Windows 7: Unable to join domain

Morphaniel · 18 Aug 2009

I too have this problem. My domain controller is Samba 3.3.4 on CentOS 5.3. I am using Win 7 RTM.

My Win 7 system is an in-place upgrade to Vista. The Vista machine was part of the domain but I detached it prior to the upgrade (been here before

).

Several registry mods are required for Win 7 to connect to Samba and I've done those.

The Win 7 machine can see the Samba DC because if I enter a fictitious domain it immediately complains about failing to find an AD with that name. Entering the correct domain name allows me to enter the admin credentials to join but then it fails.

The Samba logs show the Win 7 machine connecting at some low level (perhaps browsing when it boots) but there are no logs showing activity when I try to join the domain.

It's certainly possible that Win 7 RTM requires a Samba patch - most people on the 'net with similar problems are still using the RC..

SquonkSC · 18 Aug 2009

Quote: Originally Posted by Morphaniel

I too have this problem. My domain controller is Samba 3.3.4 on CentOS 5.3. I am using Win 7 RTM.

My Win 7 system is an in-place upgrade to Vista. The Vista machine was part of the domain but I detached it prior to the upgrade (been here before

).

Several registry mods are required for Win 7 to connect to Samba and I've done those.

The Win 7 machine can see the Samba DC because if I enter a fictitious domain it immediately complains about failing to find an AD with that name. Entering the correct domain name allows me to enter the admin credentials to join but then it fails.

The Samba logs show the Win 7 machine connecting at some low level (perhaps browsing when it boots) but there are no logs showing activity when I try to join the domain.

It's certainly possible that Win 7 RTM requires a Samba patch - most people on the 'net with similar problems are still using the RC..

Could it be difference in encryption of passwords?

greetz

NoDoze · 18 Aug 2009

Quote:

I too have this problem. My domain controller is Samba 3.3.4 on CentOS 5.3. I am using Win 7 RTM.

My Win 7 system is an in-place upgrade to Vista. The Vista machine was part of the domain but I detached it prior to the upgrade (been here before

).

Several registry mods are required for Win 7 to connect to Samba and I've done those.

The Win 7 machine can see the Samba DC because if I enter a fictitious domain it immediately complains about failing to find an AD with that name. Entering the correct domain name allows me to enter the admin credentials to join but then it fails.

The Samba logs show the Win 7 machine connecting at some low level (perhaps browsing when it boots) but there are no logs showing activity when I try to join the domain.

It's certainly possible that Win 7 RTM requires a Samba patch - most people on the 'net with similar problems are still using the RC..

This sounds EXACTLY like my case! I'm able to enter the credentials but then it fails. Only I'm not able to get ANY sign of activity in the samba logs.

What are the registry mods u speak of? Can you share?

@squonksc - The machine is not on the DC...yet...heh

@ - and yes, I am logging in as the domain admin...still fails. Dispite being able to login ok via an XP Pro PC, AND being able to login to the server ok via the workgroup.

Thanks!

Morphaniel · 19 Aug 2009

The four registry mods are:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Parameters]
“DomainCompatibilityMode”=dword:00000001
“DNSNameResolutionRequired”=dword:00000000

The above need to be added to allow the join to work. Then find the key below and set those values to 0.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Netlogon\Parameters]
“RequireSignOnSeal”=dword:00000000
“RequireStrongKey”=dword:00000000

This is definitely reported to work on many occasions across the 'net but doesn't for me. I may be being jinxed by having done an in-place upgrade and although I have a spare machine to try an install with, I haven't yet found the time.

Note that it is reported that you still get an error about the DNS suffix after these mods but the connection works - there is some Samba chatter about DNS suffixes but I only half understood it and since I haven't got that far yet, I didn't apply myself to it

NoDoze · 19 Aug 2009

Uhmmmm....in...

Quote:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Netlogon\Parameters]

I have no:

Quote:

“DomainCompatibilityMode”=dword:00000001
“DNSNameResolutionRequired”=dword:00000000

or

Quote:

“RequireSignOnSeal”=dword:00000000
“RequireStrongKey”=dword:00000000

...or anything even close to it...

