Hello All
Thanks very much for the great hints! I would have never thought about that in 100years! We just made the changes to the workstations and added a hack to our unattended setup. Thank You all. Regards Roland ----- Ursprüngliche Mail ----- Von: "Daniel Müller" <muel...@tropenklinik.de> An: "Roland Kaeser" <roland.kae...@ziil.ch>, samba@lists.samba.org Gesendet: Dienstag, 21. Juni 2011 13:31:37 Betreff: AW: [Samba] Machines randomly kicks out of the domain Hello, Try [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Netlogon\Parameters] "Update"="no" On your Win7 clients. We had the same issue solved by doing this. ----------------------------------------------- EDV Daniel Müller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 Tübingen Tel.: 07071/206-463, Fax: 07071/206-499 eMail: muel...@tropenklinik.de Internet: www.tropenklinik.de ----------------------------------------------- -----Ursprüngliche Nachricht----- Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im Auftrag von Roland Kaeser Gesendet: Dienstag, 21. Juni 2011 13:01 An: samba@lists.samba.org Betreff: [Samba] Machines randomly kicks out of the domain Hello Sorry to ask here, but all googeling doesn't helped. We have several samba domains (samba 3.5.6) with ldap backed and windows 7 clients, which worked fine so far. Know we begin to see that random machines begin to kick out of the domain with the error: _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client MBBUCHHALTUNG04 machine account MBBUCHHALTUNG04$ Nothing was changed (no updates or anything else) on the client machine nor the samba server. The registry keys for SignOrSeal and StrongKey are already set correctly. I can't see any additional error Maybe somebody faced the same problem and give me a hint. Thanks a lot. Roland The Full log for the login try of the machine is: [2011/06/21 11:49:33.372812, 2] passdb/pdb_ldap.c:572(init_sam_from_ldap) init_sam_from_ldap: Entry found for user: MBBUCHHALTUNG04$ [2011/06/21 11:49:33.372837, 10] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username MBBUCHHALTUNG04$, was [2011/06/21 11:49:33.372867, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 12 -> now SET [2011/06/21 11:49:33.372894, 10] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain METHABAU-PUR, was [2011/06/21 11:49:33.372908, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 14 -> now DEFAULT [2011/06/21 11:49:33.372922, 10] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username MBBUCHHALTUNG04$, was [2011/06/21 11:49:33.372935, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 15 -> now SET [2011/06/21 11:49:33.372952, 10] passdb/pdb_get_set.c:550(pdb_set_user_sid_from_string) pdb_set_user_sid_from_string: setting user sid S-1-5-21-2999790742-1775305604-2893609491-1046 [2011/06/21 11:49:33.372966, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-2999790742-1775305604-2893609491-1046 [2011/06/21 11:49:33.372981, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 18 -> now SET [2011/06/21 11:49:33.372994, 11] passdb/pdb_get_set.c:299(pdb_get_init_flags) element 18: SET [2011/06/21 11:49:33.373010, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 21 -> now SET [2011/06/21 11:49:33.373051, 10] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name MBBUCHHALTUNG04$, was [2011/06/21 11:49:33.373065, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 13 -> now SET [2011/06/21 11:49:33.373081, 10] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive Z:, was NULL [2011/06/21 11:49:33.373094, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 3 -> now DEFAULT [2011/06/21 11:49:33.373113, 10] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\HALLE\Profiles\mbbuchhaltung04_\.9xprofile, was [2011/06/21 11:49:33.373127, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 1 -> now DEFAULT [2011/06/21 11:49:33.373144, 10] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script login.cmd, was [2011/06/21 11:49:33.373157, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 4 -> now DEFAULT [2011/06/21 11:49:33.373175, 10] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\HALLE\Profiles\mbbuchhaltung04_, was [2011/06/21 11:49:33.373189, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 2 -> now DEFAULT [2011/06/21 11:49:33.373218, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 32 -> now SET [2011/06/21 11:49:33.373250, 11] passdb/pdb_ldap.c:4057(ldapsam_get_account_policy) ldapsam_get_account_policy: got valid value from cache [2011/06/21 11:49:33.373272, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 20 -> now SET [2011/06/21 11:49:33.373286, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 16 -> now SET [2011/06/21 11:49:33.373298, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 17 -> now SET [2011/06/21 11:49:33.373396, 7] passdb/login_cache.c:88(login_cache_read) Looking up login cache for user MBBUCHHALTUNG04$ [2011/06/21 11:49:33.373415, 7] passdb/login_cache.c:104(login_cache_read) No cache entry found [2011/06/21 11:49:33.373428, 9] passdb/pdb_ldap.c:1126(init_sam_from_ldap) No cache entry, bad count = 0, bad time = 0 [2011/06/21 11:49:33.373443, 11] passdb/pdb_get_set.c:499(pdb_set_init_flags) element 34 -> now CHANGED [2011/06/21 11:49:33.373474, 11] passdb/pdb_ldap.c:4057(ldapsam_get_account_policy) ldapsam_get_account_policy: got valid value from cache [2011/06/21 11:49:33.373493, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 3: DEFAULT [2011/06/21 11:49:33.373506, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 1: DEFAULT [2011/06/21 11:49:33.373519, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 4: DEFAULT [2011/06/21 11:49:33.373531, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 2: DEFAULT [2011/06/21 11:49:33.373558, 11] passdb/pdb_ldap.c:4057(ldapsam_get_account_policy) ldapsam_get_account_policy: got valid value from cache [2011/06/21 11:49:33.373588, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 5 -> now SET [2011/06/21 11:49:33.373602, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 6 -> now SET [2011/06/21 11:49:33.373615, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 7 -> now SET [2011/06/21 11:49:33.373628, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 8 -> now SET [2011/06/21 11:49:33.373640, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 9 -> now SET [2011/06/21 11:49:33.373653, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 10 -> now SET [2011/06/21 11:49:33.373665, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 21 -> now SET [2011/06/21 11:49:33.373678, 10] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username MBBUCHHALTUNG04$, was [2011/06/21 11:49:33.373691, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 12 -> now SET [2011/06/21 11:49:33.373704, 10] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain METHABAU-PUR, was [2011/06/21 11:49:33.373717, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 14 -> now SET [2011/06/21 11:49:33.373730, 10] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username MBBUCHHALTUNG04$, was [2011/06/21 11:49:33.373743, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 15 -> now SET [2011/06/21 11:49:33.373756, 10] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name MBBUCHHALTUNG04$, was [2011/06/21 11:49:33.373769, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 13 -> now SET [2011/06/21 11:49:33.373785, 10] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\HALLE\Profiles\mbbuchhaltung04_\.9xprofile, was [2011/06/21 11:49:33.373799, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 1 -> now DEFAULT [2011/06/21 11:49:33.373812, 10] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive Z:, was NULL [2011/06/21 11:49:33.373826, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 3 -> now DEFAULT [2011/06/21 11:49:33.373840, 10] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script login.cmd, was [2011/06/21 11:49:33.373853, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 4 -> now DEFAULT [2011/06/21 11:49:33.373868, 10] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\HALLE\Profiles\mbbuchhaltung04_, was [2011/06/21 11:49:33.373881, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 2 -> now DEFAULT [2011/06/21 11:49:33.373894, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 22 -> now SET [2011/06/21 11:49:33.373907, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 24 -> now SET [2011/06/21 11:49:33.373920, 10] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/06/21 11:49:33.373933, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 23 -> now SET [2011/06/21 11:49:33.373946, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 25 -> now SET [2011/06/21 11:49:33.373959, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 32 -> now SET [2011/06/21 11:49:33.373987, 11] passdb/pdb_ldap.c:4057(ldapsam_get_account_policy) ldapsam_get_account_policy: got valid value from cache [2011/06/21 11:49:33.374005, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 33 -> now SET [2011/06/21 11:49:33.374019, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-2999790742-1775305604-2893609491-1046 [2011/06/21 11:49:33.374034, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 18 -> now SET [2011/06/21 11:49:33.374047, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-2999790742-1775305604-2893609491-1046 from rid 1046 [2011/06/21 11:49:33.374066, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 16 -> now SET [2011/06/21 11:49:33.374086, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 28 -> now SET [2011/06/21 11:49:33.374099, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 29 -> now SET [2011/06/21 11:49:33.374112, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 30 -> now SET [2011/06/21 11:49:33.374124, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 20 -> now SET [2011/06/21 11:49:33.374137, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 17 -> now SET [2011/06/21 11:49:33.374150, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 26 -> now SET [2011/06/21 11:49:33.374164, 10] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-2999790742-1775305604-2893609491-513 [2011/06/21 11:49:33.374179, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 19 -> now SET [2011/06/21 11:49:33.374265, 0] rpc_server/srv_netlog_nt.c:714(_netr_ServerAuthenticate3) _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client MBBUCHHALTUNG04 machine account MBBUCHHALTUNG04$ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- Ziil Informatiklösungen GmbH Roland Käser Systems Engineer Romanshornerstr. 134, CH-8280 Kreuzlingen Tel: +41 71 671 27 78 Fax: +41 71 671 27 79 www.ziil.ch -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba