a folder in the user's home directory.

The Samba HowTo has some very good basic info on how to implement folder 
redirection.  Works with Windows XP and Windows 7.  You can also search this 
list for folder redirection using Samba and Windows 7.

http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/ProfileMgmt.html


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Windows 7 often creates new user profiles

2012-05-17 Thread Cain, Marc

On May 14, 2012, at 5:54 AM, Donny Brooks wrote:

 On Saturday, May 12, 2012 04:48 PM CDT, Christian Meier ch2...@arcor.de 
 wrote: 
 


 We too have seen this behavior but only on one of our pc's. It is not the 
 server side that gets the rename as someone else mentioned  but rather on the 
 PC side. If you look in C:\Users\ you will see:
 
 username
 username.DOMAIN
 username.DOMAIN.000
 username.DOMAIN.001
 username.DOMAIN.002
 etc
 
 The profile seems to be pulling/writing to the server just fine. We have 
 tried removing all the entries in the registry for all users on the machine 
 except the local administrator one, removing/rejoining the pc to the domain, 
 and double checking permissions all to no avail. It will do right for a few 
 weeks and then it will start doing the multiple profiles again. To this date 
 we have not found a way to fix the issue. 

  
These local profiles are the result of the previous profile not fully unloading 
at logout.  It is a Windows problem, not a Samba problem.

There are many causes for this behavior.  In Windows 7 the typical reason is a 
service or process has locked a resource in the profile and is not releasing it 
at logoff.  Try looking in the profile to see what files/folders may be being 
left on the drive.  You can also try logging in as local administrator, 
disabling all services and startup processes that are non-standard and then 
enabling them one at a time to see if you can isolate the problem.  

We had this issue and turned out to be the Altiris DAgent.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Windows 7 often creates new user profiles

2012-05-17 Thread Cain, Marc

On May 12, 2012, at 1:12 PM, steve wrote:

 On 05/12/2012 09:57 PM, Jorell wrote:
 On 5/12/2012 8:54 AM, John Drescher wrote:
 On Sat, May 12, 2012 at 11:47 AM, Christian Meierch2...@arcor.de  wrote:
 Hi,
 
 we're using Samba 3.5.6 (Debian).
 
 Windows 7 clients often create new roaming profiles for existing users for 
 no identifiable reason. Windows XP isn't affected. the end.
 
 Is this a known problem?
 
 
 I have never ever had that happen in the 2+ years I had windows 7
 machines on my samba based domain.
 
 John
 
 When Windows 7 creates the new profile is it creating %USERNAME%.V2?
 
 Hi
 Yes. That's what we observe. xp creates %USERNAME% and win7 creates the same 
 but with .V2 at the end. They are _extremely_ permission sensitive folders. 
 win7 seems unable to load the profile from the server if the hive at 
 NTUSER.DAT has been changed, e.g. even simply moved from one place to 
 another. One workaround we use is to put the profile in the home folder of 
 the user. Then it always seem to work.
 HTH
 Steve

The creation of a new profile with a .V2 extension is is a Windows 7 feature 
that prevents Windows 7 from overwriting incompatible settings in earlier 
Windows profile versions.

Windows user profile folders need full permissions for the user and ownership 
by user.




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] windows 7 roaming profiles

2012-03-30 Thread Cain, Marc
 Hi
 I'm coming to back to Windows after a 12 year absence so please forgive my 
 questions.
 
 Just coming back to my original post for a moment,
 
 e.g.
 I create a file and store it on my desktop.
 
 roaming profile
 It is stored locally until I log off whereupon it is synced to the server.
 
 desktop folder redirected
 The file is only ever stored at the destination. Edits are instantaneously 
 synced, not only when I log off.
 
 Is this correct?

Yes.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba PDC with Windows 7 support request

2012-02-16 Thread Cain, Marc
Have you tried these settings (posted here about a year ago)?


When the following local GPO is left in its default setting Samba domain logons 
are delayed for 30 seconds: Computer Configuration\Administrative 
Templates\System\User Profiles\Set maximum wait time for the network if the 
user has a roaming user profile or remote home directory.  

Enable this and set the value to 0 to work around this timeout.  The timeout 
does not occur when logging into an Active Directory PDC running Server 2008 
R2.  I have not tested this with w2k8 R2 client.

