On Sat, 2013-04-27 at 14:31 +0200, Andreas Calvo wrote:> I had a test environment with a few hundreds of users using Windows 7 under
> a samba 3 domain.
> They had the registry tweaks required to join a samba 3 domain.
> I followed the classicupgrade migration to samba 4 and everything seemed to
> be ok.
>
> In my scenario I have a DNS server different from the samba server, and the
> DNS server forwards all queries to my samba domain to the samba server.
> The samba server is also acting as a NTP server, and the option ntp-servers
> on DHCP is specified.
>
> Some users see a pop-up requesting to log off and log in again - with a
> "windows need your credentials" message.
> Moreover, they seem to not have any kerberos ticket - running a klist
> shows no active tickets; and they do not have the time synchronized and
> sometimes they see a message regarding the time mismatch.
> We tried to set up a NTP time using GPOs without luck.
>
> Looking at the samba logs doesn't give a clue - just some errors which
may
> be normal.
>
> Any hint to look at or any configuration/misconfiguration?
Have the passwords expired (incorrectly)? I just saw the same message
with my test domain (not upgraded), and it then asked me to change the
password which had expired.
Andrew Bartlett
--
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org