Line 5: |
Line 5: |
| | | |
| ==Background== | | ==Background== |
− | Windows 7 was released in October 2009. Due to changes in the way that trust relationships are established with domain controllers, older versions of Samba do not allow Windows 7 clients to log in once joined to a domain. | + | Support for Windows 7 ended on January 14, 2020. If you are still using Windows 7, your PC may become more vulnerable to security risks. The only Microsoft-supported Windows version now is Windows 10. We strongly recommend you do not use versions of Windows unsupported by Microsoft. |
| | | |
− | Although an upstream fix was made available for SME Server 8 (based on CentOS 5, see [[bugzilla:5425|bug 5425]]), there is no comparable fix available from the upstream vendor for SME 7.x (based on CentOS 4).
| + | Windows 7 was released in October 2009. Due to changes in the way that trust relationships are established with domain controllers, some modifications to the windows registry needs to take place. |
| | | |
− | ==Join a SME Server 8.0 Domain with Win7== | + | ==Join a Window 7 client to SME Server 8 or 9== |
| Previously you needed to edit your Win7 registry to facilitate the joining of a SME Server Domain, however this can more easily be achieved by importing win7samba.reg fix by using either a usb key or by the network with http. | | Previously you needed to edit your Win7 registry to facilitate the joining of a SME Server Domain, however this can more easily be achieved by importing win7samba.reg fix by using either a usb key or by the network with http. |
| | | |
Line 30: |
Line 30: |
| Image:W7-8.png | | Image:W7-8.png |
| </gallery> | | </gallery> |
| + | {{Note box|You will receive one warning about DNS domain name configuration after the join has succeeded: |
| | | |
− | ===Slow login with win7 to sme8 domain=== | + | "Changing the Primary Domain DNS name of this computer to "" failed. |
| + | The name will remain "MYDOM". The error was: |
| + | |
| + | The specified domain either does not exist or could not be contacted" |
| + | |
| + | But this error can safely be ignored or, if you run Windows 7, silenced by a hotfix, that was published by [http://support.microsoft.com/kb/2171571 Microsoft: KB2171571: You incorrectly receive an error message when you join a computer that is running Windows 7 or Windows Server 2008 R2 to a Samba 3-based domain].}} |
| + | |
| + | ===Setting up network drives=== |
| + | In order to have logon script working you must add the following Keys in registry |
| + | |
| + | Windows Registry Editor Version 5.00 |
| + | |
| + | [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths] |
| + | "\\\\*\\netlogon"="RequireMutualAuthentication=0,RequireIntegrity=0,RequirePrivacy=0" |
| + | |
| + | |
| + | If you are using SME Server as a domain controller and the workstations have joined the domain |
| + | you can automate drive mapping and syncronise the PC time with the netlogon.bat file |
| + | |
| + | Note: [[:SME_Server:Documentation:Administration_Manual:Chapter13#Workgroup |Chapter 13]] has a method for admin to edit the netlogon.bat file without using the command line. You can consider also the [[SME_Server:Documentation:Administration_Manual:Chapter7|chapter 7]] on Configuring the Computers on Your Network |
| | | |
− | With certain networks you may have an issue with a slow login to the SME Server domain due to a timeout issue on the network. In this case you should install a second patch (in first you have to install the win7samba.reg). The history of this patch can be found at [[bugzilla:7332]]
| + | nano -w /home/e-smith/files/samba/netlogon/netlogon.bat |
− | The version of package needed e-smith-samba-2.2.0-57.el5.sme is in smeupdates-testing but will shortly be by default in smeupdates so in the first instance verify your package version
| |
| | | |
− | rpm -qa e-smith-samba | + | REM To set the time when clients logon to the domain: |
− | e-smith-samba-2.2.0-57.el5.sme | + | net time \\servername /set /yes |
| + | REM To map a home directory to drive h: |
| + | net use h: /home /persistent:no |
| + | net use j: \\servername\ibay1 /persistent:no |
| + | net use p: \\servername\ibay2 /persistent:no |
| + | if exist Z: net use Z: /del /yes |
| | | |
− | You need at least this version as above, otherwise try this
| + | and reset file to dos format |
| + | unix2dos /home/e-smith/files/samba/netlogon/netlogon.bat |
| | | |
− | yum update --enablerepo=smeupdates-testing e-smith-samba
| + | ===Slow login with win7 to sme8 domain=== |
− | signal-event post-upgrade; signal-event reboot
| |
| | | |
| + | With certain networks you may have an issue with a slow login to the SME Server domain due to a timeout issue on the network. In this case you should install a second patch (in first you have to install the win7samba.reg). The history of this patch can be found at [[bugzilla:7332]] |
| | | |
| This is what you need to find in your server-ressources | | This is what you need to find in your server-ressources |
Line 58: |
Line 83: |
| | | |
| | | |
− | After this you follow the usual way to add a Win7 to the SME DOMAIN, as above [[Windows_7_Support#Join_a_SME_Server_8.0_Domain_with_Win7]] | + | After this you follow the usual way to add the patch to your windows registery |
| + | |
| + | *Save the registry patch ('''windows_samba_performance.reg''') from https://your-server-ip/server-resources/regedit/ with your favourite web browser |
| + | *On your windows desktop, start "regedit" from the start menu and import the windows_samba_performance.reg |
| | | |
| ==Adding Windows 7 Support to SME Server 7== | | ==Adding Windows 7 Support to SME Server 7== |
− | {{Warning box| This howto is based upon limited testing and may cause SME Server to experience issues when backing up, installing regular updates, and upgrading to version 8 upon release. '''SerNet packages are NOT supported by SME Server developers.''' You should only use these instructions if Windows 7 support is critical for your environment.}}
| |
− |
| |
− | Thanks to [http://www.sernet.de/ SerNet], SME 7 users can now install an updated version of Samba which fixes the domain trust issues.
| |
− |
| |
− | ===Installation===
| |
− | *Add the SerNet repository for CentOS 4.x
| |
− |
| |
− | db yum_repositories set SerNet repository \
| |
− | BaseURL http://ftp.sernet.de/pub/samba/3.5/centos/4 \
| |
− | EnableGroups yes \
| |
− | GPGCheck no \
| |
− | Name 'SerNet Samba Team packages (CentOS 4)' \
| |
− | Visible yes \
| |
− | status enabled
| |
− | signal-event yum-modify
| |
− |
| |
− | *Update SME Server - the new Samba packages will install automatically.
| |
− |
| |
− | yum update
| |
− | signal-event post-upgrade ; signal-event reboot
| |
| | | |
| ===Configuring Clients=== | | ===Configuring Clients=== |
Line 104: |
Line 112: |
| Version 2 profiles are not compatible with Windows XP and earlier. If you have mixed environments you will be required to maintain two separate profiles for each user. | | Version 2 profiles are not compatible with Windows XP and earlier. If you have mixed environments you will be required to maintain two separate profiles for each user. |
| | | |
− | ==Source Code==
| |
− | SerNet publishes the source code for their latest Samba build at http://ftp.sernet.de/pub/samba/3.5/src/rpm/
| |
− |
| |
− | Code for older builds is also available at http://ftp.sernet.de/pub/samba/old/src/rpm/
| |
− |
| |
− | ----
| |
| [[Category:Howto]] | | [[Category:Howto]] |
| [[Category:Administration]] | | [[Category:Administration]] |