In addition, if the user's desktop is set to a solid background color logons of 
any kind (local, AD, samba) will be delayed by 30 seconds.  Set the background 
to any .jpg image or apply Microsoft's hotfix to work around this issue.  This 
is a cumulative timeout; that is, if the above timeout is in affect and the 
solid background color timeout is also in affect the delay is 60 seconds.

I also experienced a 30 second timeout when I set the local GPO to Run logon 
scripts synchronously.  This problem has inexplicably vanished and I can't 
replicate it though I don't see it listed in any Windows 7 updates.  Might have 
been happening to me with Windows 7 PRO.  I'll check that if anyone is 
interested. The fix was to apply an old Vista reg setting.  Can be Googled as 
Vista Run logon scripts synchronously.

Marc Cain

On Jan 31, 2012, at 11:45 AM, Jiří Procházka wrote:

 Dear Samba support team,
 
 I have a question on Samba 3.5.8 please, which is not solved by searching
 the forums. I tried all suggested solutions, but nothing take effect.
 
 
 
 Situation: 
 
 - small public school
 
 - We have Ubuntu Server 11.04 64-bit
 
 - Samba 3.5.8 as PDC
 
 - Windows XP and Windows 7 Pro SP1 clients
 
 - On Windows XP everything works. Login is quick and reliable there.
 
 
 
 Problem:
 
 But our problem is with Windows 7 domain clients, where login and logout
 takes more than 1,5 minute with clear user profile. Yes, we have only 100
 Mbit LAN, but why XP can operate so much faster? We are using Aero with
 background images, but logon locally is very fast. Only using travel
 profiles is very slow.
 
 
 
 I have tried:
 
 -  Disable IPv6, 
 
 -  Disabled UAC
 
 -  set policies time to wait on server, 
 
 -  I applied all performace recommended settings suggested at
 samba.org for Windows 7 (http://wiki.samba.org/index.php/Windows7)
 
 
 
 
 
 
 
 Very similar post I have found here:
 
 https://bugzilla.samba.org/show_bug.cgi?id=8300
 
 
 
 Domain users experience a slow login performance on Windows 7 clients that
 are
 joined into a samba domain (Samba version 3.5.4). The Windows 7 client was
 joined successfully into the domain with the Windows 7 registry settings
 adjusted according to http://wiki.samba.org/index.php/Windows7
 (DomainCompatibilityMode = 0 and DNSNameResolutionRequired = 0).
 
 
 
 
 
 We need solve this bug, in other case we can’t use Samba as PDC and we must
 change the platform. Please put this request on free support boards or send
 me an offer for paid support.
 
 
 
 Can help adding this to GLOBAL section?
 
   domain master = yes
 
   local master = yes
 
   preffered master = yes
 
   os level = 64
 
 
 
 
 
 Thanks a lot,
 
 I hope I’m not disturbing main Samba developers,
 
 
 
 With best regards,
 
 Jiri Prochazka
 
 Teacher from Waldorf high school in Prague
 
 
 
 
 
 Czech and English only :-)
 
 smb.conf-- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Problem by using Samba 3 with Default User.v2 Profiles / Windows 7

2010-12-15 Thread Cain, Marc

On Dec 15, 2010, at 10:18 AM, Benjamin Dombrowsky wrote:

 Hello Samba-Team,
 
  
 
 I've a big problem by using Windows 7 and default user profiles.
 
 I make a default user profile, named: Default User.v

The correct path is NETLOGON\Default User.v2

see:


http://support.microsoft.com/kb/973289
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Default Profile for Windows 7

2010-11-09 Thread Cain, Marc
Should be:  Default User.v2 

See: http://support.microsoft.com/kb/973289




On Nov 9, 2010, at 9:08 AM, Marcio Merlone wrote:

 Hi all,
 
 I have just deployed a samba 2:3.4.7~dfsg-1ubuntu3.2 so I can support Windows 
 7 on my network. I have a ProfileSambaDefault folder on my netlogon share 
 with a pre-made profile for windows XP. So, I just guessed and tried a 
 ProfileSambaDefault.V2 folder but no luck.
 
 How is it made for Windows 7? I searched on google but could not find 
 anything useful.
 
 Thanks in advance and best regards.
 
