samba-users May 2010 archive
Main Archive Page > Month Archives  > samba-users archives
samba-users: Re: [Samba] Windows 7 machine trust accounts expiri

Re: [Samba] Windows 7 machine trust accounts expiring

From: Predrag Gavrilovic <gavrilovic_at_nospam>
Date: Wed May 19 2010 - 12:32:08 GMT

I also have this problem, running samba 3.4.7 from debian backports on
I have applied registry patches as suggested on samba wiki:

             DWORD DomainCompatibilityMode = 1
             DWORD DNSNameResolutionRequired = 0

Windows 7 joins domain but trust relation fails after month or so with
"netlogon_creds_server_check failed" error. Needless to say, XP and
Vista work ok.

Can anyone (please) confirm possibility of windows 7 joining samba
domain and staying joined for more than a month.
If so, what version of samba is working? Is samba 3.5 required, or other
registry patches mentioned (as not needed) in wiki?

Време: 16.12.2009. 06:06, Alex Ferrara пише:
> _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client AC-2150 machine account AC-2150$
> I have noticed that the new Windows 7 machines say the password has expired on the same date that is in "sambaPwdLastSet". I added the "X" attribute in sambaAcctFlags in an attempt to stop the accounts from expiring. Below is an ldif of a Windows 7 machine trust account
> dn: uid=ac-2150$,ou=computers,dc=domain,dc=local
> objectClass: top
> objectClass: account
> objectClass: posixAccount
> objectClass: sambaSamAccount
> cn: ac-2150$
> uid: ac-2150$
> uidNumber: 1111
> gidNumber: 515
> homeDirectory: /dev/null
> loginShell: /bin/false
> description: Computer
> gecos: Computer
> sambaDomainName: DOMAIN
> sambaPrimaryGroupSID: S-1-5-21-3581057417-3103041693-70022037-515
> sambaSID: S-1-5-21-3581057417-3103041693-70022037-3222
> sambaNTPassword: DABA25E3910551C63347D399520C123D
> sambaAcctFlags: [WX ]
> sambaPwdLastSet: 1260776037
> Any help would be appreciated.
> aF
> -- To unsubscribe from this list go to the following URL and read the
> instructions:

-- To unsubscribe from this list go to the following URL and read the instructions: