[Samba] unknown authentification failure - Samba 4.0.1 pdc

[steve]

On Wed, 2013-10-30 at 22:21 +0100, bugblatterbeast wrote:

> I really wish, there was a way to log all the kerberos-calls and 
> authentication-errors.

Hi
A good way is to have a look at the krb5 messages from the KDC in real
time.

Shut down all the DC's. Now restart just one of them:
samba -i -d3
Go and reproduce the problems on the problematic client. Now you will
see the messages _as they happen_.

d4, d5 etc. if you want lots of messages.
HTH
Steve