[Samba] cifs mount | then change password on DC

[L.P.H. van Belle]

MJ, 

Have a look at :    
* BUG 12782: winbindd changes the local password and gets
     NT_STATUS_WRONG_PASSWORD for the remote change.  

Fixed in 4.6.7, this looks bit like your problem, not complete sure. 

If its a VM, testing is simple, backup the VM and  upgrade to debian stretch. ( more recent kernel so more recent cifs ) 
And now install my 4.6.7 package and test again. 



Greetz, 

Louis




> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens mj via samba
> Verzonden: donderdag 10 augustus 2017 12:40
> Aan: samba at lists.samba.org
> Onderwerp: [Samba] cifs mount | then change password on DC
> 
> Hi,
> 
> Not sure if this is the place to ask, but:
> 
> We have user who uses mount -t cifs to mount his files on his machine.
> 
> Then this user changed his AD password. Then, suddenly his 
> account started to become LOCKED_OUT on the AD DCs, because 
> of too many FAILED with error NT_STATUS_WRONG_PASSWORD
> 
> After umounting the cifs mount, the FAILED with error 
> NT_STATUS_WRONG_PASSWORD disappeared, and the account no 
> longer LOCKED_OUT.
> 
> So, it seems mount -t cifs keeps trying the password it 
> remembers (even though it became outdated aka previous) again 
> and again, until the account becomes LOCKED_OUT.
> 
> Is there a way to prevent this behaviour? I'd rather have the 
> mount point disappear/become invalid, rather then retried 
> over and over again.
> 
> For the record: mount.cifs version 6.4 (debian jessie)
> 
> MJ
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>