[Samba] Samba4 KDC Windows 7 clients may fail to get a ticket

[Dmitry Khromov]

On Wed, 03 Oct 2012 16:22:27 +1000
Andrew Bartlett <abartlet at samba.org> wrote:
> What happens when this error occurs?  Does something fail on the client?

Error like "cannot establish domain trust" (sorry, it's in Russian) appears on logon screen when you try to log in using any credentials. The client don't even req KDC for user ticket.
 
> Is this only shortly after a machine account password change, and
> pending replication?  Does the client retry with the previous machine
> account password?

No, we hadn't touched these accounts for months already (and had joined Samba DC 5 days ago). By the way, XP stations (we have more XP's than Sevens) are unaffected.

Thank you.

-- 
Best regards,
Dmitry Khromov