[Samba] after user password change, member server unable to authenticate

[Rowland Penny]

On 11/05/15 11:25, Tom Söderlund wrote:
> A Samba 4.1.12 member server can not authenticate a user anymore after he
> changed his password. The AD environment is a duplicated 2012 R2 one. Could
> this be just a temporary problem caused by the old password in the other
> AD? Using SSSD for authentication so might have to ask from there... Any
> hints from here still highly valued. -Tom

It is possibly sssd reading the cache instead of contacting AD, try 
'sss_cache -u <username>'

The other problem could be that 2012R2 uses a later schema than samba4.

Rowland