[Samba] Machines randomly kicks out of the domain

Roland Kaeser roland.kaeser at ziil.ch
Tue Jun 21 06:15:03 MDT 2011 

Hello All 


Thanks very much for the great hints! I would have never thought about that in 100years! 
We just made the changes to the workstations and added a hack to our unattended setup. 
Thank You all. 


Regards 


Roland 


----- Ursprüngliche Mail -----
Von: "Daniel Müller" <mueller at tropenklinik.de> 
An: "Roland Kaeser" <roland.kaeser at ziil.ch>, samba at lists.samba.org 
Gesendet: Dienstag, 21. Juni 2011 13:31:37 
Betreff: AW: [Samba] Machines randomly kicks out of the domain 

Hello, 

Try 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Netlogon\Parameters] 
"Update"="no" 

On your Win7 clients. We had the same issue solved by doing this. 

----------------------------------------------- 
EDV Daniel Müller 

Leitung EDV 
Tropenklinik Paul-Lechler-Krankenhaus 
Paul-Lechler-Str. 24 
72076 Tübingen 

Tel.: 07071/206-463, Fax: 07071/206-499 
eMail: mueller at tropenklinik.de 
Internet: www.tropenklinik.de 
----------------------------------------------- 

-----Ursprüngliche Nachricht----- 
Von: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org] Im 
Auftrag von Roland Kaeser 
Gesendet: Dienstag, 21. Juni 2011 13:01 
An: samba at lists.samba.org 
Betreff: [Samba] Machines randomly kicks out of the domain 




Hello 

Sorry to ask here, but all googeling doesn't helped. We have several samba 
domains (samba 3.5.6) with ldap backed and windows 7 clients, which worked 
fine so far. Know we begin to see that random machines begin to kick out of 
the domain with the error: 


_netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting 
auth request from client MBBUCHHALTUNG04 machine account MBBUCHHALTUNG04$ 

Nothing was changed (no updates or anything else) on the client machine nor 
the samba server. The registry keys for SignOrSeal and StrongKey are already 
set correctly. I can't see any additional error 

Maybe somebody faced the same problem and give me a hint. Thanks a lot. 

Roland 


The Full log for the login try of the machine is: 


[2011/06/21 11:49:33.372812, 2] passdb/pdb_ldap.c:572(init_sam_from_ldap) 
init_sam_from_ldap: Entry found for user: MBBUCHHALTUNG04$ 
[2011/06/21 11:49:33.372837, 10] passdb/pdb_get_set.c:608(pdb_set_username) 
pdb_set_username: setting username MBBUCHHALTUNG04$, was 
[2011/06/21 11:49:33.372867, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 12 -> now SET 
[2011/06/21 11:49:33.372894, 10] passdb/pdb_get_set.c:631(pdb_set_domain) 
pdb_set_domain: setting domain METHABAU-PUR, was 
[2011/06/21 11:49:33.372908, 11] 
passdb/pdb_get_set.c:522(pdb_set_init_flags) 
element 14 -> now DEFAULT 
[2011/06/21 11:49:33.372922, 10] 
passdb/pdb_get_set.c:654(pdb_set_nt_username) 
pdb_set_nt_username: setting nt username MBBUCHHALTUNG04$, was 
[2011/06/21 11:49:33.372935, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 15 -> now SET 
[2011/06/21 11:49:33.372952, 10] 
passdb/pdb_get_set.c:550(pdb_set_user_sid_from_string) 
pdb_set_user_sid_from_string: setting user sid 
S-1-5-21-2999790742-1775305604-2893609491-1046 
[2011/06/21 11:49:33.372966, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid) 
pdb_set_user_sid: setting user sid 
S-1-5-21-2999790742-1775305604-2893609491-1046 
[2011/06/21 11:49:33.372981, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 18 -> now SET 
[2011/06/21 11:49:33.372994, 11] 
passdb/pdb_get_set.c:299(pdb_get_init_flags) 
element 18: SET 
[2011/06/21 11:49:33.373010, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 21 -> now SET 
[2011/06/21 11:49:33.373051, 10] passdb/pdb_get_set.c:677(pdb_set_fullname) 
pdb_set_full_name: setting full name MBBUCHHALTUNG04$, was 
[2011/06/21 11:49:33.373065, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 13 -> now SET 
[2011/06/21 11:49:33.373081, 10] passdb/pdb_get_set.c:746(pdb_set_dir_drive) 

