[Samba] Upgrade/migrate, lost workstation trusts

Dave Beach drbeach4 at gmail.com
Sun Feb 28 12:50:59 UTC 2016


> So, net getsambasid and net getlocalsid both return the same value, which matches the SID in the backend LDAP database. So, maybe not a SID problem after all.

Here's a log snippet from the server after a logon attempt from the workstation in question, with the failed workstation authentication. I'm not sure how to further debug "credentials check failed":

[2016/02/28 07:29:41.326070,  3] ../source3/lib/smbldap.c:1013(smbldap_connect_system)
  ldap_connect_system: successful connection to the LDAP server
[2016/02/28 07:29:41.327306,  2] ../source3/passdb/pdb_ldap.c:524(init_sam_from_ldap)
  init_sam_from_ldap: Entry found for user: pc-dave$
[2016/02/28 07:29:41.421827,  3] ../source3/passdb/lookup_sid.c:1560(get_primary_group_sid)
  Forcing Primary Group to 'Domain Users' for pc-dave$
[2016/02/28 07:29:41.422496,  3] ../source3/rpc_server/samr/srv_samr_nt.c:2947(_samr_QueryUserInfo)
  User:[pc-dave$]
[2016/02/28 07:29:41.422738,  3] ../source3/rpc_server/samr/srv_samr_nt.c:2947(_samr_QueryUserInfo)
  User:[pc-dave$]
[2016/02/28 07:29:41.422862,  3] ../source3/rpc_server/samr/srv_samr_nt.c:2650(get_user_info_18)
  User:[pc-dave$] 0x80
[2016/02/28 07:29:41.423014,  2] ../libcli/auth/credentials.c:381(netlogon_creds_server_check_internal)
  credentials check failed
[2016/02/28 07:29:41.423066,  0] ../source3/rpc_server/netlogon/srv_netlog_nt.c:997(_netr_ServerAuthenticate3)
  _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client PC-DAVE machine account PC-DAVE$
[2016/02/28 07:29:41.424260,  3] ../source3/rpc_server/srv_pipe_hnd.c:122(free_pipe_context)
  free_pipe_context: destroying talloc pool of size 30
[2016/02/28 07:29:41.425680,  3] ../source3/rpc_server/srv_pipe.c:1371(api_rpcTNP)
  api_rpcTNP: rpc command: NETR_SERVERREQCHALLENGE
[2016/02/28 07:29:41.426741,  3] ../source3/rpc_server/srv_pipe_hnd.c:122(free_pipe_context)
  free_pipe_context: destroying talloc pool of size 30
[2016/02/28 07:29:41.427734,  3] ../source3/rpc_server/srv_pipe.c:1371(api_rpcTNP)
  api_rpcTNP: rpc command: NETR_SERVERAUTHENTICATE3
[2016/02/28 07:29:41.427972,  2] ../source3/rpc_server/samr/srv_samr_nt.c:4004(_samr_LookupDomain)
  Returning domain sid for domain DRBHOME -> S-1-5-21-379225270-2612589903-3976116126
[2016/02/28 07:29:41.428800,  2] ../source3/passdb/pdb_ldap.c:524(init_sam_from_ldap)
  init_sam_from_ldap: Entry found for user: pc-dave$
[2016/02/28 07:29:41.430068,  3] ../source3/passdb/lookup_sid.c:1560(get_primary_group_sid)
  Forcing Primary Group to 'Domain Users' for pc-dave$
[2016/02/28 07:29:41.430827,  3] ../source3/rpc_server/samr/srv_samr_nt.c:2947(_samr_QueryUserInfo)
  User:[pc-dave$]
[2016/02/28 07:29:41.431081,  3] ../source3/rpc_server/samr/srv_samr_nt.c:2947(_samr_QueryUserInfo)
  User:[pc-dave$]
[2016/02/28 07:29:41.431203,  3] ../source3/rpc_server/samr/srv_samr_nt.c:2650(get_user_info_18)
  User:[pc-dave$] 0x80
[2016/02/28 07:29:41.431364,  2] ../libcli/auth/credentials.c:381(netlogon_creds_server_check_internal)
  credentials check failed
[2016/02/28 07:29:41.431467,  0] ../source3/rpc_server/netlogon/srv_netlog_nt.c:997(_netr_ServerAuthenticate3)
  _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client PC-DAVE machine account PC-DAVE$




More information about the samba mailing list