[Samba] Machines randomly kicks out of the domain

Tue Jun 21 05:00:53 MDT 2011

Hello 

Sorry to ask here, but all googeling doesn't helped. We have several samba domains (samba 3.5.6) with ldap backed and windows 7 clients, which worked fine so far. Know we begin to see that random machines begin to kick out of the domain with the error: 

_netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client MBBUCHHALTUNG04 machine account MBBUCHHALTUNG04$ 

Nothing was changed (no updates or anything else) on the client machine nor the samba server. The registry keys for SignOrSeal and StrongKey are already set correctly. I can't see any additional error 

Maybe somebody faced the same problem and give me a hint. Thanks a lot. 

Roland 

The Full log for the login try of the machine is: 

[2011/06/21 11:49:33.372812, 2] passdb/pdb_ldap.c:572(init_sam_from_ldap) 
init_sam_from_ldap: Entry found for user: MBBUCHHALTUNG04$ 
[2011/06/21 11:49:33.372837, 10] passdb/pdb_get_set.c:608(pdb_set_username) 
pdb_set_username: setting username MBBUCHHALTUNG04$, was 
[2011/06/21 11:49:33.372867, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 12 -> now SET 
[2011/06/21 11:49:33.372894, 10] passdb/pdb_get_set.c:631(pdb_set_domain) 
pdb_set_domain: setting domain METHABAU-PUR, was 
[2011/06/21 11:49:33.372908, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) 
element 14 -> now DEFAULT 
[2011/06/21 11:49:33.372922, 10] passdb/pdb_get_set.c:654(pdb_set_nt_username) 
pdb_set_nt_username: setting nt username MBBUCHHALTUNG04$, was 
[2011/06/21 11:49:33.372935, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 15 -> now SET 
[2011/06/21 11:49:33.372952, 10] passdb/pdb_get_set.c:550(pdb_set_user_sid_from_string) 
pdb_set_user_sid_from_string: setting user sid S-1-5-21-2999790742-1775305604-2893609491-1046 
[2011/06/21 11:49:33.372966, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid) 
pdb_set_user_sid: setting user sid S-1-5-21-2999790742-1775305604-2893609491-1046 
[2011/06/21 11:49:33.372981, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 18 -> now SET 
[2011/06/21 11:49:33.372994, 11] passdb/pdb_get_set.c:299(pdb_get_init_flags) 
element 18: SET 
[2011/06/21 11:49:33.373010, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 21 -> now SET 
[2011/06/21 11:49:33.373051, 10] passdb/pdb_get_set.c:677(pdb_set_fullname) 
pdb_set_full_name: setting full name MBBUCHHALTUNG04$, was 
[2011/06/21 11:49:33.373065, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 13 -> now SET 
[2011/06/21 11:49:33.373081, 10] passdb/pdb_get_set.c:746(pdb_set_dir_drive) 
pdb_set_dir_drive: setting dir drive Z:, was NULL 
[2011/06/21 11:49:33.373094, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) 
element 3 -> now DEFAULT 
[2011/06/21 11:49:33.373113, 10] passdb/pdb_get_set.c:770(pdb_set_homedir) 
pdb_set_homedir: setting home dir \\HALLE\Profiles\mbbuchhaltung04_\.9xprofile, was 
[2011/06/21 11:49:33.373127, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) 
element 1 -> now DEFAULT 
[2011/06/21 11:49:33.373144, 10] passdb/pdb_get_set.c:700(pdb_set_logon_script) 
pdb_set_logon_script: setting logon script login.cmd, was 
[2011/06/21 11:49:33.373157, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) 
element 4 -> now DEFAULT 
[2011/06/21 11:49:33.373175, 10] passdb/pdb_get_set.c:723(pdb_set_profile_path) 
pdb_set_profile_path: setting profile path \\HALLE\Profiles\mbbuchhaltung04_, was 
[2011/06/21 11:49:33.373189, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) 
element 2 -> now DEFAULT 
[2011/06/21 11:49:33.373218, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 32 -> now SET 
[2011/06/21 11:49:33.373250, 11] passdb/pdb_ldap.c:4057(ldapsam_get_account_policy) 
ldapsam_get_account_policy: got valid value from cache 
[2011/06/21 11:49:33.373272, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 20 -> now SET 
[2011/06/21 11:49:33.373286, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 16 -> now SET 
[2011/06/21 11:49:33.373298, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 17 -> now SET 
[2011/06/21 11:49:33.373396, 7] passdb/login_cache.c:88(login_cache_read) 
Looking up login cache for user MBBUCHHALTUNG04$ 
[2011/06/21 11:49:33.373415, 7] passdb/login_cache.c:104(login_cache_read) 
No cache entry found 
[2011/06/21 11:49:33.373428, 9] passdb/pdb_ldap.c:1126(init_sam_from_ldap) 
No cache entry, bad count = 0, bad time = 0 
[2011/06/21 11:49:33.373443, 11] passdb/pdb_get_set.c:499(pdb_set_init_flags) 
element 34 -> now CHANGED 
[2011/06/21 11:49:33.373474, 11] passdb/pdb_ldap.c:4057(ldapsam_get_account_policy) 
ldapsam_get_account_policy: got valid value from cache 
[2011/06/21 11:49:33.373493, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) 
element 3: DEFAULT 
[2011/06/21 11:49:33.373506, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) 
element 1: DEFAULT 
[2011/06/21 11:49:33.373519, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) 
element 4: DEFAULT 
[2011/06/21 11:49:33.373531, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) 
element 2: DEFAULT 
[2011/06/21 11:49:33.373558, 11] passdb/pdb_ldap.c:4057(ldapsam_get_account_policy) 
ldapsam_get_account_policy: got valid value from cache 
[2011/06/21 11:49:33.373588, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 5 -> now SET 
[2011/06/21 11:49:33.373602, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 6 -> now SET 
[2011/06/21 11:49:33.373615, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 7 -> now SET 
[2011/06/21 11:49:33.373628, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 8 -> now SET 
[2011/06/21 11:49:33.373640, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 9 -> now SET 
[2011/06/21 11:49:33.373653, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 10 -> now SET 
[2011/06/21 11:49:33.373665, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 21 -> now SET 
[2011/06/21 11:49:33.373678, 10] passdb/pdb_get_set.c:608(pdb_set_username) 
pdb_set_username: setting username MBBUCHHALTUNG04$, was 
[2011/06/21 11:49:33.373691, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 12 -> now SET 
[2011/06/21 11:49:33.373704, 10] passdb/pdb_get_set.c:631(pdb_set_domain) 
pdb_set_domain: setting domain METHABAU-PUR, was 
[2011/06/21 11:49:33.373717, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 14 -> now SET 
[2011/06/21 11:49:33.373730, 10] passdb/pdb_get_set.c:654(pdb_set_nt_username) 
pdb_set_nt_username: setting nt username MBBUCHHALTUNG04$, was 
[2011/06/21 11:49:33.373743, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 15 -> now SET 
[2011/06/21 11:49:33.373756, 10] passdb/pdb_get_set.c:677(pdb_set_fullname) 
pdb_set_full_name: setting full name MBBUCHHALTUNG04$, was 
[2011/06/21 11:49:33.373769, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 13 -> now SET 
[2011/06/21 11:49:33.373785, 10] passdb/pdb_get_set.c:770(pdb_set_homedir) 
pdb_set_homedir: setting home dir \\HALLE\Profiles\mbbuchhaltung04_\.9xprofile, was 
[2011/06/21 11:49:33.373799, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) 
element 1 -> now DEFAULT 
[2011/06/21 11:49:33.373812, 10] passdb/pdb_get_set.c:746(pdb_set_dir_drive) 
pdb_set_dir_drive: setting dir drive Z:, was NULL 
[2011/06/21 11:49:33.373826, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) 
element 3 -> now DEFAULT 
[2011/06/21 11:49:33.373840, 10] passdb/pdb_get_set.c:700(pdb_set_logon_script) 
pdb_set_logon_script: setting logon script login.cmd, was 
[2011/06/21 11:49:33.373853, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) 
element 4 -> now DEFAULT 
[2011/06/21 11:49:33.373868, 10] passdb/pdb_get_set.c:723(pdb_set_profile_path) 
pdb_set_profile_path: setting profile path \\HALLE\Profiles\mbbuchhaltung04_, was 
[2011/06/21 11:49:33.373881, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) 
element 2 -> now DEFAULT 
[2011/06/21 11:49:33.373894, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 22 -> now SET 
[2011/06/21 11:49:33.373907, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 24 -> now SET 
[2011/06/21 11:49:33.373920, 10] passdb/pdb_get_set.c:813(pdb_set_workstations) 
pdb_set_workstations: setting workstations , was 
[2011/06/21 11:49:33.373933, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 23 -> now SET 
[2011/06/21 11:49:33.373946, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 25 -> now SET 
[2011/06/21 11:49:33.373959, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 32 -> now SET 
[2011/06/21 11:49:33.373987, 11] passdb/pdb_ldap.c:4057(ldapsam_get_account_policy) 
ldapsam_get_account_policy: got valid value from cache 
[2011/06/21 11:49:33.374005, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 33 -> now SET 
[2011/06/21 11:49:33.374019, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid) 
pdb_set_user_sid: setting user sid S-1-5-21-2999790742-1775305604-2893609491-1046 
[2011/06/21 11:49:33.374034, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 18 -> now SET 
[2011/06/21 11:49:33.374047, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) 
pdb_set_user_sid_from_rid: 
setting user sid S-1-5-21-2999790742-1775305604-2893609491-1046 from rid 1046 
[2011/06/21 11:49:33.374066, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 16 -> now SET 
[2011/06/21 11:49:33.374086, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 28 -> now SET 
[2011/06/21 11:49:33.374099, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 29 -> now SET 
[2011/06/21 11:49:33.374112, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 30 -> now SET 
[2011/06/21 11:49:33.374124, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 20 -> now SET 
[2011/06/21 11:49:33.374137, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 17 -> now SET 
[2011/06/21 11:49:33.374150, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 26 -> now SET 
[2011/06/21 11:49:33.374164, 10] passdb/pdb_get_set.c:595(pdb_set_group_sid) 
pdb_set_group_sid: setting group sid S-1-5-21-2999790742-1775305604-2893609491-513 
[2011/06/21 11:49:33.374179, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 19 -> now SET 
[2011/06/21 11:49:33.374265, 0] rpc_server/srv_netlog_nt.c:714(_netr_ServerAuthenticate3) 
_netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client MBBUCHHALTUNG04 machine account MBBUCHHALTUNG04$ 