[Samba] Rejecting auth request from client xxx machine account, win7,
Hi All, I have a strange problem with my SAMBA server as PDC. I have some win7 machines joined to my domain but when I try to access some folders on the server I get messages like these: Authentication for user [machine$] - [machine$] FAILED with error NT_STATUS_WRONG_PASSWORD [2012/01/17 11:34:52, 0] rpc_server/srv_netlog_nt.c:_netr_ServerAuthenticate2(555) _netr_ServerAuthenticate2: netlogon_creds_server_check failed. Rejecting auth request from client machine machine account machine$ I have added the machine to the LDAP, I have only the problem with the win7 machines. I think the problem has begun some days ago. Before It works fine (win7 update perhaps?) I have checked this url: http://wiki.samba.org/index.php/Windows7 But it does not solve the problem. I have samba-3.3.7-1 installed. I have not idea which can be the problem, any help from there? Thanks in advance ESG -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Rejecting auth request from client xxx machine account, win7,
2012/1/17 John Drescher dresche...@gmail.com On Tue, Jan 17, 2012 at 5:59 AM, ESGLinux esggru...@gmail.com wrote: Hi All, I have a strange problem with my SAMBA server as PDC. I have some win7 machines joined to my domain but when I try to access some folders on the server I get messages like these: Authentication for user [machine$] - [machine$] FAILED with error NT_STATUS_WRONG_PASSWORD [2012/01/17 11:34:52, 0] rpc_server/srv_netlog_nt.c:_netr_ServerAuthenticate2(555) _netr_ServerAuthenticate2: netlogon_creds_server_check failed. Rejecting auth request from client machine machine account machine$ I have added the machine to the LDAP, I have only the problem with the win7 machines. I think the problem has begun some days ago. Before It works fine (win7 update perhaps?) I have checked this url: http://wiki.samba.org/index.php/Windows7 But it does not solve the problem. I have samba-3.3.7-1 installed. I have not idea which can be the problem, any help from there? Thanks in advance Have the windows 7 machines been in the domain for more than 30 days? If so the machine password update can cause this. I believe if no user is logged in and a machine password update happens from the client, samba will not accept the change. At work I had to disable machine password updates on all windows 7 machines to avoid this. http://lists.samba.org/archive/samba/2010-October/158590.html Hi John, I think the problem is just this. I have logged out from the domain an rejoined the machine and now it works, I have changed this in the registry: Windows 7 Registry changes to avoid a 30 days password change problem Client-Registry: [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] DisablePasswordChange=dword:0001 Now it´s working, and I hope that after 30 days it will continue working ;-) Thank you very much for your help, ESG John John -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] samba PDC disabling roaming profiles
Hi all, I have tested it with several users (with winxp and win7) and it works fine. Hope that helps anyone who has this problem, Greetings, ESG 2011/10/11 ESGLinux esggru...@gmail.com Hi again, I have found this: http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/ProfileMgmt.html#id2660484 In smb.conf Affect the following settings and ALL clients will be forced to use a local profile: logon home = http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/smb.conf.5.html#LOGONHOMEand logon path = http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/smb.conf.5.html#LOGONPATH The arguments to these parameters must be left blank. It is necessary to include the = sign to specifically assign the empty value. Anyone can confirm that this is right? can I have problems with existing profiles? Thanks, ESG 2011/10/11 ESGLinux esggru...@gmail.com Hi All, I recently have updated my samba server to 3.3.7-1. I use this server as PDC of my Windows Domain, The problem is that the profiles of the server are saved in the home dir of the users. The users have a lot of GigaB so I want to disable this feature. I have read ( http://www.linuxquestions.org/questions/linux-general-1/samba-pdc-without-roaming-profiles-2-a-47604/, for example) that this feature is disabled in the client side but I have a lof of them. So my question is if is there any way to disable it on the server side, Thanks in advance ESG -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] samba PDC disabling roaming profiles
Hi All, I recently have updated my samba server to 3.3.7-1. I use this server as PDC of my Windows Domain, The problem is that the profiles of the server are saved in the home dir of the users. The users have a lot of GigaB so I want to disable this feature. I have read ( http://www.linuxquestions.org/questions/linux-general-1/samba-pdc-without-roaming-profiles-2-a-47604/, for example) that this feature is disabled in the client side but I have a lof of them. So my question is if is there any way to disable it on the server side, Thanks in advance ESG -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] samba PDC disabling roaming profiles
