[Samba] gpo not applied a boot computer

[David Jehin]

Hello everyone
since now a certain time I pull my hair and do not understand the source of
my problem.
after a samba 3 pdc migration to samba 4.8.5 AD, when a windows client
starts the gpo computer is not applied to the boot.
in the windows logs there are 1058 GPO errors and server side samba here
are the logs:

  GSS server Update (krb5) (1) Update failed: Miscellaneous failure (see
text): Failed to find SAMBA4$@FSS.LAN (kvno 2) in keytab FILE:
/var/lib/samba/private/secrets.keytab (arcfour -hmac-md5)
[2019/02/20 11: 20: 33.013351, 1]
../auth/gensec/spnego.c:1218(gensec_spnego_server_negTokenInit_step)
   gensec_spnego_server_negTokenInit_step: gssapi_krb5: parsing
NEG_TOKEN_INIT content failed (next [(null)]): NT_STATUS_LOGON_FAILURE
[2019/02/20 11: 20: 33.041913, 1]
../source4/auth/gensec/gensec_gssapi.c:790(gensec_gssapi_update_internal)

thank you again for your participation.