samba - Jan 2025 - Windows 11 24H2, Samba 4.21.3 AD DC and domain users cannot log in

On Wed, 22 Jan 2025 15:46:44 +0200
Virgo P?rna via samba <samba at lists.samba.org> wrote:
> After enabling auth_audit logging at samba, there are lot of messages 
> with status NT_STATUS_TIME_DIFFERENCE_AT_DC
> But clock is synced and same in workstation and in server...
> 
From the looks of it, your workstation thinks differently, could it be
a timezone problem ?

If I run 'date' on my PDC_emulator DC, I get this:

Wed 22 Jan 14:13:01 GMT 2025

And the same command run immediately on a Unix domain member, I get
this:

Wed 22 Jan 14:13:03 UTC 2025

So they are in sync.

I would double check the time on both machines if I were you, plus or
minus 5 minutes will give you problems.

Rowland

On 22.01.2025 16:16, Rowland Penny via samba wrote:
> On Wed, 22 Jan 2025 15:46:44 +0200
> Virgo P?rna via samba <samba at lists.samba.org> wrote:
> 
>> After enabling auth_audit logging at samba, there are lot of messages
>> with status NT_STATUS_TIME_DIFFERENCE_AT_DC
>> But clock is synced and same in workstation and in server...
>>
> 
>  From the looks of it, your workstation thinks differently, could it be
> a timezone problem ?
> 
	Windows is set to UTC +02:00.. And date command in DC shows EET (East 
European Time). Both appear to have same time.

And also, w32tm /monitor run at Windows 11 computer reports:
NTP: +0.0000000s offset from dc.hostname




-- 
Virgo P?rna
virgo.parna at mail.ee