[Samba] Joining Windows Server 2012 to a Samba 3.5 or 3.6 domain

[Gaiseric Vandal]

I have a samba classic domain, with a Samba 3.5.10 domain controller. I
am trying to join a Windows Server 2012 R2 client. I have updated the
registry.

HKLM\SYSTEM\CCS\Services\LanmanWorkstation\Parameters
DWORD DomainCompatibilityMode 1
DWORD DNSNameResolutionRequired 0


These changes allow Windows 7 Pro desktops to join the domain. I have
not tried with Windows 8 or 2008.

When I attempt to join the domain I get the error message

The specified domain either does not exist or could not be contacted

However, I am able to sniff traffic between the Window server and the
PDC (nothing useful is shown.) The "net use \\PDC" and "net view
\\PDC" commands from the Windows server work, so name resolution is not
an issue. The "max protocol" on the PDC is NT1. SMB2 is not an
option with Samba 3.5.x. However the Get-SmbServerConfiguration
power shell command on on the windows server shows that SMB1 is
enabled. I can access samba shares from the windows server so SMB
version does not seem to be the issue. Client NTLMv2 auth is enabled on
the samba server.


The nltest command on windows server also indicates that it is
locating the correct domain controller.

c> nltest /dsgetdc:SAMBADOMAIN

DC: \\PDC

Addresss: \\PDC

Dom name: SAMBADOMAIN

Command completed successfully

c>


Google searches indicate that people have been able to join Windows 8 to
a Samba 3.5.x domain. The samba wiki indicate the registry changes
for Windows 2012 client should be the same as Windows 7.


Has anyone joined Windows Server 2012 (or 2012R ) to Samba 3.5.x or
Samba 3.6.x? Or even Windows 8 or 8.1?

My intention is to apply to the patches from my OS vendor to bring the
Samba version to 3.6.10 or later.

Thanks
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

[John Drescher]

> Has anyone joined Windows Server 2012 (or 2012R ) to Samba 3.5.x or Samba
> 3.6.x? Or even Windows 8 or 8.1?
>

I have joined Windows 8 and 8.1 to a samba 3.6.22 based domain with
just the registry settings. Although I have since upgraded my pdc and
bdcs samba to 4.1 (still on a classic domain - I can not ever use
active directory because of the dns server requirement).

John

[Gaiseric Vandal]

I upgraded the PDC to samba 3.6.20 from 3.5.10. I am now able to join
Win 2012R2 to my samba domain.


However, it did break something with my trusted domain. I have a domain
trust with a Win 2003 AD domain. IDmapping is in ldap. (in fact I
manually create the entries to make sure they correct UID range is
used.) "wbinfo -u" lists users from both the trusted and local
domains. "wbinfo -n" and "wbinfo -S" verify that a unix uid has been
assigned to the user. But "getent passwd TRUSTEDDOMAIN\someuser"
returns nothing. I suspect something is cached and the cached entry
has been flagged as expired.


thanks