[Samba] Workstation authentication and authorization failed event

Andrew Bartlett abartlet at samba.org
Tue Mar 6 19:22:30 UTC 2018

On Tue, 2018-03-06 at 12:31 -0500, lingpanda101 via samba wrote:
> In the past this was due to replication failure on a DC. However I'm
> not sure how to interpret this log. I would expect to see something
> like PC-45$@DOMAIN.LOCAL. Without the dollar sign it looks as if
> someone attempted to sign in locally with the username 'PC-45'. I'm
> in the early stages of investigation but am I correct in this thought
> process? Thanks.

For reasons unknown some parts of windows drop the $ so we have to
allow that as well.  We have tests we ran against windows to verify

Andrew Bartlett

Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba

More information about the samba mailing list