But I did have a Linkage/Route with this in it:

Quote:

"Smb" "Tcpip" "{738D6978-CD95-42E2-B3A4-181CFBBA4675}"
"Smb" "Tcpip" "{C40D26E9-E52C-4E5E-B008-3D40E6F26AF0}"
"Smb" "Tcpip6" "{AE370AD5-8723-4B9D-BD28-75C2C25E842C}"
"Smb" "Tcpip6" "{DD6C90D2-D944-4F87-A484-6653D1BD0C17}"
"Smb" "Tcpip6" "{EF8C4B7B-2F1F-4CB5-A59D-B86A61ACA864}"
"Smb" "Tcpip6" "{BD1CD30A-8763-45C0-B146-AA4B6C7A29A0}"
"Smb" "Tcpip6" "{738D6978-CD95-42E2-B3A4-181CFBBA4675}"
"Smb" "Tcpip6" "{C40D26E9-E52C-4E5E-B008-3D40E6F26AF0}"
"Tcpip" "{738D6978-CD95-42E2-B3A4-181CFBBA4675}"
"Tcpip" "{C40D26E9-E52C-4E5E-B008-3D40E6F26AF0}"
"Tcpip6" "{AE370AD5-8723-4B9D-BD28-75C2C25E842C}"
"Tcpip6" "{DD6C90D2-D944-4F87-A484-6653D1BD0C17}"
"Tcpip6" "{EF8C4B7B-2F1F-4CB5-A59D-B86A61ACA864}"
"Tcpip6" "{BD1CD30A-8763-45C0-B146-AA4B6C7A29A0}"
"Tcpip6" "{738D6978-CD95-42E2-B3A4-181CFBBA4675}"
"Tcpip6" "{C40D26E9-E52C-4E5E-B008-3D40E6F26AF0}"
"NetbiosSmb"
"NetBT" "Tcpip" "{738D6978-CD95-42E2-B3A4-181CFBBA4675}"
"NetBT" "Tcpip" "{C40D26E9-E52C-4E5E-B008-3D40E6F26AF0}"
"NetBT" "Tcpip6" "{AE370AD5-8723-4B9D-BD28-75C2C25E842C}"
"NetBT" "Tcpip6" "{DD6C90D2-D944-4F87-A484-6653D1BD0C17}"
"NetBT" "Tcpip6" "{EF8C4B7B-2F1F-4CB5-A59D-B86A61ACA864}"
"NetBT" "Tcpip6" "{BD1CD30A-8763-45C0-B146-AA4B6C7A29A0}"
"NetBT" "Tcpip6" "{738D6978-CD95-42E2-B3A4-181CFBBA4675}"
"NetBT" "Tcpip6" "{C40D26E9-E52C-4E5E-B008-3D40E6F26AF0}"

And all the smb stuff looks like samba stuff, maybe...? ...which looks suspicious...

I also was able to upgrade to rtm....but it made no difference...

...sigh

Morphaniel · 20 Aug 2009

You won't have those values by default - you need to add them...

NoDoze · 20 Aug 2009

Thanks Morphaniel IT WORKED!!

I was able to login to the domain ok, but after restarting the PC, and trying to login with the user account with the DC, I get a:

Quote:

the trust relationship between this workstation and the primary domain failed

I googled it, and it said it was an issue with a now corrupted machine entry for the machine on the DC...The suggestion was to log back into the workgroup, delete the machine, restart, change back over to the domain, restart, and I should then be able to login to the DC using the user from the DC....However, I get the response quoted above still.

I'm SOOOOO close now! LOL

Any ideas...?

kegobeer · 20 Aug 2009

Quote: Originally Posted by NoDoze

Thanks Morphaniel IT WORKED!!

I was able to login to the domain ok, but after restarting the PC, and trying to login with the user account with the DC, I get a:

I googled it, and it said it was an issue with a now corrupted machine entry for the machine on the DC...The suggestion was to log back into the workgroup, delete the machine, restart, change back over to the domain, restart, and I should then be able to login to the DC using the user from the DC....However, I get the response quoted above still.

I'm SOOOOO close now! LOL

Any ideas...?

Does Samba require any certificates on the client computers? If so, perhaps the certificate(s) aren't there or they're in the wrong store.

NoDoze · 20 Aug 2009

I found this thread that provided some insight...

Windows 7 joining a Windows NT Server

However it ends with the issue remaining on a NT DC and Windows 7 RC build being the scenario...

I have yet to test this on a RTM version to see if the issue has been resolved with updated builds, as the thread above suggests.

Until then, any ideas? I'll keep searching....

NoDoze · 21 Aug 2009

I'm running rtm now, still getting the same message:

Quote:

the trust relationship between this workstation and the primary domain failed

Windows 7: Unable to join domain

Unable to join domain problems?