pdb_set_dir_drive: setting dir drive Z:, was NULL 
[2011/06/21 11:49:33.373094, 11] 
passdb/pdb_get_set.c:522(pdb_set_init_flags) 
element 3 -> now DEFAULT 
[2011/06/21 11:49:33.373113, 10] passdb/pdb_get_set.c:770(pdb_set_homedir) 
pdb_set_homedir: setting home dir 
\\HALLE\Profiles\mbbuchhaltung04_\.9xprofile, was 
[2011/06/21 11:49:33.373127, 11] 
passdb/pdb_get_set.c:522(pdb_set_init_flags) 
element 1 -> now DEFAULT 
[2011/06/21 11:49:33.373144, 10] 
passdb/pdb_get_set.c:700(pdb_set_logon_script) 
pdb_set_logon_script: setting logon script login.cmd, was 
[2011/06/21 11:49:33.373157, 11] 
passdb/pdb_get_set.c:522(pdb_set_init_flags) 
element 4 -> now DEFAULT 
[2011/06/21 11:49:33.373175, 10] 
passdb/pdb_get_set.c:723(pdb_set_profile_path) 
pdb_set_profile_path: setting profile path 
\\HALLE\Profiles\mbbuchhaltung04_, was 
[2011/06/21 11:49:33.373189, 11] 
passdb/pdb_get_set.c:522(pdb_set_init_flags) 
element 2 -> now DEFAULT 
[2011/06/21 11:49:33.373218, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 32 -> now SET 
[2011/06/21 11:49:33.373250, 11] 
passdb/pdb_ldap.c:4057(ldapsam_get_account_policy) 
ldapsam_get_account_policy: got valid value from cache 
[2011/06/21 11:49:33.373272, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 20 -> now SET 
[2011/06/21 11:49:33.373286, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 16 -> now SET 
[2011/06/21 11:49:33.373298, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 17 -> now SET 
[2011/06/21 11:49:33.373396, 7] passdb/login_cache.c:88(login_cache_read) 
Looking up login cache for user MBBUCHHALTUNG04$ 
[2011/06/21 11:49:33.373415, 7] passdb/login_cache.c:104(login_cache_read) 
No cache entry found 
[2011/06/21 11:49:33.373428, 9] passdb/pdb_ldap.c:1126(init_sam_from_ldap) 
No cache entry, bad count = 0, bad time = 0 
[2011/06/21 11:49:33.373443, 11] 
passdb/pdb_get_set.c:499(pdb_set_init_flags) 
element 34 -> now CHANGED 
[2011/06/21 11:49:33.373474, 11] 
passdb/pdb_ldap.c:4057(ldapsam_get_account_policy) 
ldapsam_get_account_policy: got valid value from cache 
[2011/06/21 11:49:33.373493, 11] 
passdb/pdb_get_set.c:309(pdb_get_init_flags) 
element 3: DEFAULT 
[2011/06/21 11:49:33.373506, 11] 
passdb/pdb_get_set.c:309(pdb_get_init_flags) 
element 1: DEFAULT 
[2011/06/21 11:49:33.373519, 11] 
passdb/pdb_get_set.c:309(pdb_get_init_flags) 
element 4: DEFAULT 
[2011/06/21 11:49:33.373531, 11] 
passdb/pdb_get_set.c:309(pdb_get_init_flags) 
element 2: DEFAULT 
[2011/06/21 11:49:33.373558, 11] 
passdb/pdb_ldap.c:4057(ldapsam_get_account_policy) 
ldapsam_get_account_policy: got valid value from cache 
[2011/06/21 11:49:33.373588, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 5 -> now SET 
[2011/06/21 11:49:33.373602, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 6 -> now SET 
[2011/06/21 11:49:33.373615, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 7 -> now SET 
[2011/06/21 11:49:33.373628, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 8 -> now SET 
[2011/06/21 11:49:33.373640, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 9 -> now SET 
[2011/06/21 11:49:33.373653, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 10 -> now SET 
[2011/06/21 11:49:33.373665, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 21 -> now SET 
[2011/06/21 11:49:33.373678, 10] passdb/pdb_get_set.c:608(pdb_set_username) 
pdb_set_username: setting username MBBUCHHALTUNG04$, was 
[2011/06/21 11:49:33.373691, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 12 -> now SET 
[2011/06/21 11:49:33.373704, 10] passdb/pdb_get_set.c:631(pdb_set_domain) 
pdb_set_domain: setting domain METHABAU-PUR, was 
[2011/06/21 11:49:33.373717, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 14 -> now SET 
[2011/06/21 11:49:33.373730, 10] 
passdb/pdb_get_set.c:654(pdb_set_nt_username) 
pdb_set_nt_username: setting nt username MBBUCHHALTUNG04$, was 
[2011/06/21 11:49:33.373743, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 15 -> now SET 
[2011/06/21 11:49:33.373756, 10] passdb/pdb_get_set.c:677(pdb_set_fullname) 
pdb_set_full_name: setting full name MBBUCHHALTUNG04$, was 
[2011/06/21 11:49:33.373769, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 13 -> now SET 
[2011/06/21 11:49:33.373785, 10] passdb/pdb_get_set.c:770(pdb_set_homedir) 
pdb_set_homedir: setting home dir 
\\HALLE\Profiles\mbbuchhaltung04_\.9xprofile, was 
[2011/06/21 11:49:33.373799, 11] 
passdb/pdb_get_set.c:522(pdb_set_init_flags) 
element 1 -> now DEFAULT 
[2011/06/21 11:49:33.373812, 10] passdb/pdb_get_set.c:746(pdb_set_dir_drive) 