 -- 
 *Marcio Merlone*
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Fwd: Windows 7 problems

2010-11-09 Thread Cain, Marc
On Nov 9, 2010, at 7:29 AM, henri wrote:

 Hi, 
 
 I have upgraded to Samba 3.5.6 for Windows 7 Pro compatibility. 
 I am in a test phase to evaluate the behavior of Windows 7 in a Samba PDC
 environment. 
 I have one Samba server as a PDC with tdbsam backend (no LDAP at all), and I
 applied the reg and patch as described in the wiki. 
 
 I have a couple of questions related to Windows 7 : 
 
 - opening a domain session on the Win7 client takes a long time. At least 40
 seconds, while there is no delay on XP client. Is it a kown problem ? A bug
 ? What can be done to avoid such a delay ? 

There are a least two timeouts that I've found that can affect domain logons

-- Roaming profile logon timeout: When a user with a roaming profile 
attempts to logon to a Samba domain Windows will display the Welcome screen for 
30 seconds before enabling the user's desktop. This bug does not affect Active 
Directory logons. Setting the GPO below to 0 seconds will work around this 
timeout.

\\Computer Configuration\Administrative Templates\System\Set maximum 
wait time for the network if a user has a roaming user profile or remote home 
directory
Set to: 0

-- Synchronous Logon script timeout: When the local Computer GPO is set 
to Run logon scripts synchronously Windows 7 displays the Welcome screen for 
30 seconds before enabling the user's desktop. NOTE: this bug may only be 
extant in Windows 7 Professional, not Enterprise or may have been addressed in 
service pack. Creating the following REG_DWORD registry key will work around 
this bug:


\\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DelayedDesktopSwitchTimeout
Set to: 0001

There is also the solid color background bug (again, it may have since been 
addressed in a service pack): Change the background color to any .jpg image.


 - in smb.conf , the %a value for Windows 7 is Vista , right ?

Don't know.  The %a switch hasn't worked in our shop for some time.  Windows 7 
will tag the profile folder listed with a .V2 extension or will expect a .V2 
extension.

 - NT Default Profile no longer works with Windows 7 . I guess it is normal ,
 but is there a workaround ? 

Default User profiles do work with Windows 7 and Samba.  See the article for 
Windows 7 default profile details:

http://support.microsoft.com/kb/973289

 - Same question for NT policies : I assume it is normal that windows 7 does
 not support NTconfig.pol files any longer. Nevertheless, is there a way to
 get the same features ? For these kind of functionality (having some control
 of user profiles on Win7 clients) , is AD the only and inescapable solution
 ? 

We create a local group policy that we copy from the server via logon script at 
logon time.  Works great for bot WinXP and Windows 7.

 For my needs (200 domain users), NT domain was a sufficient solution and
 worked perfectly with XP. I am affraid that with Windows 7, I will have to
 move to something much more and unnecessarily complex :-( . 
 
 Thanks in advance for your help. 
 
 Henri 
 
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Pittfals Windows 7 and samba 3.3.8 (centos 5.5), LDAP BE - joining domain

2010-07-21 Thread Cain, Marc
Hi Gotz,

See the following link for proper Windows 7 settings:

http://wiki.samba.org/index.php/Windows7

Marc





On Jul 21, 2010, at 7:24 AM, Götz Reinicke - IT-Koordinator wrote:

 Hi,
 
 recently I got my samba/ldap/pdc setup up and running with xp clients.
 
 Server: centos 5.5, openldap-2.3.43-12 and samba3x-3.3.8.
 
 
 The new challenge: adding Windows 7 Clients and upgrading to samba 3.3.x
 
 
 I followed a posting from the centos forum (1) which worked so far for
 the samba update breaking nothing for xp.
 
 Than I installed a windows 7 client with the latest patches, changed the
 registry settings (2) and tried a domyin join after a reboot.
 
 But there is only an error that the user is unknown or the password wrong.
 
 AFAIK I'm using the user/password which work with the xp client.
 
 
 What may be the error? Where can I see which user shld be allowed to join?
 
