[Pkg-samba-maint] Bug#820981: samba: Credentials chain check failed

[Andrew Bartlett]

On Thu, 2016-04-14 at 11:55 +0200, Denis Witt wrote:
> Package: samba
> Version: 2:3.6.6-6+deb7u9
> Severity: important
> 
> Dear Maintainer,
> *** Please consider answering these questions, where appropriate ***
> 
>    * What led up to the situation?
> 
> Update to samba 3.6.6-6+deb7u9
> 
>    * What exactly did you do (or not do) that was effective (or
>      ineffective)?
> 
> apt-get upgrade
> 
>    * What was the outcome of this action?
> 
> Mac and Linux clients we're unable to connect to the Samba-Server.
> 
> Apr 14 10:10:28 smb smbd[9919]:   rpccli_netlogon_sam_network_logon:
> credentials chain check failed
> Apr 14 10:10:28 smb smbd[9919]: [2016/04/14 10:10:28.633965,  0]
> auth/auth_domain.c:331(domain_client_validate)
> Apr 14 10:10:28 smb smbd[9919]:   domain_client_validate: unable to
> validate password for user xxxxx in domain XXXXX to Domain controller
> XXX.XXXXX.LOCALDOMAIN. Error was NT_STATUS_ACCESS_DENIED
> 
> See also https://unix.stackexchange.com/questions/276379/samba-netlog
> on-creds-server-check-failed-rejecting-auth-request-from-client
> 
>    * What outcome did you expect instead?
> 
> Successful login.

Try running winbindd.  This appears to be a known regression upstream, but running winbindd chooses a much more robust and well-used codepath.

Thanks,

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba