On Thu, 2016-04-14 at 11:55 +0200, Denis Witt wrote: > Package: samba > Version: 2:3.6.6-6+deb7u9 > Severity: important > > Dear Maintainer, > *** Please consider answering these questions, where appropriate *** > > * What led up to the situation? > > Update to samba 3.6.6-6+deb7u9 > > * What exactly did you do (or not do) that was effective (or > ineffective)? > > apt-get upgrade > > * What was the outcome of this action? > > Mac and Linux clients we're unable to connect to the Samba-Server. > > Apr 14 10:10:28 smb smbd[9919]: rpccli_netlogon_sam_network_logon: > credentials chain check failed > Apr 14 10:10:28 smb smbd[9919]: [2016/04/14 10:10:28.633965, 0] > auth/auth_domain.c:331(domain_client_validate) > Apr 14 10:10:28 smb smbd[9919]: domain_client_validate: unable to > validate password for user xxxxx in domain XXXXX to Domain controller > XXX.XXXXX.LOCALDOMAIN. Error was NT_STATUS_ACCESS_DENIED > > See also https://unix.stackexchange.com/questions/276379/samba-netlog > on-creds-server-check-failed-rejecting-auth-request-from-client > > * What outcome did you expect instead? > > Successful login.
Try running winbindd. This appears to be a known regression upstream, but running winbindd chooses a much more robust and well-used codepath. Thanks, Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
