[Samba] Samba 3.5.6 : netlogon_creds_server_check errors in logs

[Andrew Bartlett]

On Mon, 2013-01-21 at 11:17 +0100, Jaymzwise Jaymzwise wrote:
> Hi,
> 
> I have a Samba (v3.5.6) PDC with a LDAP backend. We have Windows XP and 7
> workstations, everything "seems" to run smoothly but the following messages
> appear in the logs for each Windows 7 joined to the domain :
> 
> Jan 21 10:45:13 srvlan smbd[2737]: [2013/01/21 10:45:13.722795,  0]
> rpc_server/srv_netlog_nt.c:714(_netr_ServerAuthenticate3)
> Jan 21 10:45:13 srvlan smbd[2737]:   _netr_ServerAuthenticate3:
> netlogon_creds_server_check failed. Rejecting auth request from client
> HP8540P_13_NG machine account HP8540P_13_NG$
> 
> We can access samba shares from 7 workstations and users can authenticate
> on the domain but I would like to have clean logs.
> 
> How can I resolve this problem ?

I've looked into a similar error recently, and as far as I know this is
all just normal.  As far as I could pin it down, the client knows both
the current and previous domain join pw, and will sometimes try the old
domain join password.  That is, as you noticed, no harm seems to come
from these messages, despite them normally indicating a breakdown in the
trust relationship. 

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org