[Samba] Samba 3.5.6 : netlogon_creds_server_check errors in logs

Andrew Bartlett abartlet at samba.org
Mon Jan 21 04:08:52 MST 2013

On Mon, 2013-01-21 at 11:17 +0100, Jaymzwise Jaymzwise wrote:
> Hi,
> I have a Samba (v3.5.6) PDC with a LDAP backend. We have Windows XP and 7
> workstations, everything "seems" to run smoothly but the following messages
> appear in the logs for each Windows 7 joined to the domain :
> Jan 21 10:45:13 srvlan smbd[2737]: [2013/01/21 10:45:13.722795,  0]
> rpc_server/srv_netlog_nt.c:714(_netr_ServerAuthenticate3)
> Jan 21 10:45:13 srvlan smbd[2737]:   _netr_ServerAuthenticate3:
> netlogon_creds_server_check failed. Rejecting auth request from client
> HP8540P_13_NG machine account HP8540P_13_NG$
> We can access samba shares from 7 workstations and users can authenticate
> on the domain but I would like to have clean logs.
> How can I resolve this problem ?

I've looked into a similar error recently, and as far as I know this is
all just normal.  As far as I could pin it down, the client knows both
the current and previous domain join pw, and will sometimes try the old
domain join password.  That is, as you noticed, no harm seems to come
from these messages, despite them normally indicating a breakdown in the
trust relationship. 

Andrew Bartlett

Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org

More information about the samba mailing list