[tech] Fwd: UCC Windows 10 Machine

[Jonathan Van buren]

Okay got it working.

Had to edit the smb.conf file not the smb4.comf file in
"/usr/local/etc/smb.conf"

I have added some extra commenting to the line to explain the fix then I
commented out the line and it still works!

I also added a section in SOE page on the wiki detailing the fix for
windows 10.

Thanks for your help!.

- JVB

---------- Forwarded message ---------
From: <zanchey at ucc.asn.au>
Date: Tue, 24 Nov 2015 at 18:41
Subject: Re: UCC Windows 10 Machine
To: Jonathan Van buren <vanbujm at gmail.com>


On Tue, 24 Nov 2015, Jonathan Van buren wrote:
> I have been attempting to get the clubroom windows 10 machine to login to
> accounts on the UCCDOMAIN, however I am getting the "There are currently
no
> logon servers available to service the logon request" error. Now the fix
> seems to be to add the line "max protocol = NT1" to the smb.conf. But to
my
> knowledge we are running samba4 with active directory not NT correct?
>
> So my question is; is it safe to try this config change or is there a
> better solution?

Hi J

We're running Samba 4, but still in NT Domain mode. I'm sort of amazed
that it still works; I would have thought they would have given 15+ year
old tech the boot by now.

I take it you're looking at
https://wiki.samba.org/index.php/Required_settings_for_NT4-style_domains#Windows_10:_.E2.80.9ENo_logon_servers_available.E2.80.9C

I think it should be safe to try this config change. You probably need to
make it on the PDC, which is molmol, in /usr/local/etc/smb4.conf . Restart
the service with `service samba_server restart` and then probably reboot
the Windows 10 machine as well.

Unfortunately this will probably make the performance of file transfers
even worse. However, this thread:
  https://lists.samba.org/archive/samba-technical/2015-June/107642.html
suggests that once the Windows 10 machine has logged on to the domain
once, you can remove the `max_protocol` line and it should keep working!
If that's the case, we can probably have the best of both worlds.

Good luck, I'd be keen to hear how you get on.

One of these days we should move to full Active Directory with Samba - but
it will require rewriting quite a lot of scripts so perhaps February is
the time.

Cheers

[DAA]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.ucc.gu.uwa.edu.au/pipermail/tech/attachments/20151125/f6b6abe2/attachment.htm