Changes

From SME Server
Jump to navigationJump to search
1,202 bytes removed ,  12:46, 2 December 2020
m
Line 5: Line 5:     
==Background==
 
==Background==
Windows 7 was released in October 2009. Due to changes in the way that trust relationships are established with domain controllers, older versions of Samba do not allow Windows 7 clients to log in once joined to a domain.
+
Support for Windows 7 ended on January 14, 2020. If you are still using Windows 7, your PC may become more vulnerable to security risks. The only Microsoft-supported Windows version now is Windows 10. We strongly recommend you do not use versions of Windows unsupported by Microsoft.
   −
Although an upstream fix was made available for SME Server 8 (based on CentOS 5, see [[bugzilla:5425|bug 5425]]), there is no comparable fix available from the upstream vendor for SME 7.x (based on CentOS 4).
+
Windows 7 was released in October 2009. Due to changes in the way that trust relationships are established with domain controllers, some modifications to the windows registry needs to take place.
   −
==Join a SME Server 8.0 Domain with Win7==
+
==Join a Window 7 client to SME Server 8 or 9==
 
Previously you needed to edit your Win7 registry to facilitate the joining of a SME Server Domain, however this can more easily be achieved by importing win7samba.reg fix by using either a usb key or by the network with http.
 
Previously you needed to edit your Win7 registry to facilitate the joining of a SME Server Domain, however this can more easily be achieved by importing win7samba.reg fix by using either a usb key or by the network with http.
   Line 40: Line 40:     
===Setting up network drives===
 
===Setting up network drives===
 +
In  order to have logon script working you must add the following Keys in registry
 +
 +
Windows Registry Editor Version 5.00
 +
 +
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths]
 +
"\\\\*\\netlogon"="RequireMutualAuthentication=0,RequireIntegrity=0,RequirePrivacy=0"
 +
 +
 
If you are using SME Server as a domain controller and the workstations have joined the domain
 
If you are using SME Server as a domain controller and the workstations have joined the domain
 
you can automate drive mapping and syncronise the PC time with the netlogon.bat file  
 
you can automate drive mapping and syncronise the PC time with the netlogon.bat file  
Line 61: Line 69:     
With certain networks you may have an issue with a slow login to the SME Server domain due to a timeout issue on the network. In this case you should install a second patch (in first you have to install the win7samba.reg). The history of this patch can be found at [[bugzilla:7332]]
 
With certain networks you may have an issue with a slow login to the SME Server domain due to a timeout issue on the network. In this case you should install a second patch (in first you have to install the win7samba.reg). The history of this patch can be found at [[bugzilla:7332]]
The version of package needed e-smith-samba-2.2.0-57.el5.sme is in smeupdates-testing but will shortly be by default in smeupdates so in the first instance verify your package version
  −
  −
rpm -qa e-smith-samba
  −
e-smith-samba-2.2.0-57.el5.sme
  −
  −
You need at least this version as above, otherwise try this
  −
  −
yum update --enablerepo=smeupdates-testing e-smith-samba
  −
signal-event post-upgrade; signal-event reboot
  −
      
This is what you need to find in your server-ressources
 
This is what you need to find in your server-ressources
Line 91: Line 89:     
==Adding Windows 7 Support to SME Server 7==
 
==Adding Windows 7 Support to SME Server 7==
{{Warning box| This howto is based upon limited testing and may cause SME Server to experience issues when backing up, installing regular updates, and upgrading to version 8 upon release. '''SerNet packages are NOT supported by SME Server developers.''' You should only use these instructions if Windows 7 support is critical for your environment.}}
  −
  −
Thanks to [http://www.sernet.de/ SerNet], SME 7 users can now install an updated version of Samba which fixes the domain trust issues.
  −
  −
===Installation===
  −
*Add the SerNet repository for CentOS 4.x
  −
  −
db yum_repositories set SerNet repository \
  −
  BaseURL http://ftp.sernet.de/pub/samba/3.5/centos/4 \
  −
  EnableGroups yes \
  −
  GPGCheck no \
  −
  Name 'SerNet Samba Team packages (CentOS 4)' \
  −
  Visible yes \
  −
  status enabled
  −
signal-event yum-modify
  −
  −
*Update SME Server - the new Samba packages will install automatically.
  −
  −
yum update
  −
signal-event post-upgrade ; signal-event reboot
      
===Configuring Clients===
 
===Configuring Clients===
Line 134: Line 112:  
Version 2 profiles are not compatible with Windows XP and earlier. If you have mixed environments you will be required to maintain two separate profiles for each user.
 
Version 2 profiles are not compatible with Windows XP and earlier. If you have mixed environments you will be required to maintain two separate profiles for each user.
   −
==Source Code==
  −
SerNet publishes the source code for their latest Samba build at http://ftp.sernet.de/pub/samba/3.5/src/rpm/
  −
  −
Code for older builds is also available at http://ftp.sernet.de/pub/samba/old/src/rpm/
  −
  −
----
   
[[Category:Howto]]
 
[[Category:Howto]]
 
[[Category:Administration]]
 
[[Category:Administration]]

Navigation menu