failed to establish trust relationship with domain controller

[denis.shigapov]

Hi, Im using windows DC 2008 and samba DC (4.6.7), and 
there are problems with samba, users can not log in, if you turn off
the samba, the error disappears and users can work

[2017/09/07 10:49:33.129547,  3]
../source4/smbd/service_stream.c:66(stream_terminate_connection)
  Terminating connection - 'kdc_tcp_call_loop:
tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED'
[2017/09/07 10:49:33.129576,  3]
../source4/smbd/process_single.c:114(single_terminate)
  single_terminate: reason[kdc_tcp_call_loop:
tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED]
[2017/09/07 10:49:33.147754,  3]
../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: AS-REQ pc_user1$@EURO.RU from ipv4:10.2.0.54:53026 for krbt
gt/EURO.RU at EURO.RU
[2017/09/07 10:49:33.151123,  3]
../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: Client sent patypes: encrypted-timestamp, 128
[2017/09/07 10:49:33.151149,  3]
../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: Looking for PKINIT pa-data -- pc_user1$@EURO.RU
[2017/09/07 10:49:33.151164,  3]
../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: Looking for ENC-TS pa-data -- pc_user1$@EURO.RU
[2017/09/07 10:49:33.151237,  3]
../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: Failed to decrypt PA-DATA -- pc_user1$@EURO.RU (enctype
aes256-cts-hmac-sha1-96) error Decrypt integrity check failed for
checksum type hmac-sha1-96-aes256, key type aes256-cts-hmac-sha1-96
[2017/09/07 10:49:33.280382,  3]
../source4/smbd/service_stream.c:66(stream_terminate_connection)
  Terminating connection - 'dcesrv: NT_STATUS_CONNECTION_DISCONNECTED'
[2017/09/07 10:49:33.280469,  3]
../source4/smbd/process_single.c:114(single_terminate)
  single_terminate: reason[dcesrv: NT_STATUS_CONNECTION_DISCONNECTED]
[2017/09/07 10:49:33.320905,  3]
../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: Failed to decrypt PA-DATA -- pc_user1$@EURO.RU