[Samba] Problems with Windind Authentication

[Rowland Penny]

On Tue, 13 Jun 2017 17:00:10 -0300
Marcio Demetrio Bacci <marciobacci at gmail.com> wrote:

> Hi,
> 
> When I run the command line *wbinfo -a user* I get the following
> result:
> 
> root at filserver:~# wbinfo -a mane
> Enter mane's password:
> plaintext password authentication succeeded
> Enter mane's password:
> challenge/response password authentication failed
> error code was NT_STATUS_WRONG_PASSWORD (0xc000006a)
> error message was: Wrong Password
> Could not authenticate user mane with challenge/response
> 
> However the password is correct.
> 
> File server users can not access SMB shares.
> 
> This is my smb.conf and nsswitch of the File Server:
> 
> ##########################################################
> [global]
>   netbios name = fileserver
>   workgroup = EMPRESA
>   security = ads
>   realm = EMPRESA.COM.BR
>   encrypt passwords = yes
>   dedicated keytab file = /etc/krb5.keytab
>   kerberos method = secrets and keytab
>   preferred master = no
>   idmap config *:backend = tdb
>   idmap config *:range = 1000-3000
>   idmap config EMPRESA:backend = ad
>   idmap config EMPRESA:schema_mode = rfc2307
>   idmap config EMPRESA:range = 10000-9999999
> 
>   winbind nss info = rfc2307
>   winbind trusted domains only = no
>   winbind use default domain = yes
>   winbind enum users = yes
>   winbind enum groups = yes
>   winbind refresh tickets = yes
> 
>   vfs objects = acl_xattr
>   map acl inherit = Yes
>   store dos attributes = Yes
>   username map = /etc/samba/user.map
> 

What OS is this ?
Is there anything like an auth.log on the DC ?
If so, is there anything in it ?

Rowland