[Pkg-samba-maint] Bug#820982: samba: Trust relationship between Win7 workstation and Samba3 domain lost

[Vladislav Kurz]

Package: samba
Version: 2:3.6.6-6+deb7u9
Followup-For: Bug #820982

Dear Maintainer,

   * What led up to the situation?
   * What exactly did you do (or not do) that was effective (or
     ineffective)?

apt-get upgrade (samba)

   * What was the outcome of this action?

Windows 7 and Windows XP stations cannot authenticate users any more.
(Error messages are not exact - I have czech windows so I try to translate back to english)

Win7: trust relationship between this station and primary domain failed
WinXP: windows cannot log you to doamin, because domain controller is not available, or workstation account was not found.

log.smbd shows this when trying to log from Win7

[2016/04/15 13:31:31.985456,  0] rpc_server/netlogon/srv_netlog_nt.c:976(_netr_ServerAuthenticate3)
  _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client LOPATA machine account LOPATA$

nothing logged when attepting login from win XP

   * What outcome did you expect instead?

Just log in as before the upgrade

I tried installing winbind, but it did not help. Should it be configured somehow?

temporary solution - downgrade

I have a testing environment, so I can provide some debug logs. Please tell me exactly what would be helpful. Samba is usually logging either too much or too little.

Thanks in advance for help
Vladislav Kurz

-- System Information:
Debian Release: 7.10
  APT prefers oldstable-updates
  APT policy: (500, 'oldstable-updates'), (500, 'oldoldstable'), (500, 'oldstable')
Architecture: i386 (i686)

Kernel: Linux 3.2.0-4-686-pae (SMP w/8 CPU cores)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages samba depends on:
ii  adduser                3.113+nmu3
ii  debconf [debconf-2.0]  1.5.49
ii  dpkg                   1.16.17
ii  libacl1                2.2.51-8
ii  libattr1               1:2.4.46-8
ii  libc6                  2.13-38+deb7u10
ii  libcap2                1:2.22-1.2
ii  libcomerr2             1.42.5-1.1+deb7u1
ii  libcups2               1.5.3-5+deb7u6
ii  libgssapi-krb5-2       1.10.1+dfsg-5+deb7u7
ii  libk5crypto3           1.10.1+dfsg-5+deb7u7
ii  libkrb5-3              1.10.1+dfsg-5+deb7u7
ii  libldap-2.4-2          2.4.31-2+deb7u1
ii  libpam-modules         1.1.3-7.1
ii  libpam-runtime         1.1.3-7.1
ii  libpam0g               1.1.3-7.1
ii  libpopt0               1.16-7
ii  libtalloc2             2.1.1-1~bpo70+1
ii  libtdb1                1.2.10-2
ii  libwbclient0           2:3.6.6-6+deb7u9
ii  lsb-base               4.1+Debian8+deb7u1
ii  procps                 1:3.3.3-3
ii  samba-common           2:3.6.6-6+deb7u9
ii  update-inetd           4.43
ii  zlib1g                 1:1.2.7.dfsg-13

Versions of packages samba recommends:
ii  logrotate  3.8.1-4
ii  tdb-tools  1.2.10-2

Versions of packages samba suggests:
pn  ctdb                              <none>
pn  ldb-tools                         <none>
ii  openbsd-inetd [inet-superserver]  0.20091229-2
pn  smbldap-tools                     <none>

-- debconf information:
* samba/log_files_moved:
  samba-common/title:
  samba/nmbd_from_inetd:
* samba/tdbsam: true
* samba/generate_smbpasswd: true
* samba/run_mode: daemons