Based on this forum post http://forums.contribs.org/index.php/topic,49229.0.html there is a need for sme8.x server to support Windows 8 domain joining & user logins. I do not have Windows 8 Pro to personally test it with a sme8.0 server, so cannot state whether sme 8.x does currently support this or not, but one forum poster "darmasanthi", says joining Windows 8 to the domain does not work. Various search results suggest a more recent version of samba is required, along with registry tweaks that were required for Windows 7, and disabling of smb2 on the Windows 8 PC. Some search results and findings have been mentioned in the forum post, and links to samba.org mail list posts provided. on my fully updated sme8.0 server rpm -q samba3x samba3x-3.5.10-0.110.el5_8 This post http://www.mail-archive.com/samba@lists.samba.org/msg121155.html suggests that with samba 3.6.6 on the Linux domain controller, a Windows 8 PC (with smb2 enabled & with the Windows 7 registry tweaks in place) can join the domain, but does not support user login. If smb2 is disabled on Windows 8 then domain joining & user login is possible, but there are some issues with logging off. Also disabling smb2 on the domain controller seemed to also allow Windows 8 domain joining & user login. This post is stating that domain joining to samba 3.5.6 is possible https://lists.samba.org/archive/samba/2012-September/169193.html Exactly what the real issue is, and what the samba package version & system requirements are etc, I am unsure.
Fixed in e-smith-samba-2.2.0-58.el5.sme.noarch * Sat Jun 29 2013 Ian Wells <esmith@wellsi.com> 2.2.0-58.sme - Add support for Windows 8 domain joining & user login [SME: 7172] This package has been released CLOSING
(In reply to chris burnat from comment #33) > So you actually did test with a WIN8 system... It was not obvious, > especially since you did not show replication of the problem using Windows. > Sorry, my bad, and all good. Thanks for helping with verifications! Only 3 > to do for sme8 before release of 8.1 ISO and we are all done. > Marking VERIFIED. My verification wasn't very clear, i will use your template for the next time.
(In reply to chris burnat from comment #35) > Stephane, > If you still have your WIN8 system available, could you verify Bug #7751, > same as this one but for SME9. Would be great, thanks. I will do
Stephane, If you still have your WIN8 system available, could you verify Bug #7751, same as this one but for SME9. Would be great, thanks.
(In reply to Stephane de Labrusse from comment #32) > > Windows is really not a good friend of me ;-) The best way to see what is going on between Samba and a Windows box is to run the log level on Samba way up and then perform the function where you suspect an issue. Windows does record log information in the event viewer, but it is next to worthless compared to what Samba will tell you. Have a look at this to increase log level and troubleshoot: http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/bugreport.html Just know that if you run the log level up to 10, Samba records an INSANE amount of information in the log files. You'll want to start with a fresh log file, start the samba daemons, immediately perform the suspect function, shut down the samba daemons, then inspect the log files. If you let Samba run at log level 10 for a few minutes with even light smb network traffic, you'll have hundreds of lines of log file entries to sift through. Greg
(In reply to Stephane de Labrusse from comment #32) > (In reply to chris burnat from comment #31) > > (In reply to Stephane de Labrusse from comment #30) > > > > > Strictly speaking, this verification is not complete. There are two testing > > phases to deal with when verifying: > > > > 1) Replication of the problem before updating to new package under the first > > "TEST" section. > > > > 2) After updating to new package, this test is done again under "PROBLEM > > FIXED" to show whether the bug has been fixed or not. > > > > In this particular instance, both tests should be done using a WIN8 > > workstation to show how sme8.x server supports Windows 8 domain joining & > > user logins. > > Windows is really not a good friend of me ;-) > is there a file of log on window where i can catch information on login to > the sme domain ? > The only part visible is a sentence of few words like "welcome to the sme > domain" > > thanks to help me. So you actually did test with a WIN8 system... It was not obvious, especially since you did not show replication of the problem using Windows. Sorry, my bad, and all good. Thanks for helping with verifications! Only 3 to do for sme8 before release of 8.1 ISO and we are all done. Marking VERIFIED.
(In reply to chris burnat from comment #31) > (In reply to Stephane de Labrusse from comment #30) > > Strictly speaking, this verification is not complete. There are two testing > phases to deal with when verifying: > > 1) Replication of the problem before updating to new package under the first > "TEST" section. > > 2) After updating to new package, this test is done again under "PROBLEM > FIXED" to show whether the bug has been fixed or not. > > In this particular instance, both tests should be done using a WIN8 > workstation to show how sme8.x server supports Windows 8 domain joining & > user logins. Windows is really not a good friend of me ;-) is there a file of log on window where i can catch information on login to the sme domain ? The only part visible is a sentence of few words like "welcome to the sme domain" thanks to help me.
(In reply to Stephane de Labrusse from comment #30) > ============================================================================= > = > VERIFICATION > > > = ENVIRONMENT: > SME8.0 clean + all update > > = ORIGINAL PROBLEM: > it Allows a windows8 system to reach the sme domain. It need to modify the > window registry with a windows8.reg which is installed by the version i'm > currently testing. > > > = RESOLUTION: > * Sat Jun 29 2013 Ian Wells <esmith@wellsi.com> 2.2.0-58.sme > - Add support for Windows 8 domain joining & user login [SME: 7172] > > = CURRENT VERSION INSTALLED: > [root@sme8dev ~]# rpm -qa e-smith-samba > e-smith-samba-2.2.0-53.el5.sme > > =TESTING: > in first i look what it is the content of server-resources > > [root@sme8dev ~]# ls /home/e-smith/files/server-resources/regedit/ > win7samba.reg win98pwdcache.reg winxplogon.reg > > > = UPDATED VERSION INSTALLED: > [root@sme8dev ~]# yum install --enablerepo=smeupdates-testing e-smith-samba > Updated: > e-smith-samba.noarch 0:2.2.0-58.el5.sme > > [root@sme8dev ~]# signal-event post-upgrade; signal-event reboot > > > = PROBLEM FIXED: > [root@sme8dev ~]# rpm -qa e-smith-samba > e-smith-samba-2.2.0-58.el5.sme > > i can find the new reg trick > > [root@sme8dev ~]# ls /home/e-smith/files/server-resources/regedit/ > win7samba.reg win8samba.reg win98pwdcache.reg > windows_samba_performance.reg winxplogon.reg > > we can see the new win8samba.reg and we can see the file content. > > [root@sme8dev ~]# cat > /home/e-smith/files/server-resources/regedit/win8samba.reg > Windows Registry Editor Version 5.00 > > [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManWorkstation\Param > eters] > "DNSNameResolutionRequired"=dword:00000000 > "DomainCompatibilityMode"=dword:00000001 > > The WINDOWS8 is able to reach the domain after the window8.reg is installed > as the documentation ask it > http://wiki.contribs.org/Windows_8_Support#Join_a_SME_Server_8. > 0_Domain_with_Win8 > You have to choice a local account or to modify the window account if you > want to be able to perform a login to the SME Share. > See > http://wiki.contribs.org/Windows_8_Support#Microsoft_Account_or_Local_account > > = VERIFIED OR REOPEN: > > VERIFIED > > = DOCUMENTATION IMPACT: > all the documentation needed are http://wiki.contribs.org/Windows_8_Support > Feel free to ask more information on this topic. > > = SUGGESTED RELEASE NOTES: > Add support for Windows 8 domain joining & user login [SME: 7172] Strictly speaking, this verification is not complete. There are two testing phases to deal with when verifying: 1) Replication of the problem before updating to new package under the first "TEST" section. 2) After updating to new package, this test is done again under "PROBLEM FIXED" to show whether the bug has been fixed or not. In this particular instance, both tests should be done using a WIN8 workstation to show how sme8.x server supports Windows 8 domain joining & user logins.
