Hallo,
ich habe den Fehler gefunden. Es war schlicht und ergreifend, daß ich mich erdreistet habe Windows 7 in die Domaine zu bringen…
Der Workaround von hier http://www.nabble.com/Windows-7-RC-td23405949.html brachte keinen Erfolg, weil die Sambaversion bei Univention 3.2.13 ist. Die Fehlermeldung in Win 7 “Windows konnte keine Vertrauensstellung zur Domaine herstellen, die Domaine wurde nicht gefunden.” so ähnlich zumindest. Hier die Fehlermeldung in den Samba Logs.
[quote][2009/10/01 06:22:51, 0] rpc_server/srv_netlog_nt.c:_netr_ServerAuthenticate2(555)
_netr_ServerAuthenticate2: netlogon_creds_server_check failed. Rejecting auth request from client Rechner machine account Rechner$
[2009/10/01 06:23:02, 0] lib/util_sock.c:read_socket_with_timeout(939)
[2009/10/01 06:23:02, 0] lib/util_sock.c:get_peer_addr_internal(1676)
[/quote]
Also bleibt mir nur warten oder hat das Univention schon eine Lösung parat?
Hier noch für alle Bastler die Änderung an der Registry. Soll angeblich mit Samba Version 3.3.7 gehen.
[code]Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Parameters]
; Enable NT-Domain compatibility mode
; Default:
; [value not present]
; “DomainCompatibilityMode”=-
“DomainCompatibilityMode”=dword:00000001
; Disable required DNS name resolution
; Default:
; [value not present]
; “DNSNameResolutionRequired”=-
“DNSNameResolutionRequired”=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Netlogon\Parameters]
; Disable requirement of signed communication
; My Samba (3.0.33) works with signed communication enabled, so no need to disable it.
; Default:
; “RequireSignOrSeal”=dword:00000001
; Disable the usage of strong keys
; Default:
; “RequireStrongKey”=dword:00000001
“RequireStrongKey”=dword:00000000
; [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\System\DNSClient]
; Enforce DNS suffix
; It seems this is not necessary - see below
; “NV PrimaryDnsSuffix”=“FQDN”
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Parameters]
; Overwrite DNS domain. Usually the domain is supposed to be propagated automatically
; when joining the domain. But with Samba this does not work (yet).
“NV Domain”=“FQDN” [/code]
Hier noch der Post von Microsoft aus der Samba Mailingliste.
[quote]Jim Pinkerton asked me to post this message from Microsoft:
Sincere apologies, but wanted to confirm that there is an issue with NT Domain support in
Windows 7. We’re trying to expeditiously track down exactly the issue(s), but the short of
it is I wouldn’t spend time trying to get this functionality to work. We’ll get some sort
of official notice out shortly (and I do mean shortly).
Jim Pinkerton
Microsoft
[/quote]
