[Samba] Fwd: Failed to prepare gensec: NT_STATUS_INVALID_SERVER_STATE

[Marcel de Reuver]

>> I've made the suggested changes and the log messages continue.
> I found in some older list messages a reply of Andrew.
>
>> Andrew Bartlett via samba
>> Verzonden: woensdag 31 maart 2021 9:17
>> Aan: Stefan Bellon; Stefan Bellon via samba
>> Onderwerp: Re: [Samba] Failed to prepare gensec:
>> NT_STATUS_INVALID_SERVER_STATE
>> This is about failing to setup the
>> Kerberos code that accepts incoming tickets, so it could fail if the DC
>> things it is not a DC or can't find the secrets.ldb entry etc.
> If this is the first AD-DC.
> Stop samba-ad-dc
>
> Whipe the samba data, rename the smb.conf and re-provision.
> Leave everything else as it.
>
> Clean /var/cache/samba/ and /var/lib/samba and there subfolders
> Dont remove the subfolders, if you do, recreate these.
>
> The other option, remove (de-install) samba winbind
> Clean /var/cache/samba/ and /var/lib/samba and there subfolders
> Reinstall and reprovision.

It is a setup with two AD-DC's in two locations connected via a VPN 
connection. Both AD-DC's have these log messages. Since everything 
works, removing and re-provisioning seems highly excessive.