Hi again, I have found this: http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/ProfileMgmt.html#id2660484 In smb.conf Affect the following settings and ALL clients will be forced to use a local profile: logon home = http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/smb.conf.5.html#LOGONHOMEand logon path = http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/smb.conf.5.html#LOGONPATH The arguments to these parameters must be left blank. It is necessary to include the = sign to specifically assign the empty value. Anyone can confirm that this is right? can I have problems with existing profiles? Thanks, ESG 2011/10/11 ESGLinux esggru...@gmail.com Hi All, I recently have updated my samba server to 3.3.7-1. I use this server as PDC of my Windows Domain, The problem is that the profiles of the server are saved in the home dir of the users. The users have a lot of GigaB so I want to disable this feature. I have read ( http://www.linuxquestions.org/questions/linux-general-1/samba-pdc-without-roaming-profiles-2-a-47604/, for example) that this feature is disabled in the client side but I have a lof of them. So my question is if is there any way to disable it on the server side, Thanks in advance ESG -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] problem joining a samba PDC from WIN7 clients
Hi All, I have upgraded my samba to samba-3.3.7-1, follow the indications of this web: http://wiki.samba.org/index.php/Windows7 And now I have joined to my Domain with my Win7 machines Thank you all for your help, Greetings ESG 2011/9/15 ESGLinux esggru...@gmail.com Thanks, I´m going to upgrade my samba, I´ll post my results, so stay tuned ;-) ESG 2011/9/15 Daniel Lopes de Carvalho dlcarva...@gmail.com Hi ESG, I'm using Samba 3.5.6 (backport) under Debian Lenny 5.0.8. Yes, Unfortunately, I believe that you need to upgrade Samba to start with windows seven clients... Regards Daniel On Thu, Sep 15, 2011 at 1:29 PM, ESGLinux esggru...@gmail.com wrote: Hi Daniel, thanks for your answer, one question, which samba version are you using? I have read the the min version that you can use is samba 3.3.5. I have 3.0.33 (that comes with RHEL5) Do I need to update my samba? Greetings, ESG 2011/9/15 Daniel Lopes de Carvalho dlcarva...@gmail.com Hi ESG I'm having the same problem as you. I did all the instructions in http://wiki.samba.org/index.php/Windows7, but I can't get success too. After some researches I applied this registry settings: [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManWorkstation\Parameters] DNSNameResolutionRequired=dword: DomainCompatibilityMode=dword:0001 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Netlogon\Parameters] DisablePasswordChange=dword:0001 MaximumPasswordAge=dword:000f4240 RequireSignOrSeal=dword:0001 RequireStrongKey=dword:0001 In the computer account, under LDAP, I disallowed the windows machine to change the password by changing the sambaAcctFlags to WX. I Installed the hotfix KB2171571 (DNS error during joining to the domain) in my windows seven client. After this steps, I'm getting the message Thrust Relationship... yet. But if I wait some minutes, in my syslog will appear the message _net_auth2: creds_server_check failed. Rejecting auth request from client and the windows 7 client log without problem... This behavior is strange, but it is the better I can get at this moment... Regards Daniel On Thu, Sep 15, 2011 at 11:45 AM, ESGLinux esggru...@gmail.com wrote: Hi All, I have running a PDC with samba and with my WinXp clients I have no problem but when I try to join the Domain with a Win7 I get the next error: [2011/09/15 14:15:58, 0] rpc_server/srv_netlog_nt.c:_net_auth_2(478) _net_auth2: creds_server_check failed. Rejecting auth request from client MACHINE-WIN7 machine account MACHINE-WIN7$ [2011/09/15 14:15:58, 0] rpc_server/srv_netlog_nt.c:_net_auth_2(478) In the Win 7 machine I get the message that I have joined the domain, but I can´t get log in. I have followed the instrucctions of several posts: http://wiki.samba.org/index.php/Windows7 http://www.netstorming.com.ar/?bz1qwHMB But I don´t solve the problem, any sugestion? Thanks in advance ESG -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] problem joining a samba PDC from WIN7 clients
Hi All, I have running a PDC with samba and with my WinXp clients I have no problem but when I try to join the Domain with a Win7 I get the next error: [2011/09/15 14:15:58, 0] rpc_server/srv_netlog_nt.c:_net_auth_2(478) _net_auth2: creds_server_check failed. Rejecting auth request from client MACHINE-WIN7 machine account MACHINE-WIN7$ [2011/09/15 14:15:58, 0] rpc_server/srv_netlog_nt.c:_net_auth_2(478) In the Win 7 machine I get the message that I have joined the domain, but I can´t get log in. I have followed the instrucctions of several posts: http://wiki.samba.org/index.php/Windows7 http://www.netstorming.com.ar/?bz1qwHMB But I don´t solve the problem, any sugestion? Thanks in advance ESG -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] problem joining a samba PDC from WIN7 clients
