The branch, master has been updated via b95b2be A small improvement to the DEBUG message when pass-through authentication fails with ACCESS_DENIED. Increased it to log level 1 so it will print out and pointed to Restrict NTLM as the setting so people know what to look for. from 7b6d1a2 talloc: Test that talloc magic differs between processes.
https://git.samba.org/?p=samba.git;a=shortlog;h=master - Log ----------------------------------------------------------------- commit b95b2be8451e7804704dc2046b6c3eb35f79220e Author: Richard Sharpe <rsha...@samba.org> Date: Sat Oct 10 17:58:59 2015 -0700 A small improvement to the DEBUG message when pass-through authentication fails with ACCESS_DENIED. Increased it to log level 1 so it will print out and pointed to Restrict NTLM as the setting so people know what to look for. Signed-off-by: Richard Sharpe <rsha...@samba.org> Reviewed-by: Uri Simchoni <u...@samba.org> Autobuild-User(master): Richard Sharpe <sha...@samba.org> Autobuild-Date(master): Sun Oct 11 06:28:05 CEST 2015 on sn-devel-104 ----------------------------------------------------------------------- Summary of changes: source3/winbindd/winbindd_pam.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/winbindd/winbindd_pam.c b/source3/winbindd/winbindd_pam.c index 329db62..0ea146b 100644 --- a/source3/winbindd/winbindd_pam.c +++ b/source3/winbindd/winbindd_pam.c @@ -1428,8 +1428,9 @@ static NTSTATUS winbind_samlogon_retry_loop(struct winbindd_domain *domain, rpc changetrustpw' */ if ( NT_STATUS_EQUAL(result, NT_STATUS_ACCESS_DENIED) ) { - DEBUG(3,("winbind_samlogon_retry_loop: sam_logon returned " - "ACCESS_DENIED. Maybe the trust account " + DEBUG(1,("winbind_samlogon_retry_loop: sam_logon returned " + "ACCESS_DENIED. Maybe the DC has Restrict " + "NTLM set or the trust account " "password was changed and we didn't know it. " "Killing connections to domain %s\n", domainname)); -- Samba Shared Repository