[Samba] Vista SP1, Server 2008 joining NT4/Samba Domain

Hello!

It seems, that Vista SP1 and Server 2008 cannot join an NT4/Samba-domain.
Vista once could join before SP1, if one did some modifications to the
system (LAN Manager authentication level, Encryption of secure channel).
But these workarounds do not seem to work with SP1 anymore.

Microsoft points out that joining NT4-domains with Vista SP1 and Server
2008 is not supported/tested (Article ID 940268,
http://support.microsoft.com/?scid=k...40268&x=8&y=11).

To my knowledge Samba 3.0.x - acting as an PDC/BDC - basically provides
NT4-domain functions/services. We tried to join Vista SP1 and Server 2008
to a Microsoft NT4-domain (PDC running NT4.0 SP6a) as well as to a Samba-
domain (Samba 3.0.24 [Debian] with LDAP Backend slpapd 2.3.30 [Debian]).
Both tries failed, symptoms as mentioned in der MS articel. Other systems
(2000, XP, 2003) join without problems.

Conclusion: As Vista SP1 and Server 2008 do not "cooperate" with NT4-
domains, you cannot join these systems in Samba 3.0.x domains, which
basically "emulate" NT4-domains.

Can someone confirm the conclusion/scenario or confute it by providing
empiric values of working samba domains containing Vista SP1 and Server
2008 sytems? The latter ist more appreciated ... ;-)

Greetings,
Stefan

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba

On Tue, Jun 17, 2008 at 10:07:18AM +0000, Stefan Oberwahrenbrock wrote:
> It seems, that Vista SP1 and Server 2008 cannot join an NT4/Samba-domain.
> Vista once could join before SP1, if one did some modifications to the
> system (LAN Manager authentication level, Encryption of secure channel).
> But these workarounds do not seem to work with SP1 anymore.

Did you test with recent Samba or only with 3.0.24?

Volker

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFIV5OpUzqjrWwMRl0RAu/JAJ0XKfJTuuYjUcPPlDht3yB3Qjp7vQCgnH1j
ZiL56qInEYJCDqx+zRnAuX8=
=CBr1
-----END PGP SIGNATURE-----

Volker Lendecke <Volker.Lendecke@SerNet.DE> wrote in
news:E1K8YWR-0034JJ-7F@intern.SerNet.DE:

> Did you test with recent Samba or only with 3.0.24?

Only 3.0.24 - until now :-)

Meantime I have set up virtual machines for testing. The testing system
acting as PDC is basically running Debian 4.0 and packages from the
correspondig Debian archives (slapd, smbldap-tools, ...) - except for the
Samba package. That I took from the SerNet archives. I tested versions
3.0.28 and 3.0.30 - Vista SP1 and Server 2008 could be joined both times
successfully without modifications to the operating system!

Thus it seems with Samba >= 3.0.28 everything is fine concerning the
described problems.

Thanks to you/SerNet for providing up-to-date packages!



Greetings,
Stefan

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba