[Samba] Windows 11 24H2, Samba 4.21.3 AD DC and domain users cannot log in

[Kacper Wirski]

I can cautiously say, that upgrading samba DC's to 4.17 (debian 
backports) solved my issue, windows 11 24h2 clients behave as they 
should, all GPO are applying as they should, users can log in, I can 
reach sysvol/netlogon, and windows machine sess itself as part of of a 
domain.

W dniu 14.02.2025 o 13:51, Virgo Pärna via samba pisze:
>     I have been busy with other things lately and have not been able 
> to investigate issue more. But there were some issues before it got 
> really bad.
>     But strange thing is, that clean install of 22H2 had same issue 
> after successfully joining domain. And issue remained after upgrading 
> to 23H2. And 22H2 did not even have latest security updates available.
>     For me strangest part is, that after using "Nltest 
> /DBFlag:2080FFFF" to set netlogon service to provide debug logs (after 
> that restarting service), that debug complains about being unable to 
> log into ldap server.
>     Also, when trying to log in with invalid password (for domain 
> account), I get "The username or password is incorrect. Try again". 
> But if I provide correct password, I get "Welcome" and then "The 
> username or password is incorrect. Try again".
>
>

-- 
Ta wiadomość e-mail została sprawdzona pod kątem wirusów przez oprogramowanie antywirusowe Avast.
www.avast.com