Hi Ralph,

Just so I understand how far you've got, is it that you've made the registry changes but still can't join workstations to the domain? or that you're not understanding the instructions to edit the registry?

Cheers..... Andy

I have made all windows registry changes but still i can't join workstations to domain....

OK, so what response or error do you get when try and join the domain?

I have done it. But this is the right way, step by step.

1. Perform a clean install from scratch using ClearOS version 7.3

2. Follow the instructions of the installation wizard, select community version.

3. I'm going to use the gateway mode. My server has 2 network cards. A network card is configured for internet access (WAN) with a static ip: 192.168.100.8, gateway: 192.168.100.1. The other network card is configured to access the clients of LAN with a static ip: 10.10.10.1/24, dhcp enabled.

4. My server name, hostname and others are as follows:

installation hostname > gateway.local
domain under installation wizard > example.local
hostname > gateway.local
internet hostname > gateway.local


5. I did not select or install any applications from the ClearOS Marketplace.

6. I allow the initial configuration wizard to finish and restart the computer to register the installation of my machine using the newly created account at ClearCenter.

7. Login to the administration web console from a client machine of the LAN and access to Network - Infrastructure - SSH Server and enable automatically SSH service from Incoming Firewall rules.

8. Install Samba Directory from Marketplace with the following settings:

Windows Domain > EXAMPLE
Realm > EXAMPLE.LOCAL
Server Name > GATEWAY
Home Directories > With Domain - /home/Windows Domain/Username


9. Restart Server!

10. Start an SSH session from a machine connected to the LAN. In my case I will connect from a machine with ip 10.10.10.176 and use the Windows PuTTY Program to start a remote session from the command line as if it were on the server locally.

11. I go to edit the hosts configuration file. I add the last line indicating how to resolve the LAN address of the samba server

# nano /etc/hosts

127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
10.10.10.1 example example.local gateway.example.local

12. I go to edit the samba 4.4.4. configuration file. I added a line to tell the samba server which network interfaces to act on: locally (lo) and the LAN interface (in my case enp1s0f0)

# nano /etc/samba/smb.conf.

# Global parameters
[global]
ldap server require strong auth = No
netbios name = GATEWAY
realm = EXAMPLE.LOCAL
server string = ClearOS
workgroup = EXAMPLE
dns forwarder = 192.168.100.1
interfaces = lo enp1s0f0
utmp = Yes
passwd chat = *password:* %n\n *password:* %n\n *successfully.*
passwd chat timeout = 10
passwd program = /usr/sbin/userpasswd %u
server role = active directory domain controller
template homedir = /home/%WORKGROUP%/%ACCOUNTNAME%
winbind enum groups = Yes
winbind enum users = Yes
winbind expand groups = 1
winbind separator = +
wins support = Yes
idmap_ldb:use rfc2307 = yes

include = /etc/samba/flexshare.conf

[netlogon]
path = /var/lib/samba/sysvol/example.local/scripts
read only = No

[sysvol]
path = /var/lib/samba/sysvol
read only = No

13. Restart the samba server with the command:

#systemctl restart samba.service
#systemctl status samba.service

14. Join a client from a windows 7 / windows 10 machine. Voila!!!

Hi Ralph,

In your re-installation you've chosen to install the single Samba Directory app to achieve your Windows Domain/Networking environment, rather than the Directory Server (OpenLDAP) and the Windows Networking (Samba) apps you originally used.

Please be aware that the Samba Directory app is still in Beta, my understanding is that it doesn't play nicely with some of the other Marketplace apps, so not recommended for a production server.

I’ve not played with the Samba Directory for quite a while so can’t comment on the correctness of your installation procedure, although I’m a little surprised you needed to manually edit the hosts and smb.conf files, but like I said I’ve not played with this for a while.

Cheers.... Andy

This is a four year old thread and posting to it is a bit suspicious. Please start a new thread with your own details, what you have tried and what you have found.