============================================================================== VERIFICATION = ENVIRONMENT: SME8.0 clean + all update = ORIGINAL PROBLEM: it Allows a windows8 system to reach the sme domain. It need to modify the window registry with a windows8.reg which is installed by the version i'm currently testing. = RESOLUTION: * Sat Jun 29 2013 Ian Wells <esmith@wellsi.com> 2.2.0-58.sme - Add support for Windows 8 domain joining & user login [SME: 7172] = CURRENT VERSION INSTALLED: [root@sme8dev ~]# rpm -qa e-smith-samba e-smith-samba-2.2.0-53.el5.sme =TESTING: in first i look what it is the content of server-resources [root@sme8dev ~]# ls /home/e-smith/files/server-resources/regedit/ win7samba.reg win98pwdcache.reg winxplogon.reg = UPDATED VERSION INSTALLED: [root@sme8dev ~]# yum install --enablerepo=smeupdates-testing e-smith-samba Updated: e-smith-samba.noarch 0:2.2.0-58.el5.sme [root@sme8dev ~]# signal-event post-upgrade; signal-event reboot = PROBLEM FIXED: [root@sme8dev ~]# rpm -qa e-smith-samba e-smith-samba-2.2.0-58.el5.sme i can find the new reg trick [root@sme8dev ~]# ls /home/e-smith/files/server-resources/regedit/ win7samba.reg win8samba.reg win98pwdcache.reg windows_samba_performance.reg winxplogon.reg we can see the new win8samba.reg and we can see the file content. [root@sme8dev ~]# cat /home/e-smith/files/server-resources/regedit/win8samba.reg Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManWorkstation\Parameters] "DNSNameResolutionRequired"=dword:00000000 "DomainCompatibilityMode"=dword:00000001 The WINDOWS8 is able to reach the domain after the window8.reg is installed as the documentation ask it http://wiki.contribs.org/Windows_8_Support#Join_a_SME_Server_8.0_Domain_with_Win8 You have to choice a local account or to modify the window account if you want to be able to perform a login to the SME Share. See http://wiki.contribs.org/Windows_8_Support#Microsoft_Account_or_Local_account = VERIFIED OR REOPEN: VERIFIED = DOCUMENTATION IMPACT: all the documentation needed are http://wiki.contribs.org/Windows_8_Support Feel free to ask more information on this topic. = SUGGESTED RELEASE NOTES: Add support for Windows 8 domain joining & user login [SME: 7172]
(In reply to Stephane de Labrusse from comment #28) > Ok I will do it thank for the guidance Great, thanks. If unsure, check in the matrix some of the verified bug for sme8, there are 5 at the moment. Or ask here or on the updatesteam mailing list. Salut.
Ok I will do it thank for the guidance
(In reply to Stephane de Labrusse from comment #26) > except if someone want to add more information to the wiki page > http://wiki.contribs.org/Windows_8_Support or if something goes wrong with > window8 login to the sme domain, i thing that this bug is solved and fixed. > > Of course you have to install the fix provided by ian > e-smith-samba-2.2.0-58.el5.sme which is not yet in the sme-update. > > if somebody thing that i need to provide further more information i can do > it. > > all informations that i have needed to perform the domain login are in the > relevant wiki page, well if you can take a look for my English grammar, it > could be a nice idea. > > If needed you can reopen this bug. Not sure what this is all about.... This bug is solved and fixed, however it needs to be VERIFIED using the standard verification proforma before package can be released, or included in the new 8.1 ISO. This is standard practice. I cannot verify this one, I do not have WIN8. So someone has to step up and do it if users wish to have this fixed released and included in the new 8.1 ISO. Here is the verification form, there is also some documentation in the Wikis: http://wiki.contribs.org/SME_Server:Documentation:QA:Verification ============================================================================== VERIFICATION = ENVIRONMENT: = ORIGINAL PROBLEM: = RESOLUTION: = CURRENT VERSION INSTALLED: =TESTING: = UPDATED VERSION INSTALLED: = PROBLEM FIXED: = VERIFIED OR REOPEN: = DOCUMENTATION IMPACT: = SUGGESTED RELEASE NOTES:
(In reply to chris burnat from comment #25) > (In reply to Nicola Tiana from comment #1) > > > At last, I could manage a Windows 8 Pro PC > > Nicola, none of us have Win8 at the moment. This bug is blocking the cue > for release, could you spare a little time and verify this bug on your > machine? > If unsure of the procedure, ask here, someone will help you. > Thanks > chris except if someone want to add more information to the wiki page http://wiki.contribs.org/Windows_8_Support or if something goes wrong with window8 login to the sme domain, i thing that this bug is solved and fixed. Of course you have to install the fix provided by ian e-smith-samba-2.2.0-58.el5.sme which is not yet in the sme-update. if somebody thing that i need to provide further more information i can do it. all informations that i have needed to perform the domain login are in the relevant wiki page, well if you can take a look for my English grammar, it could be a nice idea. If needed you can reopen this bug
(In reply to Nicola Tiana from comment #1) > At last, I could manage a Windows 8 Pro PC Nicola, none of us have Win8 at the moment. This bug is blocking the cue for release, could you spare a little time and verify this bug on your machine? If unsure of the procedure, ask here, someone will help you. Thanks chris
(In reply to Terry Fage from comment #23) > Unfortunately you are a bit alone on this Stephane, I don't have win8 either > so can't help. http://wiki.contribs.org/Windows_8_Support#Microsoft_Account_or_Local_account I want to say publicly i play with windows for the sme Project...It is a feckin O.S
Unfortunately you are a bit alone on this Stephane, I don't have win8 either so can't help.
I have further information to add that i have noticed when i played a bit with win8 see Bug 7686 Reopening as the behaviour between win8 and sme domain has changed with this new windows version. Indeed after playing a bit i get surprised that with this O.S you have two types of account. -one remote user microsoft account -one local user account the problem with the default account which is the Microsoft account you can not reach the user network share of your user on the sme domain without a new authentication which is really not the normal behaviour of a domain registration. If you change the type of this account to a local account in the Microsoft O.S then you have just one login to do at the login screen to reach all network shares offers by your server. I think that we have to document this issue to the relevant wiki page
(In reply to chris burnat from comment #14) > Ray, have you got a chance to verify Ian's fix, none of us have WIN8... No sorry, I do not have Win 8 myself as yet. Nicola Tiana has Win 8, so can you please test & verify the fix Nicola, thanks.
(In reply to Ian Wells from comment #19) > In general you can update from smetest for verifications, as it is a manual > step it can take some time for it to arrive in smeupdates-testing. Got it...thanks for the Tip. [root@sme8dev ~]# rpm -qa e-smith-samba e-smith-samba-2.2.0-58.el5.sme Effectively with this version we can find a new resource in the server-resources ------------------------------------------------------------------------------ [root@sme8dev ~]# ls /home/e-smith/files/server-resources/regedit/ win7samba.reg win98pwdcache.reg winxplogon.reg win8samba.reg windows_samba_performance.reg ------------------------------------------------------------------------------- [root@sme8dev ~]# cat /home/e-smith/files/server-resources/regedit/win8samba.reg Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManWorkstation\Parameters] "DNSNameResolutionRequired"=dword:00000000 "DomainCompatibilityMode"=dword:00000001 ------------------------------------------------------------------------------- The login to the domain Windows 8 is easy without issues, i will take some snapshot but for the moment the Windaube 8 is in French.
(In reply to Stephane de Labrusse from comment #18) > (In reply to Ian Wells from comment #17) > > Looks like I forgot to submit the change. It's on the way now. > > How long it needs as i tried today and there is noting new ? The build system puts it into smetest, a few hours ago I moved it to smeupdates-testing, and looking at the mirrors it is now available in smeupdates-testing at least here: http://mirror.canada.pialasse.com/releases/8/smeupdates-testing/ In general you can update from smetest for verifications, as it is a manual step it can take some time for it to arrive in smeupdates-testing.
(In reply to Ian Wells from comment #17) > Looks like I forgot to submit the change. It's on the way now. How long it needs as i tried today and there is noting new ? [root@sme8dev78 ~]# yum update --enablerepo=smeupdates-testing Loaded plugins: fastestmirror, protect-packages, smeserver Loading mirror speeds from cached hostfile * base: fr2.rpmfind.net * smeaddons: mirror.absolutnet.de * smeextras: mirror.absolutnet.de * smeos: mirror.absolutnet.de * smeupdates: mirror.absolutnet.de * smeupdates-testing: mirror.absolutnet.de * updates: mirror.ovh.net base | 1.1 kB 00:00 smeaddons | 2.5 kB 00:00 smeextras | 2.5 kB 00:00 smeos | 2.7 kB 00:00 smeupdates | 2.5 kB 00:00 smeupdates-testing | 2.5 kB 00:00 updates | 1.9 kB 00:00 Excluding Packages from CentOS - os Finished Excluding Packages from CentOS - updates Finished Setting up Update Process No Packages marked for Update
Looks like I forgot to submit the change. It's on the way now.
(In reply to Stephane de Labrusse from comment #15) > [root@sme8dev64-78 ~]# rpm -qa e-smith-samba > e-smith-samba-2.2.0-57.el5.sme > > this is what i can find today in smeupdates-testing but there is no version > concerning e-smith-samba-2.2.0-58.el5.sme.noarch as the comment #13 is > speaking > > is there something i have missed.... indeed i can not find the /server-resources/regedit/win8samba.reg
[root@sme8dev64-78 ~]# rpm -qa e-smith-samba e-smith-samba-2.2.0-57.el5.sme this is what i can find today in smeupdates-testing but there is no version concerning e-smith-samba-2.2.0-58.el5.sme.noarch as the comment #13 is speaking is there something i have missed....
(In reply to Ray Mitchell from comment #5) > At last, I'm the happy owner of a Windows 8 Pro PC: you can Join to SME 8 > Domain using the same procedure as for Windows 7 (registry tweak inluded in > http://your-sme-ip/server-resources/regedit/). > At the present day the Samba 3x package installed in SME is 3.6.6-0.129.el5 > and Windows 8 is the current update at 28/01/2013. > After joining you're not immediately able to add users: you must reboot the > joined PC and then you can add domain users too (this is an issue of Windows > 7 too). Ray, have you got a chance to verify Ian's fix, none of us have WIN8, and Docteam is ready to document this as soon as finalised, refer Bug #7686, also: http://wiki.contribs.org/Windows_8_Support
Fixed in e-smith-samba-2.2.0-58.el5.sme.noarch * Sat Jun 29 2013 Ian Wells <esmith@wellsi.com> 2.2.0-58.sme - Add support for Windows 8 domain joining & user login [SME: 7172] See /server-resources/regedit/win8samba.reg
(In reply to Ian Wells from comment #11) > As much as I like closing the bugs down, this is an easy change that would > make the admins life easier. I would be able to fix this in the next few days, unless someone else does it first.
(In reply to Stephane de Labrusse from comment #10) > Just an idea, could we make a patch named win8samba.reg, exactly the same as > win7samba.reg as we know that it works for W8. > > it is better to say at a sysadmin to use the patch with the good name > convention rather than use the win7 patch. I agree. As much as I like closing the bugs down, this is an easy change that would make the admins life easier.