 Thanks for any suggestion and best regards,
 
   Götz
 
 
 
 (1)
 https://www.centos.org/modules/newbb/viewtopic.php?topic_id=27098forum=37
 
 (2) http://wiki.samba.org/index.php/Windows7
 -- 
 Götz Reinicke
 IT-Koordinator
 
 Tel. +49 7141 969 420
 Fax  +49 7141 969 55 420
 E-Mail goetz.reini...@filmakademie.de
 
 Filmakademie Baden-Württemberg GmbH
 Akademiehof 10
 71638 Ludwigsburg
 www.filmakademie.de
 
 Eintragung Amtsgericht Stuttgart HRB 205016
 Vorsitzende des Aufsichtsrats:
 Prof. Dr. Claudia Hübner
 
 Geschäftsführer:
 Prof. Thomas Schadt
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] windows 7 unable to join domain

2010-06-15 Thread Cain, Marc

On Jun 15, 2010, at 1:42 AM, Ciernik Tomas wrote:

 Hi,
 
 I'm currently running Samba3x-3.3.8-0.51 on CentOS 5.5.  I currently have
 many Windows XP clients associated with the domain and behaving correctly.
 However, I am unable to join a Windows 7 PC.  I receive The specified
 network name is no longer available.
 
 I've verified that DNS is configured correctly, and as stated XP machines
 have no problem joining.
 
 Per some googling, I've turned off both:
 
 *- Network security:Minimum session security for NTLM SSP (including RPC
 based) Clients*
 - *Network security:Minimum session security for NTLM SSP (including RPC
 based) Servers*
 
 and changed *Network Security LAN Manager authentication level* to *Send
 LM  NTLM – use NTLMv2 session security if negotiated* in the Local
 Security Policies.

See: http://wiki.samba.org/index.php/Windows7 for the correct settings.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] fixed delay logging onto Samba3.3 from Vista Business

2010-05-27 Thread Cain, Marc
Repost:

samba@lists.samba.org
On May 27, 2010, at 10:41 AM, John Drescher wrote:

 I went through the event logs, and there was one interesting entry.
 Also at 10:05:53 in the system log there was an event 7001 (1101),
 User Logon Notification for Customer Experience Improvement Program.
 Have to run tcpdump on the server and see what happens at corresponding
 times...
 
 Nobody knows what causes these delays???
 
 
 I just was looking for the cause of the 30 second to 1 minute delay
 logging in to windows 7. No solution yet..

When the following local GPO is left in its default setting Samba domain logons 
are delayed for 30 seconds: Computer Configuration\Administrative 
Templates\System\User Profiles\Set maximum wait time for the network if the 
user has a roaming user profile or remote home directory.  

Enable this and set the value to 0 to work around this timeout.  The timeout 
does not occur when logging into an Active Directory PDC running Server 2008 
R2.  I have not tested this with w2k8 R2 client.

In addition, if the user's desktop is set to a solid background color logons of 
any kind (local, AD, samba) will be delayed by 30 seconds. Set the background 
to any .jpg image or apply Microsoft's hotfix to work around this issue.  This 
is a cumulative timeout; that is, if the above timeout is in affect and the 
solid background color timeout is also in affect the delay is 60 seconds.

I also experienced a 30 second timeout when I set the local GPO to Run logon 
scripts synchronously.  This problem has inexplicably vanished and I can't 
replicate it though I don't see it listed in any Windows 7 updates.  Might have 
been happening to me with Windows 7 PRO.  I'll check that if anyone is 
interested.  The fix was to apply an old Vista reg setting.  Can be Googled as 
Vista Run logon scripts synchronously.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Is samba right for me?

2010-03-17 Thread Cain, Marc
As a career move I don't see any reason why you shouldn't / couldn't learn 
both.  Couldn't hurt, would increase your knowledge base and extend your 
resume/options. 

On Mar 17, 2010, at 1:08 PM, Chris wrote:

 I am currently a college student looking for ways to prepare myself for any
 Server Administration job once I get out of college.
 I've been going back and worth between Freenode IRC channels (#linux and
 ##windows) trying to decide what to learn.
 On one hand, we have Windows Server 2008 R2, people in #linux keep on
 telling me to just go ahead and use it because samba can't provide
 everything Server 2008 R2 does.
 The more and more I read up on Samba (especially Samba4; which I realize
 isn't going to be released stable for a while) it feels like it
 *can*provide all the features Server 2008 R2 does.
 Can you do a bit of myth debunking for me?
 
 Would you suggest samba for managing Windows clients (any other tools you
 can recommend in addition?)
 I really would like to use Samba + Linux because of the cost of ownership
 and the open-source community, I just want to make sure it's up to par with
 Server 2008 R2s offerings.
 
 Thank you so much for your time!
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] deploy policies for win7 ?

2010-02-26 Thread Cain, Marc
We deliver Local GPOs by copying from client to server share then back to local 
System32 folder on logon, applying a gpupdate /force after the copy. This 
works pretty well with both WinXP and Windows 7 for any policies that are 
applied immediately and that don't require a restart.  Have not yet looked at 
secpol in Win7 though.


