[Samba] Samba AD Smart Card Login - "Your credentials could not be verified."

[Simon FONTENEAU]

Hello

I just tried it and it works here:

Windows 25h2 (last update) (freshly formatted PC)

Samba : 4.23.5-tranquilit-1
Yubikey 5 : Firmware: 5.7.4

Certificats rsa 3072

Certificate distributed with https://github.com/tranquilit/adcs_python

Simon

Le 08/02/2026 à 23:13, spnti via samba a écrit :
> Windows 11 25H2
>
> Em dom., 8 de fev. de 2026, 17:49, Jennifer Sutton via samba< samba at lists.samba.org> escreveu:
>
>> On 09/02/2026 1:08 am, Nivio via samba wrote:
>>> Peter, the CA is properly configured on the clients, the CRL certificate
>> is
>>> accessible via http from the clients, and the events in Windows, as
>> always,
>>> do not clarify what the problem is.
>>>
>>> Em sex., 6 de fev. de 2026, 16:42, Nivio<capnivio at gmail.com> escreveu:
>>>
>>>> I need to configure a DC that supports smartcards. I've done this a few
>>>> times and the steps in the howto
>>>> https://wiki.samba.org/index.php/Samba_AD_Smart_Card_Login always
>> worked.
>>>> However, it's not working in Samba 4.22 and 4.23. I follow all the
>> steps in
>>>> the Samba wiki howto, but when I try to log in, Windows responds with
>> the
>>>> message "Your credentials could not be verified." I've already tested
>> the
>>>> certificates, but nothing seems wrong. Does anyone have any idea what
>> might
>>>> be happening?
>>>>
>>>> Thanks.
>>>>
>> What Windows version is the client running? Will the same Windows
>> version log in with an earlier Samba version?
>>
>> Cheers,
>> Jennifer
>>
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:https://lists.samba.org/mailman/options/samba
>>