[Samba] windows workstations needing reboot to validate passwords. -- ERROR MESSAGE

[Ray Klassen]

This is one failure audit message among thousands successful.
All the successful connection include data in the account field instead
of null. 
No I'm not going to verify Kerberos. It's been working for years. The
point here is that windows is trying to renew a ticket anonymously,
failing and then not trying to connect as the computer account. 


On Fri, 2023-11-24 at 11:41 -0500, James Atwell via samba wrote:
> SNIP
> 
> > 
> > Finally have an error message!
> > 
> > > >  {"timestamp": "2023-11-22T12:55:27.227588-0800", "type": "KDC
> > > > Authorization", "KDC Authorization": {"version": {"major": 1,
> > > > "minor": 0}, "status": "NT_STATUS_NO_SUCH_USER",
> > > > "localAddress":
> > > > null, "remoteAddress": "ipv4:172.19.2.130:62219",
> > > > "serviceDescription": null, "authType": "TGS-REQ with Ticket-
> > > > Granting Ticket", "domain": null, "account": null, "sid": null,
> > > > "logonServer": "ADMIRAL", "authTime": "2023-11-
> > > > 22T12:55:27.226868-
> > > > 0800", "serverPolicyAccessCheck": null}}
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> 
> You have an error during the KDC granting a TGT it seems. The server
> specially is the one named Admiral. 
> 
> Verify Kerberos on the Admiral server and others. 
> 
> https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller
> 
> 
> -James
> 
> 
> 
>