samba - Jan 2025 - Windows 11 24H2, Samba 4.21.3 AD DC and domain users cannot log in

On 22.01.2025 12:25, Rowland Penny via samba wrote:
>>
>> 	After this started happening, I did try setting same password
>> again for user with smbpasswd in linux.
> 
> Try using samba-tool to set a new password for the user.
	I'l try it.
	Although righ now I'm considering removing computer from domain and 
adding again... Because isse seems to be with all domain users at that 
computer.
> 
>>
>> 	But that NETLOGON message in event log makes it look, like
>> more generic problem.
>> 	I thought of checking name resolution, but Windows nslookup
>> seems to be unable to resolve SRV records. But they seem to be ok.
>> Windows nslookup requiring ending name with dot caused some initial
>> confusion.
> 
> If Windows cannot resolve SRV records, then it looks like you have DNS
> problems, are the clients using a DC as their first nameserver ?
> 
	Issue was, that with linux nslookup name "_ldap._tcp.ad.domain"
works.
But I did not know, that I need to do use name "_ldap._tcp.ad.domain."
with Windows nslookup (dot at the end). After that all SRV records resolve.


-- 
Virgo P?rna
virgo.parna at mail.ee

On 22.01.2025 12:38, Virgo P?rna via samba wrote:
> On 22.01.2025 12:25, Rowland Penny via samba wrote:
>>>
>>> ????After this started happening, I did try setting same password
>>> again for user with smbpasswd in linux.
>>
>> Try using samba-tool to set a new password for the user.
> 
>  ????I'l try it.
	Did try it, did not work.
>  ????Although righ now I'm considering removing computer from domain
and
> adding again... Because isse seems to be with all domain users at that 
> computer.
> 
	I instead tried adding existing Windows 11 test virtual machine into 
domain. Joining worked fine, but after restart domain user cannot log 
in. And there is same NETLOGON error about not being able to connect DC 
in event log.

-- 
Virgo P?rna
virgo.parna at mail.ee