On Feb 26, 2010, at 1:43 PM, peter pilsl wrote:

 
 hello,
 
 I skipped Vista and was using WinXP on all clients until now. I deployed my 
 policies using a file ntconfig.pol in the [netlogon]-share, but this does not 
 work with win7 any more.
 
 How do you deploy your policies with Vista or Win7 ?
 
 I use recent samba 3.4.6 and hope there is some way.  Every experience 
 welcome. I think thousands of readers here might have similar problems 
 somehow :)
 
 Even OT-tips are welcome (ie: clone local policies on win7-client to import 
 it on a different machine) if there is no way to do it with samba3. And I 
 dont dare to use samba4 yet ...
 
 thnx,
 peter
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Problem with Windows 7 and roaming profiles

2010-02-22 Thread Cain, Marc
Hi Andre,

The behavior you are seeing is particularly indicative of Windows mandatory 
profile behaviors where the user's ntuser.dat has been renamed on the samba 
profile share to ntuser.man.  I'm not saying this is the case but it sure 
sounds like it.

Regards,

Marc Cain


On Feb 22, 2010, at 6:57 AM, André Egerer wrote:

 Hello together,
 
 we try to setup a samba domain controller with LDAP and roaming profiles for 
 Win7-Clients.
 Everything looks fine last Friday but today the clients did not longer save 
 changes to the profiles. There is no error in samba log and also no in the 
 windows log. If I delete a profile from a client it is loaded correctly at 
 next logon, but the changes are not saved at logout.
 
 Windows XP profiles are working well all the time...
 
 Any ideas?
 
 OS: Debian Etch
 Kernel: 2.6.24
 Samba: 3.4.5
 Disk is mounted with user_xattr
 
 
 [profiles]
path = /home/samba/profiles
comment = roaming profiles
create mask = 0600
directory mask = 0700
browsable = no
writable = yes
read only = no
store dos attributes = yes
 
 
 
 ---
 André Egerer
 Diplom-Wirtschaftsinformatiker
 Technischer Leiter SmartCom Center
 
 Quintec GmbH
 Siemensstr. 2-4
 90766 Fürth
 Tel: 0911 7667014
 Fax.: 0911 7667015
 
 www.quintec.de
 QUINTEC Ges. für Datentechnik mbH
 Geschäftsführung: Konrad Trosky, Firmensitz Overath, Amtsgericht Köln, HR B 
 46046
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Windows 7 and Samba - still unsolved ! -- Re: Problem with Win 7 and Samba 3.3.10 PDC (Trust Relationship Between Workstation and Domain Failed)

2010-02-17 Thread Cain, Marc
Following these directions work.  I recommend the latest version of Samba 
3.4.x.  Be sure to read the section on Windows registry entries.

http://wiki.samba.org/index.php/Windows7


On Feb 17, 2010, at 3:39 AM, Denis BUCHER wrote:

 Dear all,
 
 I'm still without solution to make Windows 7 work with Samba...
 
 Does someone knows what we could do or why it doesn't work ?
 
 Thanks a lot for any help !
 
 It would be greatly appreciated because I'm really left without solution as 
 we tried everything suggested on the web but Windows still doesn't want to 
 connect to samba ?
 
 Denis
 
 
 Le 15.02.2010 13:23, Denis BUCHER a écrit :
 Dear all,
 
 We are trying to install a new Samba server to replace the old one and
 support Windows 7 clients. But it doesn't work !
 
 When we try to register a machine into th domain, it seems to be
 accepted by the client but we find these messages in samba logs :
 
 rpc_server/srv_netlog_nt.c:_netr_ServerAuthenticate2(555)
 _netr_ServerAuthenticate2: netlogon_creds_server_check failed.
 Rejecting auth request from client PC0217 machine account PC0217$
 
 Anyway as user it is possible to login, but not to login into Windows
 with the same user.
 
