[Samba] Upgrade/migrate, lost workstation trusts
Dave Beach
drbeach4 at gmail.com
Sun Feb 28 12:50:59 UTC 2016
> So, net getsambasid and net getlocalsid both return the same value, which matches the SID in the backend LDAP database. So, maybe not a SID problem after all.
Here's a log snippet from the server after a logon attempt from the workstation in question, with the failed workstation authentication. I'm not sure how to further debug "credentials check failed":
[2016/02/28 07:29:41.326070, 3] ../source3/lib/smbldap.c:1013(smbldap_connect_system)
ldap_connect_system: successful connection to the LDAP server
[2016/02/28 07:29:41.327306, 2] ../source3/passdb/pdb_ldap.c:524(init_sam_from_ldap)
init_sam_from_ldap: Entry found for user: pc-dave$
[2016/02/28 07:29:41.421827, 3] ../source3/passdb/lookup_sid.c:1560(get_primary_group_sid)
Forcing Primary Group to 'Domain Users' for pc-dave$
[2016/02/28 07:29:41.422496, 3] ../source3/rpc_server/samr/srv_samr_nt.c:2947(_samr_QueryUserInfo)
User:[pc-dave$]
[2016/02/28 07:29:41.422738, 3] ../source3/rpc_server/samr/srv_samr_nt.c:2947(_samr_QueryUserInfo)
User:[pc-dave$]
[2016/02/28 07:29:41.422862, 3] ../source3/rpc_server/samr/srv_samr_nt.c:2650(get_user_info_18)
User:[pc-dave$] 0x80
[2016/02/28 07:29:41.423014, 2] ../libcli/auth/credentials.c:381(netlogon_creds_server_check_internal)
credentials check failed
[2016/02/28 07:29:41.423066, 0] ../source3/rpc_server/netlogon/srv_netlog_nt.c:997(_netr_ServerAuthenticate3)
_netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client PC-DAVE machine account PC-DAVE$
[2016/02/28 07:29:41.424260, 3] ../source3/rpc_server/srv_pipe_hnd.c:122(free_pipe_context)
free_pipe_context: destroying talloc pool of size 30
[2016/02/28 07:29:41.425680, 3] ../source3/rpc_server/srv_pipe.c:1371(api_rpcTNP)
api_rpcTNP: rpc command: NETR_SERVERREQCHALLENGE
[2016/02/28 07:29:41.426741, 3] ../source3/rpc_server/srv_pipe_hnd.c:122(free_pipe_context)
free_pipe_context: destroying talloc pool of size 30
[2016/02/28 07:29:41.427734, 3] ../source3/rpc_server/srv_pipe.c:1371(api_rpcTNP)
api_rpcTNP: rpc command: NETR_SERVERAUTHENTICATE3
[2016/02/28 07:29:41.427972, 2] ../source3/rpc_server/samr/srv_samr_nt.c:4004(_samr_LookupDomain)
Returning domain sid for domain DRBHOME -> S-1-5-21-379225270-2612589903-3976116126
[2016/02/28 07:29:41.428800, 2] ../source3/passdb/pdb_ldap.c:524(init_sam_from_ldap)
init_sam_from_ldap: Entry found for user: pc-dave$
[2016/02/28 07:29:41.430068, 3] ../source3/passdb/lookup_sid.c:1560(get_primary_group_sid)
Forcing Primary Group to 'Domain Users' for pc-dave$
[2016/02/28 07:29:41.430827, 3] ../source3/rpc_server/samr/srv_samr_nt.c:2947(_samr_QueryUserInfo)
User:[pc-dave$]
[2016/02/28 07:29:41.431081, 3] ../source3/rpc_server/samr/srv_samr_nt.c:2947(_samr_QueryUserInfo)
User:[pc-dave$]
[2016/02/28 07:29:41.431203, 3] ../source3/rpc_server/samr/srv_samr_nt.c:2650(get_user_info_18)
User:[pc-dave$] 0x80
[2016/02/28 07:29:41.431364, 2] ../libcli/auth/credentials.c:381(netlogon_creds_server_check_internal)
credentials check failed
[2016/02/28 07:29:41.431467, 0] ../source3/rpc_server/netlogon/srv_netlog_nt.c:997(_netr_ServerAuthenticate3)
_netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client PC-DAVE machine account PC-DAVE$
More information about the samba
mailing list