[Samba] Samba 4 Domain Members stop autenticate with Samba 3 PDC after seven (7) days

[Rowland penny]

On 10/02/16 09:23, Dario Lesca wrote:
> Il giorno ven, 05/02/2016 alle 11.59 +0100, Dario Lesca ha scritto:
>> On a server Centos 7 with samba-4.2.3-11.el7_2.x86_64, joined to a
>> server samba-3.6.23-24.el6_7.x86_64 PDC on Centos 6.7 up to date,
>> after 7 days I want restart winbind service because the users are not
>> autenticate anymore.
> Since I have no answer to the problem described above, it means that
> the only solution is:
>
>      $ echo /bin/systemctl restart winbind |sudo dd of=/etc/cron.daily/restart-wbind
>      $ sudo chmod 755 /etc/cron.daily/restart-wbind
>
> Many thanks
>

That is a bandaid over a problem.
Can you explain why your PDC smb.conf seems to be a mixture of a PDC one 
and an ADS domain member one ? You do not actually need winbind on an 
NT-4 style PDC and this could be a part of your problem.

Have a look here for a bare PDC setup: 
http://xmodulo.com/samba-primary-domain-controller.html

Rowland