 The Windows 7 error message is La relation d'approbation entre cette
 station de travail et le domaine principal a échoué : Trust
 Relationship Between Workstation and Domain Failed
 
 And the samba message is the same as stated before (Rejecting auth
 request from client PC0217)
 
 We are using samba 3.3.10 from sernet.de
 
 More details :
 
 # rpm -qa | grep smb
 libsmbclient0-3.3.10-40.suse111
 libsmbios2-2.0.2-11.6
 libsmbclient-devel-3.3.10-40.suse111
 
 # rpm -qa | grep samb
 samba3-winbind-32bit-3.3.10-40.suse111
 samba3-winbind-3.3.10-40.suse111
 samba3-client-3.3.10-40.suse111
 samba3-utils-3.3.10-40.suse111
 samba3-doc-3.3.10-40.suse111
 samba3-3.3.10-40.suse111
 samba3-cifsmount-3.3.10-40.suse111
 
 # rpm -qi samba3-doc-3.3.10-40.suse111
 Name : samba3-doc Relocations: (not relocatable)
 Version : 3.3.10 Vendor: Service Network GmbH, Goettingen
 Release : 40.suse111 Build Date: Thu Jan 14 16:17:39 2010
 Install Date: Thu Feb 4 21:52:36 2010 Build Host: sam
 Group : Productivity/Networking/Samba Source RPM:
 samba3-3.3.10-40.suse111.src.rpm
 Size : 25940261 License: GPL v3 or later
 Signature : DSA/SHA1, Thu Jan 14 16:30:42 2010, Key ID d9921b1cf4428b1a
 Packager : SerNet Samba Team sa...@sernet.de
 URL : http://www.samba.org
 Summary : SerNet Samba documentation
 Description :
 This package contains additional Samba documentation
 Distribution: openSUSE 11.1 (x86_64)
 
 Any help would be greatly appreciated because we tryed everything we
 could and we found online :-)
 
 Thanks a lot
 
 Denis
 
 
 Denis Bucher
 
 -- 
 
 Denis Bucher   Horus Digital Solutions sàrl  Each problem has a solution
 ___
   Tél. +41-22-8000625 Fax: +41-22-8000622  www.hsolutions.ch
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Windows 7 domain logon timeouts was Re: Domain login delays w2k8 R2

2010-02-04 Thread Cain, Marc
Samba 3.4.3 (ldap backend)
Windows 7 Enterprise

I've experienced the identical symptoms with Windows 7 ENT and found this 
workaround.

When the following local GPO is left in its default setting Samba domain logons 
are delayed for 30 seconds: Computer Configuration\Administrative 
Templates\System\User Profiles\Set maximum wait time for the network if the 
user has a roaming user profile or remote home directory.  

Enable this and set the value to 0 to work around this timeout.  The timeout 
does not occur when logging into an Active Directory PDC running Server 2008 
R2.  I have not tested this with w2k8 R2 client.

In addition, if the user's desktop is set to a solid background color logons of 
any kind (local, AD, samba) will be delayed by 30 seconds.  Set the background 
to any .jpg image or apply Microsoft's hotfix to work around this issue.  This 
is a cumulative timeout; that is, if the above timeout is in affect and the 
solid background color timeout is also in affect the delay is 60 seconds.

I also experienced a 30 second timeout when I set the local GPO to Run logon 
scripts synchronously.  This problem has inexplicably vanished and I can't 
replicate it though I don't see it listed in any Windows 7 updates.  Might have 
been happening to me with Windows 7 PRO.  I'll check that if anyone is 
interested.  The fix was to apply an old Vista reg setting.  Can be Googled as 
Vista Run logon scripts synchronously.

Marc Cain

On Feb 4, 2010, at 3:33 AM, Åke Holmlund wrote:

 Not much. I attached a screendump from Wireshark. This capture is made
 on the w2k8 machine. The traffic shown is sent to/from the ethernet
 address of the w2k8 machine. Remote Desktop traffic is excluded
 (the machine is used as a terminal server).
 
 Regards,
 Åke Holmlund
 
 --On 3 februari 2010 14.08.49 -0800 Jeremy Allison j...@samba.org wrote:
 
 On Wed, Feb 03, 2010 at 03:19:36PM +0100, Åke Holmlund wrote:
 Hello!
 
 From what I can see, there is no DNS-traffic around the time of the
 gaps and the DNS-activity I can see in onther places seems ok. There
 is almost no network traffic and no CPU activity during the gaps so
 it looks like some kind of timeout issue.
 
 It may be of interest that, for the moment, IPv6 is beeing used.
 Sometimes we also have quite a long delay if we click on the View
 computers and devices link in the Network and Sharing Center.
 
 Is there any other traffic coming out of the client box around the delay
 time ?
 
 Jeremy.
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba