[Pkg-samba-maint] Bug#820981: samba: Credentials chain check failed

[Petr Jurášek]

Hi,

we have same problem on some servers without winbind. Downgrade samba using:
apt-get install samba=2:3.6.6-6+deb7u7 samba-common=2:3.6.6-6+deb7u7
libwbclient0=2:3.6.6-6+deb7u7 smbclient=2:3.6.6-6+deb7u7

resolve situation.

Versions are same like Gabriele Vivinetto.

Regards
Petr Jurasek

On Fri, 15 Apr 2016 18:12:44 +0200 Gabriele Vivinetto
<gabriele.mailing at rvmgroup.it> wrote:
> Package: samba
> Version: 2:3.6.6-6+deb7u9
> Followup-For: Bug #820981
>
> Dear Maintainer,
> even with winbind installed, running samba as a PDC does not let users
logon
> in the domain.
> Trying to logon with a doman user from a workstation previously joned
to the
> domain gives the error:
> "The trust relationship between this workstation and the primary
domain failed"
>
> Trying to rejoin the domain does not solve this.
>
> Winbind was already installed and running.
>
> I had to downgrade to samba using:
> apt-get install \
> smbclient=2:3.6.6-6+deb7u7 \
> libwbclient0=2:3.6.6-6+deb7u7 \
> samba-common=2:3.6.6-6+deb7u7 \
> samba=2:3.6.6-6+deb7u7 \
> samba-common-bin=2:3.6.6-6+deb7u7 \
> winbind=2:3.6.6-6+deb7u7 \
> libnss-winbind=2:3.6.6-6+deb7u7
>
> After doing this, every user ca logon succesfully to the domain from every
> workstation without any kind of changes locally.
>
> -- System Information:
> Debian Release: 7.10
> APT prefers oldstable-updates
> APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
> Architecture: amd64 (x86_64)
>
> Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
> Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) (ignored: LC_ALL
set to C)
> Shell: /bin/sh linked to /bin/dash
>
> Versions of packages samba depends on:
> ii adduser 3.113+nmu3
> ii debconf [debconf-2.0] 1.5.49
> ii dpkg 1.16.17
> ii libacl1 2.2.51-8
> ii libattr1 1:2.4.46-8
> ii libc6 2.13-38+deb7u10
> ii libcap2 1:2.22-1.2
> ii libcomerr2 1.42.5-1.1+deb7u1
> ii libcups2 1.5.3-5+deb7u6
> ii libgssapi-krb5-2 1.10.1+dfsg-5+deb7u7
> ii libk5crypto3 1.10.1+dfsg-5+deb7u7
> ii libkrb5-3 1.10.1+dfsg-5+deb7u7
> ii libldap-2.4-2 2.4.31-2+deb7u1
> ii libpam-modules 1.1.3-7.1
> ii libpam-runtime 1.1.3-7.1
> ii libpam0g 1.1.3-7.1
> ii libpopt0 1.16-7
> ii libtalloc2 2.0.7+git20120207-1
> ii libtdb1 1.2.10-2
> ii libwbclient0 2:3.6.6-6+deb7u9
> ii lsb-base 4.1+Debian8+deb7u1

-- 
S pozdravem
Petr Jurášek
soLNet s.r.o.