Just an idea, could we make a patch named win8samba.reg, exactly the same as win7samba.reg as we know that it works for W8. it is better to say at a sysadmin to use the patch with the good name convention rather than use the win7 patch.
the wiki page is here http://wiki.contribs.org/Windows_8_Support someone can make some screenshots of how join a domain with win8 as i do not have win8 and sent me the screen shot to make some enhancements of our documentation ?
(In reply to Ray Mitchell from comment #6) > (In reply to Ray Mitchell from comment #5) > > Just checked an updated SME 8.0 server at 23 June 2013 & the Samba 3x > version is 3.6.6-0.129.el5, which is in accord with my earlier post & link > that suggested samba version 3.6.6 was required. thank you for taking the time to reply.
(In reply to Ray Mitchell from comment #6) > (In reply to Ray Mitchell from comment #5) > > Just checked an updated SME 8.0 server at 23 June 2013 & the Samba 3x > version is 3.6.6-0.129.el5, which is in accord with my earlier post & link > that suggested samba version 3.6.6 was required. If I understand correctly, this is no longer an issue and can be closed WORKFORME. Ray, please re-open if incorrect, and thanks for update. I also think it may be good cloning to Docteam to capture information about joining Domain in WIN8
(In reply to Ray Mitchell from comment #5) Just checked an updated SME 8.0 server at 23 June 2013 & the Samba 3x version is 3.6.6-0.129.el5, which is in accord with my earlier post & link that suggested samba version 3.6.6 was required.
(In reply to Ian Wells from comment #4) > > It looks like no-one in the community is interested, so close? > Or does someone want to step up? > Personally I don't use windows domains either so I cannot test this. It looks like this is resolved per the following forum post & as reported earlier in this bug report by Nicola. ....Unless you feel there is something more that needs to be done ? http://forums.contribs.org/index.php/topic,49229.msg247422.html#msg247422 by nicolatiana At last, I'm the happy owner of a Windows 8 Pro PC: you can Join to SME 8 Domain using the same procedure as for Windows 7 (registry tweak inluded in http://your-sme-ip/server-resources/regedit/). At the present day the Samba 3x package installed in SME is 3.6.6-0.129.el5 and Windows 8 is the current update at 28/01/2013. After joining you're not immediately able to add users: you must reboot the joined PC and then you can add domain users too (this is an issue of Windows 7 too).
(In reply to Ian Wells from comment #3) > (In reply to Charlie Brady from comment #2) > > I don't use Windows at all, and cannot develop or test any of this > > functionality. But I would think this was important for many SME server > > users and that someone would make it a priority to develop, test and > > document this feature. > > I agree - anyone interested? It looks like no-one in the community is interested, so close? Or does someone want to step up? Personally I don't use windows domains either so I cannot test this.
(In reply to Charlie Brady from comment #2) > I don't use Windows at all, and cannot develop or test any of this > functionality. But I would think this was important for many SME server > users and that someone would make it a priority to develop, test and > document this feature. I agree - anyone interested?
I don't use Windows at all, and cannot develop or test any of this functionality. But I would think this was important for many SME server users and that someone would make it a priority to develop, test and document this feature.
According to some "rumors" it seems that using the same procedure as for 7 it should work. (http://permalink.gmane.org/gmane.network.samba.internals/59476) (https://lists.samba.org/archive/samba/2012-September/169193.html) This is the standard "tweak" for 7: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManWorkstation\Parameters] “DNSNameResolutionRequired”=dword:00000000 “DomainCompatibilityMode”=dword:00000001 At last, I could manage a Windows 8 Pro PC: you can Join to SME 8 Domain using the same procedure as for Windows 7 (registry tweak in http://your-sme-ip/server-resources/regedit/). At the present day the Samba 3x package installed in SME is 3.6.6-0.129.el5 and Windows 8 is the current update at 28/01/2013. After joining you're not immediately able to add users: you must reboot the joined PC and then you can add domain users too (this is an issue of Windows 7 too).