After upgrading from samba 3.3.2 to 3.5.8 the users can't log on to their computers. The relevant samba log file for the computer trying to log in:
2011/07/25 11:21:11.274624, 2] smbd/sesssetup.c:1391(setup_new_vc_session)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2011/07/25 11:21:11.276470, 2] smbd/sesssetup.c:1391(setup_new_vc_session)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2011/07/25 11:21:11.276851, 2] lib/smbldap.c:950(smbldap_open_connection)
smbldap_open_connection: connection opened[2011/07/25 11:21:11.286504, 2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
init_sam_from_ldap: Entry found for user: direktor$
[2011/07/25 11:21:11.291208, 2] passdb/pdb_ldap.c:2446(init_group_from_ldap)
init_group_from_ldap: Entry found for group: 553
[2011/07/25 11:21:11.291736, 2] ../libcli/auth/credentials.c:307(netlogon_creds_server_check_internal)
credentials check failed
[2011/07/25 11:21:11.291775, 0] rpc_server/srv_netlog_nt.c:714(_netr_ServerAuthenticate3)
_netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client DIREKTOR machine account DIREKTOR$[2011/07/25 11:21:11.294917, 2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
init_sam_from_ldap: Entry found for user: direktor$
[2011/07/25 11:21:11.296846, 2] passdb/pdb_ldap.c:2446(init_group_from_ldap)
init_group_from_ldap: Entry found for group: 553
[2011/07/25 11:21:11.297377, 2] ../libcli/auth/credentials.c:307(netlogon_creds_server_check_internal)
credentials check failed
[2011/07/25 11:21:11.297413, 0] rpc_server/srv_netlog_nt.c:714(_netr_ServerAuthenticate3)
_netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client DIREKTOR machine account DIREKTOR$
and output of testparm -s
[global]
workgroup = DOMAIN
server string = Porgand
interfaces = lo, eth1
bind interfaces only = Yes
passdb backend = ldapsam:ldap://localhost
username map = /etc/samba/smbusers
log level = 2
syslog = 2
log file = /var/log/samba/%m
max log size = 50
smb ports = 139 445
name resolve order = wins bcast hosts
time server = Yes
socket options = SO_KEEPALIVE
show add printer wizard = No
add user script = /var/lib/samba/sbin/smbldap-useradd.pl -a -m '%u'
delete user script = /var/lib/samba/sbin/smbldap-userdel.pl %u
add group script = /var/lib/samba/sbin/smbldap-groupadd.pl -p '%g'
delete group script = /var/lib/samba/sbin/smbldap-groupdel.pl '%g'
add user to group script = /var/lib/samba/sbin/smbldap-groupmod.pl -m '%u' '%g'
delete user from group script = /var/lib/samba/sbin/smbldap-groupmod.pl -x '%u' '%g'
set primary group script = /var/lib/samba/sbin/smbldap-usermod.pl -g '%g' '%u'
add machine script = /var/lib/samba/sbin/smbldap-useradd.pl -w '%u'
logon script = scripts\logon.bat
logon path =
logon home =
domain logons = Yes
os level = 33
preferred master = Yes
domain master = Yes
wins support = Yes
ldap admin dn = cn=Manager,dc=edu
ldap group suffix = ou=Groups
ldap idmap suffix = ou=Idmap
ldap machine suffix = ou=People
ldap passwd sync = only
ldap suffix = dc=edu
ldap ssl = no
ldap user suffix = ou=People
idmap backend = ldap:ldap://localhost
idmap uid = 10000-20000
idmap gid = 10000-20000
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = Yes
map acl inherit = Yes
hide dot files = No
hide unreadable = Yes
[netlogon]
comment = Network Logon Service
path = /home/samba/netlogon
write list = Administrator
guest ok = Yes
locking = No
[homes]
valid users = %S
read only = No
create mask = 0700
directory mask = 0700
inherit acls = Yes
browseable = No
[klassid]
path = /home/samba/klassid
admin users = administrator
write list = administrator
create mask = 0700
directory mask = 0700
inherit acls = Yes
Some other computers are able to log in, and I could even add a windows 7 PC to the domain and log on to the domain without any problems.
Any advice is welcome.
