Zentyal Forum, Linux Small Business Server

Zentyal Server => Directory and Authentication => Topic started by: emilioortiz on October 06, 2022, 02:36:29 pm

Title: AD Stop Working on Windows 11 22H2
Post by: emilioortiz on October 06, 2022, 02:36:29 pm
I'm using Zentyal 6.2 .
New laptops with Windows 11 Pro 22H2 stop joining domain.
After search It's seems related to Kerberos encryption.
Workaround 1: Upgrade Samba to 4.16 (problem: zentyal 6.2 ships samba 4.7 and zentyal 7.0 ships samba 4.11, ubuntu 22.10 ships samba 4.16)
Workaround 2: In local security policies, network security > allow only DES encryption:
This reenable AD JOIN and Shared Drives but GPO still not working

Is there any workaround to upgrade samba to 4.16 on ubuntu 18.04 or ubuntu 22.04 ?
Title: Re: AD Stop Working on Windows 11 22H2
Post by: peptoniET on October 07, 2022, 11:32:34 am
Same problem here.  This seems huge...
Title: Re: AD Stop Working on Windows 11 22H2
Post by: peptoniET on October 07, 2022, 11:54:59 am
Workaround 2: In local security policies, network security > allow only DES encryption:

Please, could you elaborate on this configuration...? I cannot find the key you mention.
Thanks a lot in advance.
Title: Re: AD Stop Working on Windows 11 22H2
Post by: turalyon on October 07, 2022, 12:53:46 pm
Hi,

The following link explains the path to the Local Security Path. I tested it and it is just a workaround, with that you can join the domain and use the share folders, however, the GPO does not work.

* https://lists.samba.org/archive/samba/2022-April/240502.html

--

“This world is ours, and by the Holy Light we will keep it safe, now and forever".
Title: Re: AD Stop Working on Windows 11 22H2
Post by: peptoniET on October 07, 2022, 04:07:27 pm
Thank you very much.  With the correct path, I found the key.

This is bothering me a lot.  I have more than 10 Zentyal servers, some of them 6.2.

My main concern is the lack of information from the Zentyal developers, and the fact that they answer to every bug in GitHub with "We will add it to the roadmap".  A roadmap for correcting bugs...?  And last commit on GitHub was three months ago...?  They argued they were relocating to the U.S.A... Many months ago.  Very little activity since then.

Zentyal is a more or less reasonable solution.  Far from perfect, quite far...

I never seen a samba version update inside a Zentyal version.  I am afraid we will have this bug lying around for a long time...  I managed to stop my Windows 11 from updating, but only allowed for 5 weeks from now...
Title: Re: AD Stop Working on Windows 11 22H2
Post by: peptoniET on October 07, 2022, 04:18:28 pm
Hi,

The following link explains the path to the Local Security Path. I tested it and it is just a workaround, with that you can join the domain and use the share folders, however, the GPO does not work.

* https://lists.samba.org/archive/samba/2022-April/240502.html

--

“This world is ours, and by the Holy Light we will keep it safe, now and forever".

I can confirm this workaround allow to join a Windows 11 22H2 to a Zentyal 7.0 domain.
Title: Re: AD Stop Working on Windows 11 22H2
Post by: peptoniET on October 07, 2022, 04:33:53 pm
I can also confirm that GPO are not being applied.
Using gpupdate /force returns an error.
Title: Re: AD Stop Working on Windows 11 22H2
Post by: peptoniET on October 07, 2022, 05:40:08 pm
Apparently, dynamic DNS is also not working.  Client cannot update DNS register on Zentyal server (permission denied)
Title: Re: AD Stop Working on Windows 11 22H2
Post by: peptoniET on October 07, 2022, 05:52:02 pm
After joining the domain, network is not identified as "domain" but as "public".  No options to change to "domain", only to change to "private"
Title: Re: AD Stop Working on Windows 11 22H2
Post by: jwilliams1976 on October 08, 2022, 12:16:54 am
I'm on Zentyal 6.1 and was able to join the domain fine but I'm not able to log into the domain account from Win 11? If I log into that machine with a local account I can then access the samba shares by logging in with user@domain but those same credentials will not let me log into the computer. No issues with several machines that where already on the domain with Win 10 and then upgraded to Win 11. This one is a brand new native Win 11 install.