pdb_set_dir_drive: setting dir drive Z:, was NULL 
[2011/06/21 11:49:33.373826, 11] 
passdb/pdb_get_set.c:522(pdb_set_init_flags) 
element 3 -> now DEFAULT 
[2011/06/21 11:49:33.373840, 10] 
passdb/pdb_get_set.c:700(pdb_set_logon_script) 
pdb_set_logon_script: setting logon script login.cmd, was 
[2011/06/21 11:49:33.373853, 11] 
passdb/pdb_get_set.c:522(pdb_set_init_flags) 
element 4 -> now DEFAULT 
[2011/06/21 11:49:33.373868, 10] 
passdb/pdb_get_set.c:723(pdb_set_profile_path) 
pdb_set_profile_path: setting profile path 
\\HALLE\Profiles\mbbuchhaltung04_, was 
[2011/06/21 11:49:33.373881, 11] 
passdb/pdb_get_set.c:522(pdb_set_init_flags) 
element 2 -> now DEFAULT 
[2011/06/21 11:49:33.373894, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 22 -> now SET 
[2011/06/21 11:49:33.373907, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 24 -> now SET 
[2011/06/21 11:49:33.373920, 10] 
passdb/pdb_get_set.c:813(pdb_set_workstations) 
pdb_set_workstations: setting workstations , was 
[2011/06/21 11:49:33.373933, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 23 -> now SET 
[2011/06/21 11:49:33.373946, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 25 -> now SET 
[2011/06/21 11:49:33.373959, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 32 -> now SET 
[2011/06/21 11:49:33.373987, 11] 
passdb/pdb_ldap.c:4057(ldapsam_get_account_policy) 
ldapsam_get_account_policy: got valid value from cache 
[2011/06/21 11:49:33.374005, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 33 -> now SET 
[2011/06/21 11:49:33.374019, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid) 
pdb_set_user_sid: setting user sid 
S-1-5-21-2999790742-1775305604-2893609491-1046 
[2011/06/21 11:49:33.374034, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 18 -> now SET 
[2011/06/21 11:49:33.374047, 10] 
passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) 
pdb_set_user_sid_from_rid: 
setting user sid S-1-5-21-2999790742-1775305604-2893609491-1046 from rid 
1046 
[2011/06/21 11:49:33.374066, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 16 -> now SET 
[2011/06/21 11:49:33.374086, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 28 -> now SET 
[2011/06/21 11:49:33.374099, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 29 -> now SET 
[2011/06/21 11:49:33.374112, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 30 -> now SET 
[2011/06/21 11:49:33.374124, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 20 -> now SET 
[2011/06/21 11:49:33.374137, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 17 -> now SET 
[2011/06/21 11:49:33.374150, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 26 -> now SET 
[2011/06/21 11:49:33.374164, 10] passdb/pdb_get_set.c:595(pdb_set_group_sid) 

pdb_set_group_sid: setting group sid 
S-1-5-21-2999790742-1775305604-2893609491-513 
[2011/06/21 11:49:33.374179, 11] 
passdb/pdb_get_set.c:510(pdb_set_init_flags) 
element 19 -> now SET 
[2011/06/21 11:49:33.374265, 0] 
rpc_server/srv_netlog_nt.c:714(_netr_ServerAuthenticate3) 
_netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting 
auth request from client MBBUCHHALTUNG04 machine account MBBUCHHALTUNG04$ 


















-- 
To unsubscribe from this list go to the following URL and read the 
instructions: https://lists.samba.org/mailman/options/samba 



-- 

Ziil Informatiklösungen GmbH 
Roland Käser 
Systems Engineer 
Romanshornerstr. 134, 
CH-8280 Kreuzlingen 
Tel: +41 71 671 27 78 
Fax: +41 71 671 27 79 
www.ziil.ch

More information about the samba mailing list