[Samba] gpo not applied a boot computer

[Rowland Penny]

On Tue, 26 Feb 2019 15:57:03 +0100
David Jehin via samba <samba at lists.samba.org> wrote:

> Hello everyone
> since now a certain time I pull my hair and do not understand the
> source of my problem.
> after a samba 3 pdc migration to samba 4.8.5 AD, when a windows client
> starts the gpo computer is not applied to the boot.
> in the windows logs there are 1058 GPO errors and server side samba
> here are the logs:
> 
>   GSS server Update (krb5) (1) Update failed: Miscellaneous failure
> (see text): Failed to find SAMBA4$@FSS.LAN (kvno 2) in keytab FILE:
> /var/lib/samba/private/secrets.keytab (arcfour -hmac-md5)
> [2019/02/20 11: 20: 33.013351, 1]
> ../auth/gensec/spnego.c:1218(gensec_spnego_server_negTokenInit_step)
>    gensec_spnego_server_negTokenInit_step: gssapi_krb5: parsing
> NEG_TOKEN_INIT content failed (next [(null)]): NT_STATUS_LOGON_FAILURE
> [2019/02/20 11: 20: 33.041913, 1]
> ../source4/auth/gensec/gensec_gssapi.c:790(gensec_gssapi_update_internal)
> 
> thank you again for your participation.

What does this show:

klist -e -k /var/lib/samba/private/secrets.keytab

Rowland