[FUG-BR] [OFF] Problemas com samba + Windows 7

[Giancarlo Rubio]

Tive que alterar 2 parametros no gpedit.msc e funcionou

Gpedit.msc:

Compouter|Windows Settings|Security Settings|Local Policies|Security Options
-Network Security: LAN Manager Auth. Level: Send LM&NTLM use NTLMv2 session
sec. if negociated
-Network Security: Minimum session...both clients and servr: NO Required
128b encryption

Computer|Admin.Templates|System|User Profiles|
-Do not check for user ownership of roaming profile: Enabled
-Delete cache copies of roaming profile: Enabled

Em 15 de fevereiro de 2011 10:10, Adalberto Gonçalves
<adalberto em bsd.com.br>escreveu:

> Utilizo o Samba como PDC para estações com windows 7, e basicamente o que
> precisei fazer foi adicionar as seguintes linhas no smb.conf:
>
>  ntlm auth = YES
>  lanman auth = YES
>  client ntlmv2 auth = YES
>
> Rodar o .reg na estação com o seguinte conteúdo:
>
>
> [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManWorkstation\Parameters]
> "DNSNameResolutionRequired"=dword:00000000
> "DomainCompatibilityMode"=dword:00000001
>
> E até onde eu sei, isso só funciona no Samba 3.4 em diante. Caso utilize o
> samba para autenticar os usuários do squid, precisa fazer uma alteração no
> arquivo /usr/local/libexec/squid/smb_auth.sh na seguinte linha:
>
> authinfo=`$SAMBAPREFIX/bin/smbclient "//$dcname/$AUTHSHARE" -I $dcip ***-U
> $USER*** -d 0 -E -W "$DOMAINNAME" -c "get $authfilebs -" 2>/dev/null`
> (Adicionar o -U $USER)
>
> []'s
>
> Em 15 de fevereiro de 2011 09:36, Giancarlo Rubio <gianrubio em gmail.com
> >escreveu:
>
> > Srs;
> >
> > Ja recorri a todos os google e forums da vida mais não consigo fazer as
> > maquinas do meu pdc logarem com perfil que não seja temporário. Ja fiz as
> > alteracoes de registro tanto é que a máquina loga no dominio.
> >
> > Meu smb.conf
> >
> >
> > [global]
> > workgroup = XXXXX
> > server string = SERVIDOR
> > passdb backend = ldapsam:ldap://127.0.0.1
> > passwd program = /usr/local/sbin/smbldap-passwd %u
> > passwd chat = *New*password* %n\n *Retype*new*password* %n\n
> > *all*authentication*tokens*updated*
> > unix password sync = Yes
> > client plaintext auth = No
> > log level = 2
> > log file = /var/log/samba/log.%m
> > max log size = 2000
> > time server = Yes
> > add user script = /usr/local/sbin/smbldap-useradd -m "%u"
> > delete user script = /usr/local/sbin/smbldap-userdel "%u"
> > add group script = /usr/local/sbin/smbldap-groupadd -p "%g"
> > delete group script = /usr/local/sbin/smbldap-groupdel "%g"
> > add user to group script = /usr/local/sbin/smbldap-groupmod -m "%u" "%g"
> > delete user from group script = /usr/local/sbin/smbldap-groupmod -x "%u"
> > "%g"
> > set primary group script = /usr/local/sbin/smbldap-usermod -g "%g" "%u"
> > add machine script = /usr/local/sbin/smbldap-useradd -w "%u"
> > logon script = %G.bat
> > logon path = \\servidor\profiles
> > logon drive = P:
> > domain logons = Yes
> > os level = 100
> > preferred master = Yes
> > domain master = Yes
> > ldap admin dn = cn=Manager,dc=xxxxx,dc=com,dc=br
> > ldap delete dn = Yes
> > ldap group suffix = ou=Groups
> > ldap idmap suffix = ou=Idmap
> > ldap machine suffix = ou=Computers
> > ldap passwd sync = Yes
> > ldap suffix = dc=xxxx,dc=com,dc=br
> > ldap ssl = no
> > ldap user suffix = ou=Users
> > recycle:maxsize = 10000000
> > recycle:repository = lixeira
> > recycle:versions = false
> > recycle:touch = true
> > recycle:keeptree = true
> > recycle:exclude = *.tmp *.temp *.o *.obj ~$*
> > admin users = @ti
> > inherit permissions = Yes
> > inherit acls = Yes
> > map acl inherit = Yes
> > veto files = /*.mp3/*.avi/*.mpeg/*.dll/
> > level2 oplocks = No
> > vfs objects = recycle
> > lanman auth = YES
> > client ntlmv2 auth = yes
> > level2 oplocks =
> >
> > [Profiles]
> > path = /home/samba/profiles/%G/%U
> > read only = No
> > create mask = 0600
> > directory mask = 0700
> > profile acls = Yes
> >
> > --
> > Giancarlo Rubio
> > -------------------------
> > Histórico: http://www.fug.com.br/historico/html/freebsd/
> > Sair da lista: https://www.fug.com.br/mailman/listinfo/freebsd
> >
>
>
>
> --
> ===============================================
> Adalberto Gonçalves - Network and Systems Administrator
> Tel: 19 3351 3301
> Cel: 19 9132 7538
> ===============================================
> -------------------------
> Histórico: http://www.fug.com.br/historico/html/freebsd/
> Sair da lista: https://www.fug.com.br/mailman/listinfo/freebsd
>



-- 
Giancarlo Rubio