Hi Daniel, thanks for your answer, one question, which samba version are you using? I have read the the min version that you can use is samba 3.3.5. I have 3.0.33 (that comes with RHEL5) Do I need to update my samba? Greetings, ESG 2011/9/15 Daniel Lopes de Carvalho dlcarva...@gmail.com Hi ESG I'm having the same problem as you. I did all the instructions in http://wiki.samba.org/index.php/Windows7, but I can't get success too. After some researches I applied this registry settings: [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManWorkstation\Parameters] DNSNameResolutionRequired=dword: DomainCompatibilityMode=dword:0001 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Netlogon\Parameters] DisablePasswordChange=dword:0001 MaximumPasswordAge=dword:000f4240 RequireSignOrSeal=dword:0001 RequireStrongKey=dword:0001 In the computer account, under LDAP, I disallowed the windows machine to change the password by changing the sambaAcctFlags to WX. I Installed the hotfix KB2171571 (DNS error during joining to the domain) in my windows seven client. After this steps, I'm getting the message Thrust Relationship... yet. But if I wait some minutes, in my syslog will appear the message _net_auth2: creds_server_check failed. Rejecting auth request from client and the windows 7 client log without problem... This behavior is strange, but it is the better I can get at this moment... Regards Daniel On Thu, Sep 15, 2011 at 11:45 AM, ESGLinux esggru...@gmail.com wrote: Hi All, I have running a PDC with samba and with my WinXp clients I have no problem but when I try to join the Domain with a Win7 I get the next error: [2011/09/15 14:15:58, 0] rpc_server/srv_netlog_nt.c:_net_auth_2(478) _net_auth2: creds_server_check failed. Rejecting auth request from client MACHINE-WIN7 machine account MACHINE-WIN7$ [2011/09/15 14:15:58, 0] rpc_server/srv_netlog_nt.c:_net_auth_2(478) In the Win 7 machine I get the message that I have joined the domain, but I can´t get log in. I have followed the instrucctions of several posts: http://wiki.samba.org/index.php/Windows7 http://www.netstorming.com.ar/?bz1qwHMB But I don´t solve the problem, any sugestion? Thanks in advance ESG -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] problem joining a samba PDC from WIN7 clients
Thanks, I´m going to upgrade my samba, I´ll post my results, so stay tuned ;-) ESG 2011/9/15 Daniel Lopes de Carvalho dlcarva...@gmail.com Hi ESG, I'm using Samba 3.5.6 (backport) under Debian Lenny 5.0.8. Yes, Unfortunately, I believe that you need to upgrade Samba to start with windows seven clients... Regards Daniel On Thu, Sep 15, 2011 at 1:29 PM, ESGLinux esggru...@gmail.com wrote: Hi Daniel, thanks for your answer, one question, which samba version are you using? I have read the the min version that you can use is samba 3.3.5. I have 3.0.33 (that comes with RHEL5) Do I need to update my samba? Greetings, ESG 2011/9/15 Daniel Lopes de Carvalho dlcarva...@gmail.com Hi ESG I'm having the same problem as you. I did all the instructions in http://wiki.samba.org/index.php/Windows7, but I can't get success too. After some researches I applied this registry settings: [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManWorkstation\Parameters] DNSNameResolutionRequired=dword: DomainCompatibilityMode=dword:0001 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Netlogon\Parameters] DisablePasswordChange=dword:0001 MaximumPasswordAge=dword:000f4240 RequireSignOrSeal=dword:0001 RequireStrongKey=dword:0001 In the computer account, under LDAP, I disallowed the windows machine to change the password by changing the sambaAcctFlags to WX. I Installed the hotfix KB2171571 (DNS error during joining to the domain) in my windows seven client. After this steps, I'm getting the message Thrust Relationship... yet. But if I wait some minutes, in my syslog will appear the message _net_auth2: creds_server_check failed. Rejecting auth request from client and the windows 7 client log without problem... This behavior is strange, but it is the better I can get at this moment... Regards Daniel On Thu, Sep 15, 2011 at 11:45 AM, ESGLinux esggru...@gmail.com wrote: Hi All, I have running a PDC with samba and with my WinXp clients I have no problem but when I try to join the Domain with a Win7 I get the next error: [2011/09/15 14:15:58, 0] rpc_server/srv_netlog_nt.c:_net_auth_2(478) _net_auth2: creds_server_check failed. Rejecting auth request from client MACHINE-WIN7 machine account MACHINE-WIN7$ [2011/09/15 14:15:58, 0] rpc_server/srv_netlog_nt.c:_net_auth_2(478) In the Win 7 machine I get the message that I have joined the domain, but I can´t get log in. I have followed the instrucctions of several posts: http://wiki.samba.org/index.php/Windows7 http://www.netstorming.com.ar/?bz1qwHMB But I don´t solve the problem, any sugestion? Thanks in advance ESG -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