I tried the DES encryption workaround but it made no difference for me. Any other ideas or workarounds?
Title: Re: AD Stop Working on Windows 11 22H2
Post by: peptoniET on October 08, 2022, 06:55:34 pm
The problem seems to be in the Heimdal Kerberos module from samba prior to version 8.0
The problem was corrected in Heimdal version 8.0
Samba 4.16.0 apparently uses Heimdal version 8.0
Zentyal 7.0.2 still uses samba version 4.13.17...
A path to upgrade samba to, at least, 4.16 would be a possible solution.

https://old.reddit.com/r/sysadmin/comments/xoqend/samba_495_windows_11_22h2_kerberos/iq0c2vo/

I opened a bug report on Github.
Title: Re: AD Stop Working on Windows 11 22H2
Post by: mikeinmaine on November 03, 2022, 01:24:39 pm
I know very little but I was able to join my newly upgraded to Win11pro computer to my Zentyal domain and fix the user bad password domain login problem by changing the local security policy encryption.  However, I found this on youtube related to Windows 11 and Zentyal CA certificates. Has anyone tried it?

https://www.youtube.com/watch?v=pme0LcVVQMA
Title: Re: AD Stop Working on Windows 11 22H2
Post by: peptoniET on November 03, 2022, 01:34:28 pm
I know very little but I was able to join my newly upgraded to Win11pro computer to my Zentyal domain and fix the user bad password domain login problem by changing the local security policy encryption.  However, I found this on youtube related to Windows 11 and Zentyal CA certificates. Has anyone tried it?

https://www.youtube.com/watch?v=pme0LcVVQMA

Yes, changing some local policies allows joining the domain, but domain policies are not sinchronized, and workstation DNS records are not updated, and maybe more things don't work.
This video is addressing a different problem.  It was posted 7 mothns ago, before Windows 11 version 22H2, so it is not addressing this problem.

The problem is that Zentyal has been left behind samba updates (samba already addressed and soved this problem at the beginning of 2022).

In Github, the developers argued that they are stuck with ubuntu 20.04 for the samba version.  But they could have done the same as other solutions, like Univention (which I am migrating to.  15 systems), which make WEEKLY updates to their system.

Not to mention the bugs that have been liying for months on github, or the pull requests people made with love, abandoned for years...  This is not proper open source.

For your information, Zentyal developers have already declared that they will not launch a new version of Zentyal until MAY 2023...  Although they claimed to prepare a patch... I really don't know how they will address this, if solution depends on a new version of Samba, which they say cannot be done on current Zentyal 7, based on Ubuntu 20.04

My advice: run away from Zentyal.  As quick as possible.  Don't waste your time on this.  I am a systems administrator.  I know what I am talking about.

Good luck to everyone.
Title: Re: AD Stop Working on Windows 11 22H2
Post by: trashman on November 03, 2022, 04:51:47 pm
I know very little but I was able to join my newly upgraded to Win11pro computer to my Zentyal domain and fix the user bad password domain login problem by changing the local security policy encryption.  However, I found this on youtube related to Windows 11 and Zentyal CA certificates. Has anyone tried it?

https://www.youtube.com/watch?v=pme0LcVVQMA

Yes, changing some local policies allows joining the domain, but domain policies are not sinchronized, and workstation DNS records are not updated, and maybe more things don't work.
This video is addressing a different problem.  It was posted 7 mothns ago, before Windows 11 version 22H2, so it is not addressing this problem.

The problem is that Zentyal has been left behind samba updates (samba already addressed and soved this problem at the beginning of 2022).

In Github, the developers argued that they are stuck with ubuntu 20.04 for the samba version.  But they could have done the same as other solutions, like Univention (which I am migrating to.  15 systems), which make WEEKLY updates to their system.

Not to mention the bugs that have been liying for months on github, or the pull requests people made with love, abandoned for years...  This is not proper open source.

For your information, Zentyal developers have already declared that they will not launch a new version of Zentyal until MAY 2023...  Although they claimed to prepare a patch... I really don't know how they will address this, if solution depends on a new version of Samba, which they say cannot be done on current Zentyal 7, based on Ubuntu 20.04

My advice: run away from Zentyal.  As quick as possible.  Don't waste your time on this.  I am a systems administrator.  I know what I am talking about.

Good luck to everyone.

But what is the alternative ? I really don't want to use windows server so does that mean installing samba etc from scratch.

I have been contemplating rolling out Zentyal - but communication seems spotty and I've noticed a lot of unusual little problems in my testing.

As a concept Zentyal should be a winner, even just as a AD server / File Server which is my own use case, but theres no way I can justify paying for something that is lacking support.

Looks like i'm going to have to look further.

Cheers
Title: Re: AD Stop Working on Windows 11 22H2
Post by: peptoniET on November 03, 2022, 04:58:23 pm
I know very little but I was able to join my newly upgraded to Win11pro computer to my Zentyal domain and fix the user bad password domain login problem by changing the local security policy encryption.  However, I found this on youtube related to Windows 11 and Zentyal CA certificates. Has anyone tried it?

https://www.youtube.com/watch?v=pme0LcVVQMA

Yes, changing some local policies allows joining the domain, but domain policies are not sinchronized, and workstation DNS records are not updated, and maybe more things don't work.
This video is addressing a different problem.  It was posted 7 mothns ago, before Windows 11 version 22H2, so it is not addressing this problem.

The problem is that Zentyal has been left behind samba updates (samba already addressed and soved this problem at the beginning of 2022).

In Github, the developers argued that they are stuck with ubuntu 20.04 for the samba version.  But they could have done the same as other solutions, like Univention (which I am migrating to.  15 systems), which make WEEKLY updates to their system.

Not to mention the bugs that have been liying for months on github, or the pull requests people made with love, abandoned for years...  This is not proper open source.

For your information, Zentyal developers have already declared that they will not launch a new version of Zentyal until MAY 2023...  Although they claimed to prepare a patch... I really don't know how they will address this, if solution depends on a new version of Samba, which they say cannot be done on current Zentyal 7, based on Ubuntu 20.04

My advice: run away from Zentyal.  As quick as possible.  Don't waste your time on this.  I am a systems administrator.  I know what I am talking about.

Good luck to everyone.

But what is the alternative ? I really don't want to use windows server so does that mean installing samba etc from scratch.

I have been contemplating rolling out Zentyal - but communication seems spotty and I've noticed a lot of unusual little problems in my testing.

As a concept Zentyal should be a winner, even just as a AD server / File Server which is my own use case, but theres no way I can justify paying for something that is lacking support.

Looks like i'm going to have to look further.

Cheers

Hi,

For me, after a long research, feature and process testing, and more than 20 lab test migrations of my current systems (and after completing the first production transparent migration), my alternative is Univention (https://www.univention.com/).

Univention even has a plugin called adtakeover, that can migrate a whole domain (users, groups, passwords, etc.)
Title: Re: AD Stop Working on Windows 11 22H2
Post by: Daniel Joven on November 03, 2022, 05:22:40 pm
Hello guys,

We have written a new entry in the official documentation where we propose a workaround until Zentyal 8.0 is released or Samba fixes the bug in Ubuntu 20.04. Below you have the links:

* English: https://doc.zentyal.org/en/workaround-windows11.html
* Spanish: https://doc.zentyal.org/es/workaround-windows11.html

For more information about the status of this issue and the comments from peptoniET, please, read the following answers.

* https://github.com/zentyal/zentyal/issues/2106#issuecomment-1302325083
* https://github.com/zentyal/zentyal/issues/2106#issuecomment-1302340821

Best regards, Daniel Joven.
Title: Re: AD Stop Working on Windows 11 22H2
Post by: fmoreira86 on November 05, 2022, 07:12:52 pm
Hello,

I just configured my own Ubuntu Servers with Samba 4.17.2.

You have good documentation here:

https://samba.tranquil.it/doc/en/samba_config_server/samba_conf_index.html#samba-ad-under-debian

And if you use Ubuntu Server 22.02 like I do, you can use this repo:

https://launchpad.net/~linux-schools/+archive/ubuntu/samba-latest

So this is my goodbye to Zentyal as, in fact, I prefer my own configurations and to have a better control.

Thank you everyone!

Title: Re: AD Stop Working on Windows 11 22H2
Post by: Kevinsky86 on November 07, 2022, 12:20:12 pm
Hello guys,

We have written a new entry in the official documentation where we propose a workaround until Zentyal 8.0 is released or Samba fixes the bug in Ubuntu 20.04. Below you have the links:

* English: https://doc.zentyal.org/en/workaround-windows11.html
* Spanish: https://doc.zentyal.org/es/workaround-windows11.html

For more information about the status of this issue and the comments from peptoniET, please, read the following answers.

