[Samba] unknown authentification failure - Samba 4.0.1 pdc

[bugblatterbeast]

Hi,

     I'm still trying to find out, what caused the strange behaviour of 
one of our windows workstations.

Am 28.10.2013 15:26, schrieb bugblatterbeast:
> any username like "domainname\domainuser" with password always fails 
> without delay. Either when trying to log on to the workstation, or 
> when connecting to a samba share on the domain-controller (like 
> "\\domaincontroller\share").
>
> Now, when we log in as a local user and try to connect to a samba 
> share on the domain-controller using the WRONG username 
> "computername\domainuser" with the NOT MATCHING password of the 
> domainuser it works!!!!! We can not only connect to a samba share but 
> also join or leave the domain. However it's still impossible to logon 
> to the workstation that way... 

As Greg already mentioned yesterday, the bug I've linked in a previos 
post is most likely not related to this problem. It seems as if it was 
just a coincidence, that it came from the same machine...


@steve: Thanks for your help. It didn't work so far, but I'm still not 
finished with the all the updates (that's a bit complicated here).


It would really mean a lot to me, to find out, what caused this problem 
and not just fix it by a reinstalling the client OS. I've put some 
effort in convincing everybody to use samba4 and I'd like to be able, to 
give a good explanation on this.


Nice regards, bbb


-------------- next part --------------
# Global parameters
[global]
	workgroup = DOMAIN_NAME
	realm = DOMAIN_NAME.LOCAL
	netbios name = HOST_NAME
	server role = active directory domain controller
	server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbind, ntp_signd, kcc, dnsupdate

	logon path = \\%L\profiles\%U
	logon home = \\%L\%U\.9xprofile
	logon drive = U:

	printcap name = /dev/null
	load printers = no
	printing = bsd

	interfaces = eth0
	security = user

	log file = /var/log/samba/log.%m
	# Global security
	public = yes

[netlogon]
	path = /var/lib/samba/sysvol/DOMAIN_NAME.local/scripts
	read only = No

[sysvol]
	path = /var/lib/samba/sysvol
	read only = No

[profiles]
	path = /usr/local/samba/var/profiles
	read only = no
	comment = Network Profiles
	browseable = yes
	guest ok = no
	printable = no

[home]
	path = /home/samba
	read only = no
	comment = Benutzerverzeichnisse
	browseable = yes
	guest ok = no
	printable = no
	vfs object = recycle
		recycle:repository = .recycle
		recycle:keeptree = Yes
		recycle:versions = Yes
		recycle:touch = Yes
		recycle:maxsize = 0

[shared]
	read only = no
	comment = Gemeinsame Dokumente
	path = /data1/shared
	guest ok = yes
	create mode = 0666
	directory mode = 0777
	vfs object = recycle
		recycle:repository = .recycle/%U
		recycle:keeptree = Yes
		recycle:versions = Yes
		recycle:touch = Yes
		recycle:maxsize = 0

[projekte]
	read only = no
	comment = Projekte
	path = /data1/projekte
	guest ok = yes
	create mode = 0666
	directory mode = 0777
	vfs object = recycle
		recycle:repository = .recycle/%U
		recycle:keeptree = Yes
		recycle:versions = Yes
		recycle:touch = Yes
		recycle:maxsize = 0

[entwicklung]
	read only = no
	comment = Entwicklung
	path = /data1/entwicklung
	guest ok = yes
	create mode = 0666
	directory mode = 0777
	vfs object = recycle
		recycle:repository = .recycle/%U
		recycle:keeptree = Yes
		recycle:versions = Yes
		recycle:touch = Yes
		recycle:maxsize = 0

[exchange]
	read only = no
	comment = Dateiaustausch
	path = /data3/exchange
	guest ok = yes
	create mode = 0666
	directory mode = 0777

[resources]
	read only = no
	comment = Installationsdateien
	path = /data3/resources
	guest ok = yes
	create mode = 0755
	directory mode = 0755

[www]
        read only = no
        comment = lokale Homepages
        path = /home/www
        guest ok = yes

[backup]
	read only = yes
	comment = Datensicherung
	path = /data2/backup
	guest ok = yes

[backup2]
	read only = yes
	comment = Datensicherung
	path = /data4/backup
	guest ok = yes