Koozali.org: home of the SME Server

Legacy Forums => Experienced User Forum => Topic started by: guestHH on July 10, 2002, 12:22:56 AM

Title: joining samba domain: access denied
Post by: guestHH on July 10, 2002, 12:22:56 AM

Anybody knows the reason for this message while trying to joint a domain with a XP workstation (with registry adjustments)?

SME 5.5 with Darrel's samba upgrade.

Thanks,
guestHH

Title: Re: joining samba domain: access denied
Post by: Ulises Ruiz on July 10, 2002, 09:09:38 AM

Hello RequestedDeletion, I have i problem too!, with WinXP Workstation!,

Title: Re: joining samba domain: access denied
Post by: Greg on July 10, 2002, 06:25:11 PM

I found the solution here:
http://slakaz.org/articles/6.html

It is as follows:
-----------------------

Problem: Windows XP professional will join a domain running samba, but once rebooted, will not log into the domain.
NOTE: This same scenario will occur when joining a Windows NT server domain running service pack 3 or below.

Windows Error Message:Windows cannot connect to the domain either because the domain controller is down or otherwise unavailable or because your computer account was not found.

Samba Error Message:
[2002/04/22 11:46:21, 0] rpc_server/srv_netlog_nt.c:get_md4pw(176)
get_md4pw: Workstation greg$: no account in domain

Cause: Windows XP-based clients try to sign or seal the secure channel by default, but Samba does not support this.

Solution: This is straight from Microsoft's Knowledgebase article (Q318266):
Click Start, and then click Control Panel.
If you are using Classic view in Control Panel, double-click Administrative Tools , and then double-click Local Security Policy.
If you are using Category view in Control Panel, click Performance and Maintenance , click Administrative Tools , and then double-click Local Security Policy.
Under the Local Policies\Security Options node, double-click the Domain Member:Digitally encrypt or sign secure channel data (always) policy to open it.
Click Disabled , and then click OK.

-----------------------

Title: Re: joining samba domain: access denied
Post by: greg on July 10, 2002, 06:30:06 PM

Actually, after re-reading your (short!) message that may not actually apply to you. Good luck, anyhow!

Title: Re: joining samba domain: access denied
Post by: Dr PieXII on July 11, 2002, 05:57:06 PM

Hi all,

The lines below are the modifications to make in the XP client registry.

You can simply copy them in notepad and save them as a .reg and apply the patch, or mody the key values manually.
It works perfectly for the login and pass problem.

copy from here :

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Netlogon\Parameters]
"requiresignorseal"=dword:00000000
"requirestrongkey"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Netlogon\Parameters]
"requiresignorseal"=dword:00000000
"requirestrongkey"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters]
"requiresignorseal"=dword:00000000
"requirestrongkey"=dword:00000000

Title: Re: joining samba domain: access denied
Post by: ralph on July 11, 2002, 06:54:16 PM

Hi Doc and all the list,

perfect suggestion - me as a lazy person would only take the last part ( current control set ) - the other stuff doesnt matter at all.

cheerio,

Ralph

Title: Re: joining samba domain: access denied
Post by: guestHH on July 14, 2002, 01:52:33 PM

Hi all,

Thanks for the suggestions. I've double checked them all, but still no luck.
Since I _can_ join a different SME server it lies within the server itself.

Still investigating.....

Regards,
guestHH

Title: Re: joining samba domain: access denied
Post by: guestHH on July 14, 2002, 03:32:12 PM

ok,

I removed samba competely. During that I got a message about a database could not be found... Sorry don't remember it exactly.

Installed samba 2.2.5-4 again but no luck. After examining the /etc/smb.conf file I found that netlogon = had no entry, so I entered YES.
Restart samba and bingo!

Funny thing is, I can't seem to find the template fragment for this entry to examine it. But it all works.

Thanks,
guestHH

Title: Re: joining samba domain: access denied
Post by: Kenneth Rasmussen on July 17, 2002, 02:18:39 AM

It worked for me, Thanks