* https://github.com/zentyal/zentyal/issues/2106#issuecomment-1302325083
* https://github.com/zentyal/zentyal/issues/2106#issuecomment-1302340821

Best regards, Daniel Joven.

So the workaround involves setting up an entire extra domain controller?
That seems more then a little ham-fisted to me.  :)

Samba cannot be just updated for this on a component level?

There's talk on backporting the fix on ubuntu:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1993934
We need to wait for this?

What is the timeline on Zentyal 8 currently?

I'm running into this right now but am currently just electing not to update to W11 22h2. I really feel there has to be a better way.
Title: Re: AD Stop Working on Windows 11 22H2
Post by: Daniel Joven on November 10, 2022, 10:24:01 am
Hi guys,

We have added an additional workaround in the documentation that allows upgrading Samba to 4.16. As you will see, this workaround is easier than the other but it has some points to consider.

So, all of you have two ways to approach this bug and it depends on you what way you chose.

Thank you for your feedback.

Best regards, Daniel Joven.
Title: Re: AD Stop Working on Windows 11 22H2
Post by: ovecka on November 18, 2022, 07:52:43 pm
Hi,

For me, after a long research, feature and process testing, and more than 20 lab test migrations of my current systems (and after completing the first production transparent migration), my alternative is Univention (https://www.univention.com/).

Univention even has a plugin called adtakeover, that can migrate a whole domain (users, groups, passwords, etc.)

On their forums I noticed that you had some issues with the migration to Univention. You got no response there. Did you solve those issues? And if you did then how?
Title: Re: AD Stop Working on Windows 11 22H2
Post by: peptoniET on November 23, 2022, 07:07:35 am
Hi,

For me, after a long research, feature and process testing, and more than 20 lab test migrations of my current systems (and after completing the first production transparent migration), my alternative is Univention (https://www.univention.com/).

Univention even has a plugin called adtakeover, that can migrate a whole domain (users, groups, passwords, etc.)
On their forums I noticed that you had some issues with the migration to Univention. You got no response there. Did you solve those issues? And if you did then how?

Hi, sorry for the delay.  I don't monitor this forum anymore...

Sure, I just made a simple script to correct the homedirectory attribute after migrating to Univention.  Just delete the attribute, save, insert attribute, save.

Title: Re: AD Stop Working on Windows 11 22H2
Post by: pcready.cl on November 27, 2022, 11:03:54 am
Hello guys,

We have written a new entry in the official documentation where we propose a workaround until Zentyal 8.0 is released or Samba fixes the bug in Ubuntu 20.04. Below you have the links:

* English: https://doc.zentyal.org/en/workaround-windows11.html
* Spanish: https://doc.zentyal.org/es/workaround-windows11.html

For more information about the status of this issue and the comments from peptoniET, please, read the following answers.

* https://github.com/zentyal/zentyal/issues/2106#issuecomment-1302325083
* https://github.com/zentyal/zentyal/issues/2106#issuecomment-1302340821

Best regards, Daniel Joven.

So the workaround involves setting up an entire extra domain controller?
That seems more then a little ham-fisted to me.  :)

Samba cannot be just updated for this on a component level?

There's talk on backporting the fix on ubuntu:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1993934
We need to wait for this?

What is the timeline on Zentyal 8 currently?

I'm running into this right now but am currently just electing not to update to W11 22h2. I really feel there has to be a better way.

https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1993934

Works like a charm, ty :D

(https://nc.pcready.me:10443/s/Qwb4fRSJsdTdWtd/preview)
Title: Re: AD Stop Working on Windows 11 22H2
Post by: Kevinsky86 on December 19, 2022, 06:20:21 pm
See that mentioned package on launchpad 2:4.13.17~dfsg-0ubuntu1.20.04.2 is offered as update to Zentyal. (7 and 6)
Will test this out of production hours.
Title: Re: AD Stop Working on Windows 11 22H2
Post by: pcready.cl on December 19, 2022, 06:34:46 pm
See that mentioned package on launchpad 2:4.13.17~dfsg-0ubuntu1.20.04.2 is offered as update to Zentyal. (7 and 6)
Will test this out of production hours.

