Topic: joining samba domain: access denied

[guestHH]

Anybody knows the reason for this message while trying to joint a domain with a XP workstation (with registry adjustments)?

SME 5.5 with Darrel's samba upgrade.

Thanks,
guestHH

[Ulises Ruiz]

Hello RequestedDeletion, I have i problem too!, with WinXP Workstation!,

[Greg]

I found the solution here:
http://slakaz.org/articles/6.html

It is as follows:
-----------------------

Problem: Windows XP professional will join a domain running samba, but once rebooted, will not log into the domain.
NOTE: This same scenario will occur when joining a Windows NT server domain running service pack 3 or below.

Windows Error Message:Windows cannot connect to the domain either because the domain controller is down or otherwise unavailable or because your computer account was not found.

Samba Error Message:
[2002/04/22 11:46:21, 0] rpc_server/srv_netlog_nt.c:get_md4pw(176)
get_md4pw: Workstation greg$: no account in domain

Cause: Windows XP-based clients try to sign or seal the secure channel by default, but Samba does not support this.

Solution: This is straight from Microsoft's Knowledgebase article (Q318266):
Click Start, and then click Control Panel.
If you are using Classic view in Control Panel, double-click Administrative Tools , and then double-click Local Security Policy.
If you are using Category view in Control Panel, click Performance and Maintenance , click Administrative Tools , and then double-click Local Security Policy.
Under the Local Policies\Security Options node, double-click the Domain Member:Digitally encrypt or sign secure channel data (always) policy to open it.
Click Disabled , and then click OK.

-----------------------

[greg]

Actually, after re-reading your (short!) message that may not actually apply to you. Good luck, anyhow!

[Dr PieXII]

Hi all,

The lines below are the modifications to make in the XP client registry.

You can simply copy them in notepad and save them as a .reg and apply the patch, or mody the key values manually.
It works perfectly for the login and pass problem.

copy from here :

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Netlogon\Parameters]
"requiresignorseal"=dword:00000000
"requirestrongkey"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Netlogon\Parameters]
"requiresignorseal"=dword:00000000
"requirestrongkey"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters]
"requiresignorseal"=dword:00000000
"requirestrongkey"=dword:00000000

[ralph]

Hi Doc and all the list,

perfect suggestion - me as a lazy person would only take the last part ( current control set ) - the other stuff doesnt matter at all.

cheerio,

Ralph

[guestHH]

Hi all,

Thanks for the suggestions. I've double checked them all, but still no luck.
Since I _can_ join a different SME server it lies within the server itself.

Still investigating.....

Regards,
guestHH

[guestHH]

ok,

I removed samba competely. During that I got a message about a database could not be found... Sorry don't remember it exactly.

Installed samba 2.2.5-4 again but no luck. After examining the /etc/smb.conf file I found that netlogon = had no entry, so I entered YES.
Restart samba and bingo!

Funny thing is, I can't seem to find the template fragment for this entry to examine it. But it all works.

Thanks,
guestHH

[Kenneth Rasmussen]

It worked for me, Thanks