I also ran into a problem looking like this one. My smb.conf global
section looks like this:

[global]
  netbios name = SERVER
  realm = EXAMPLE.COM
  workgroup = EXAMPLE
  security = ADS
  kerberos method = system keytab
  mangled names = no
  log level = 2

I have a feeling Kerberos authentication worked since I could log in
from Windows clients in the same domain but password auth failed using
smbclient and also Windows from another network which does not have
access to domain controllers.

These packages were upgraded automatically a while ago:
- libwbclient0 2:3.6.3-2ubuntu2.17 -> 
libwbclient0_2%3a3.6.25-0ubuntu0.12.04.2_amd64.deb
- smbclient 2:3.6.3-2ubuntu2.17 -> 
smbclient_2%3a3.6.25-0ubuntu0.12.04.2_amd64.deb
- samba-common 2:3.6.3-2ubuntu2.17 -> 
samba-common_2%3a3.6.25-0ubuntu0.12.04.2_all.deb
- samba-common-bin 2:3.6.3-2ubuntu2.17 -> 
samba-common-bin_2%3a3.6.25-0ubuntu0.12.04.2_amd64.deb

I decided to downgrade to older versions. But accidentally I restored
samba instead of samba-common-bin from the backup server so my downgrade
command looked like this:

dpkg -i \
  libwbclient0_2%3a3.6.3-2ubuntu2.17_amd64.deb \
  samba_2%3a3.6.3-2ubuntu2.17_amd64.deb \
  samba-common_2%3a3.6.3-2ubuntu2.17_all.deb \
  smbclient_2%3a3.6.3-2ubuntu2.17_amd64.deb

Anyway, after I ran that, authentication worked again. My package
version are now as follows:

# dpkg-query -l | egrep 'samba|libwbclient|smbclient'

ii  libsmbclient                     2:3.6.25-0ubuntu0.12.04.2           shared 
library for communication with SMB/CIFS servers
ii  libsmbclient-dev                 2:3.6.25-0ubuntu0.12.04.2           
development files for libsmbclient
hi  libwbclient0                     2:3.6.3-2ubuntu2.17                 Samba 
winbind client library
ii  samba                            2:3.6.3-2ubuntu2.17                 
SMB/CIFS file, print, and login server for Unix
hi  samba-common                     2:3.6.3-2ubuntu2.17                 common 
files used by both the Samba server and client
ii  samba-common-bin                 2:3.6.25-0ubuntu0.12.04.2           common 
files used by both the Samba server and client
hi  smbclient                        2:3.6.3-2ubuntu2.17                 
command-line SMB/CIFS clients for Unix

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1572824

Title:
  Samba Domain Member cannot check passwords against Samba AD DC after
  "Badlock" update

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1572824/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to