Samba Package?
Title: Re: AD Stop Working on Windows 11 22H2
Post by: peptoniET on December 19, 2022, 06:38:28 pm
Hello guys,

We have written a new entry in the official documentation where we propose a workaround until Zentyal 8.0 is released or Samba fixes the bug in Ubuntu 20.04. Below you have the links:

* English: https://doc.zentyal.org/en/workaround-windows11.html
* Spanish: https://doc.zentyal.org/es/workaround-windows11.html

For more information about the status of this issue and the comments from peptoniET, please, read the following answers.

* https://github.com/zentyal/zentyal/issues/2106#issuecomment-1302325083
* https://github.com/zentyal/zentyal/issues/2106#issuecomment-1302340821

Best regards, Daniel Joven.

So the workaround involves setting up an entire extra domain controller?
That seems more then a little ham-fisted to me.  :)

Samba cannot be just updated for this on a component level?

There's talk on backporting the fix on ubuntu:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1993934
We need to wait for this?

What is the timeline on Zentyal 8 currently?

I'm running into this right now but am currently just electing not to update to W11 22h2. I really feel there has to be a better way.

https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1993934

Works like a charm, ty :D

(https://nc.pcready.me:10443/s/Qwb4fRSJsdTdWtd/preview)

Hi,

Did you just join the domain, or have you made a comprehensive test with GPO, Shares, Permissions, domain replication, etc.?

thank you.
Title: Re: AD Stop Working on Windows 11 22H2
Post by: pcready.cl on December 19, 2022, 06:43:48 pm
Hello guys,

We have written a new entry in the official documentation where we propose a workaround until Zentyal 8.0 is released or Samba fixes the bug in Ubuntu 20.04. Below you have the links:

* English: https://doc.zentyal.org/en/workaround-windows11.html
* Spanish: https://doc.zentyal.org/es/workaround-windows11.html

For more information about the status of this issue and the comments from peptoniET, please, read the following answers.

* https://github.com/zentyal/zentyal/issues/2106#issuecomment-1302325083
* https://github.com/zentyal/zentyal/issues/2106#issuecomment-1302340821

Best regards, Daniel Joven.

So the workaround involves setting up an entire extra domain controller?
That seems more then a little ham-fisted to me.  :)

Samba cannot be just updated for this on a component level?

There's talk on backporting the fix on ubuntu:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1993934
We need to wait for this?

What is the timeline on Zentyal 8 currently?

I'm running into this right now but am currently just electing not to update to W11 22h2. I really feel there has to be a better way.

https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1993934

Works like a charm, ty :D

(https://nc.pcready.me:10443/s/Qwb4fRSJsdTdWtd/preview)

Hi,

Did you just join the domain, or have you made a comprehensive test with GPO, Shares, Permissions, domain replication, etc.?

thank you.

I do the test, the only you can't do it is change password vía ctrl + alt  + del.
Title: Re: AD Stop Working on Windows 11 22H2
Post by: Daniel Joven on December 20, 2022, 01:51:40 pm
Hi,

I just want to inform you that Ubuntu has released the packages that fix the Windows 11 bug with Samba, so if you did not apply any of the proposal workarounds, you just need to update your system packages.

Best regards, Daniel Joven.
Title: Re: AD Stop Working on Windows 11 22H2
Post by: Kevinsky86 on December 21, 2022, 10:03:03 am
Hi,

I just want to inform you that Ubuntu has released the packages that fix the Windows 11 bug with Samba, so if you did not apply any of the proposal workarounds, you just need to update your system packages.

Best regards, Daniel Joven.

Yes I can confirm Samba update installed and then 22h2 works fine, never applied any workarounds.
Title: Re: AD Stop Working on Windows 11 22H2
Post by: fmoreira86 on December 21, 2022, 09:44:22 pm
Yep!

I also confirm!


Title: Re: AD Stop Working on Windows 11 22H2
Post by: Lexa6283 on December 27, 2022, 04:27:57 pm
I commented out the repositories that I added for the initial workaround, once Samba level catches up to that level, it will resume keeping up to date? anything else I should do other than comment out the repositories?
Title: Re: AD Stop Working on Windows 11 22H2
Post by: Kerni on December 27, 2022, 07:48:54 pm
Good question. If I used solution with upgrade Samba. What is the safety way to get back original Zentyal version?
Title: Re: AD Stop Working on Windows 11 22H2
Post by: Lexa6283 on January 02, 2023, 09:52:14 pm
@Zentyal Can you please provide instruction to roll back Samba before the modifications? Since using the modification, I can no longer access DNS or the Users module in Zentyal Web portal. Just tells me "Sorry, element not found"
Title: Re: AD Stop Working on Windows 11 22H2
Post by: pcready.cl on January 02, 2023, 09:57:13 pm
@Zentyal Can you please provide instruction to roll back Samba before the modifications? Since using the modification, I can no longer access DNS or the Users module in Zentyal Web portal. Just tells me "Sorry, element not found"

The best thing in these cases if you have a VM with Zentyal is to load a snapshot prior to the changes, if you have a backup of the configuration it is to format the server and load the backup. If you don't have any of the above, I doubt Zentyal support will help you.

As a last option, put the repositories back to default, install the missing modules on the same machine and load a backup.
Title: Re: AD Stop Working on Windows 11 22H2
Post by: Kerni on January 16, 2023, 07:52:07 am
"As a last option, put the repositories back to default."

What is the correct way to do it? I do not know Linux very well.
Title: Re: AD Stop Working on Windows 11 22H2
Post by: des on January 26, 2023, 02:12:19 pm
Hi everybody,

I have also the same problem - i have not applied those workarounds, and after Zentyal 7 samba package update i cannot log into my Zentyal Domain.

Does anyone had the same problem ?

My windows was connected and RSAT/GPO was working, until i started to upgrade my Win11 to 22H2. After that i brokes.


I had another machine (Windows 10 21h1 - upgraded to Win10 22h2) which was not connected to Zentyal AD which I have successfully joined to my domain. But after restart it says that my username and password is wrong.


Does anybody has the same problems ? Or my AD is broken ?
Title: Re: AD Stop Working on Windows 11 22H2
Post by: pcready.cl on January 26, 2023, 02:15:32 pm
Hi everybody,

I have also the same problem - i have not applied those workarounds, and after Zentyal 7 samba package update i cannot log into my Zentyal Domain.

Does anyone had the same problem ?

My windows was connected and RSAT/GPO was working, until i started to upgrade my Win11 to 22H2. After that i brokes.


I had another machine (Windows 10 21h1 - upgraded to Win10 22h2) which was not connected to Zentyal AD which I have successfully joined to my domain. But after restart it says that my username and password is wrong.


Does anybody has the same problems ? Or my AD is broken ?

Hi, just need to update Zentyal to last debs vía web-gui or apt. Do you ready on that?
Title: Re: AD Stop Working on Windows 11 22H2
Post by: des on January 26, 2023, 02:31:11 pm
Hi everybody,

I have also the same problem - i have not applied those workarounds, and after Zentyal 7 samba package update i cannot log into my Zentyal Domain.

Does anyone had the same problem ?

My windows was connected and RSAT/GPO was working, until i started to upgrade my Win11 to 22H2. After that i brokes.


I had another machine (Windows 10 21h1 - upgraded to Win10 22h2) which was not connected to Zentyal AD which I have successfully joined to my domain. But after restart it says that my username and password is wrong.


Does anybody has the same problems ? Or my AD is broken ?

Hi, just need to update Zentyal to last debs vía web-gui or apt. Do you ready on that?

Yes, i have done the upgrades yesterday via web-gui and it works - I have seen that there where updates for samba, and that was the reaseon I have updated it.
Title: Re: AD Stop Working on Windows 11 22H2
Post by: Daniel Joven on January 27, 2023, 12:55:54 pm
Hi,

Apparently, there were multiple regressions with one of the latest updates of Samba as the following link shows. If your Zentyal 7.0 server is up-date, your Samba version should be '2:4.13.17~dfsg-0ubuntu1.20.04.5' and the issue should be fixed.

* https://launchpad.net/ubuntu/+source/samba/+changelog

Best regards, Daniel Joven.
Title: Re: AD Stop Working on Windows 11 22H2
Post by: des on January 27, 2023, 01:19:17 pm
Hi,

Apparently, there were multiple regressions with one of the latest updates of Samba as the following link shows. If your Zentyal 7.0 server is up-date, your Samba version should be '2:4.13.17~dfsg-0ubuntu1.20.04.5' and the issue should be fixed.

* https://launchpad.net/ubuntu/+source/samba/+changelog

Best regards, Daniel Joven.

Hi thank you for the tip ;)

I have successfully updated my two Zentyal 7 servers.
The laptop with Win10 Pro 22h2 logged into the AD.

I will let you know if the RSAT and other Win tool are working properly

Thanks!
Title: Re: AD Stop Working on Windows 11 22H2
Post by: des on January 31, 2023, 03:53:01 pm
FYI - Everything is working now!
Title: Re: AD Stop Working on Windows 11 22H2
Post by: HaileeBlanchard on September 05, 2023, 11:40:31 am
It seems the problem could be tied to Kerberos encryption. Your workarounds are solid, though they come with their own quirks. Upgrading Samba to 4.16 sounds promising, but the version clashes are a bummer. And tweaking local security policies might help partially.
As for upgrading Samba to 4.16 on Ubuntu, it's a bit of a challenge due to the version compatibility. You might want to explore Ubuntu 22.04, which might have better compatibility.
On a side note, you might find some valuable insights on the cheap Windows 10 key (https://www.reddit.com/r/cheapwindowskeys/comments/wjvsae/cheap_windows_keys/) Reddit sub. They occasionally share useful tips that could align with your situation. Hopefully, a combination of technical fixes and community advice can get your setup back on track.
Title: Re: AD Stop Working on Windows 11 22H2
Post by: killmasta93 on September 22, 2023, 03:18:44 am
HI guys can someone confirm if this works? https://doc.zentyal.org/7.0/en/workaround-windows11.html

as it was working few months ago but i try today im getting this

Code: [Select]
Ign:11 http://www.corpit.ru/mjt/packages/samba ubuntu-20.04-focal/samba-4.16/ Sources
Ign:12 http://www.corpit.ru/mjt/packages/samba ubuntu-20.04-focal/samba-4.16/ Packages
Ign:13 http://www.corpit.ru/mjt/packages/samba ubuntu-20.04-focal/samba-4.16/ Translation-en
Ign:11 http://www.corpit.ru/mjt/packages/samba ubuntu-20.04-focal/samba-4.16/ Sources
Ign:12 http://www.corpit.ru/mjt/packages/samba ubuntu-20.04-focal/samba-4.16/ Packages
Ign:13 http://www.corpit.ru/mjt/packages/samba ubuntu-20.04-focal/samba-4.16/ Translation-en
Ign:11 http://www.corpit.ru/mjt/packages/samba ubuntu-20.04-focal/samba-4.16/ Sources
Ign:12 http://www.corpit.ru/mjt/packages/samba ubuntu-20.04-focal/samba-4.16/ Packages
Ign:13 http://www.corpit.ru/mjt/packages/samba ubuntu-20.04-focal/samba-4.16/ Translation-en
Ign:11 http://www.corpit.ru/mjt/packages/samba ubuntu-20.04-focal/samba-4.16/ Sources
Ign:12 http://www.corpit.ru/mjt/packages/samba ubuntu-20.04-focal/samba-4.16/ Packages
Ign:13 http://www.corpit.ru/mjt/packages/samba ubuntu-20.04-focal/samba-4.16/ Translation-en
Ign:11 http://www.corpit.ru/mjt/packages/samba ubuntu-20.04-focal/samba-4.16/ Sources
Ign:12 http://www.corpit.ru/mjt/packages/samba ubuntu-20.04-focal/samba-4.16/ Packages
Ign:13 http://www.corpit.ru/mjt/packages/samba ubuntu-20.04-focal/samba-4.16/ Translation-en
Ign:11 http://www.corpit.ru/mjt/packages/samba ubuntu-20.04-focal/samba-4.16/ Sources
Ign:12 http://www.corpit.ru/mjt/packages/samba ubuntu-20.04-focal/samba-4.16/ Packages
Ign:13 http://www.corpit.ru/mjt/packages/samba ubuntu-20.04-focal/samba-4.16/ Translation-en
Err:11 http://www.corpit.ru/mjt/packages/samba ubuntu-20.04-focal/samba-4.16/ Sources
  404  Not Found [IP: 86.62.121.231 80]
Ign:12 http://www.corpit.ru/mjt/packages/samba ubuntu-20.04-focal/samba-4.16/ Packages
Ign:13 http://www.corpit.ru/mjt/packages/samba ubuntu-20.04-focal/samba-4.16/ Translation-en
Reading package lists... Done
E: Failed to fetch http://www.corpit.ru/mjt/packages/samba/ubuntu-20.04-focal/samba-4.16/Sources  404  Not Found [IP: 86.62.121.231 80]
E: Some index files failed to download. They have been ignored, or old ones used instead.