> So, net getsambasid and net getlocalsid both return the same value, which
matches the SID in the backend LDAP database. So, maybe not a SID problem after
all.
Here's a log snippet from the server after a logon attempt from the
workstation in question, with the failed workstation authentication. I'm not
sure how to further debug "credentials check failed":
[2016/02/28 07:29:41.326070, 3]
../source3/lib/smbldap.c:1013(smbldap_connect_system)
ldap_connect_system: successful connection to the LDAP server
[2016/02/28 07:29:41.327306, 2]
../source3/passdb/pdb_ldap.c:524(init_sam_from_ldap)
init_sam_from_ldap: Entry found for user: pc-dave$
[2016/02/28 07:29:41.421827, 3]
../source3/passdb/lookup_sid.c:1560(get_primary_group_sid)
Forcing Primary Group to 'Domain Users' for pc-dave$
[2016/02/28 07:29:41.422496, 3]
../source3/rpc_server/samr/srv_samr_nt.c:2947(_samr_QueryUserInfo)
User:[pc-dave$]
[2016/02/28 07:29:41.422738, 3]
../source3/rpc_server/samr/srv_samr_nt.c:2947(_samr_QueryUserInfo)
User:[pc-dave$]
[2016/02/28 07:29:41.422862, 3]
../source3/rpc_server/samr/srv_samr_nt.c:2650(get_user_info_18)
User:[pc-dave$] 0x80
[2016/02/28 07:29:41.423014, 2]
../libcli/auth/credentials.c:381(netlogon_creds_server_check_internal)
credentials check failed
[2016/02/28 07:29:41.423066, 0]
../source3/rpc_server/netlogon/srv_netlog_nt.c:997(_netr_ServerAuthenticate3)
_netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth
request from client PC-DAVE machine account PC-DAVE$
[2016/02/28 07:29:41.424260, 3]
../source3/rpc_server/srv_pipe_hnd.c:122(free_pipe_context)
free_pipe_context: destroying talloc pool of size 30
[2016/02/28 07:29:41.425680, 3]
../source3/rpc_server/srv_pipe.c:1371(api_rpcTNP)
api_rpcTNP: rpc command: NETR_SERVERREQCHALLENGE
[2016/02/28 07:29:41.426741, 3]
../source3/rpc_server/srv_pipe_hnd.c:122(free_pipe_context)
free_pipe_context: destroying talloc pool of size 30
[2016/02/28 07:29:41.427734, 3]
../source3/rpc_server/srv_pipe.c:1371(api_rpcTNP)
api_rpcTNP: rpc command: NETR_SERVERAUTHENTICATE3
[2016/02/28 07:29:41.427972, 2]
../source3/rpc_server/samr/srv_samr_nt.c:4004(_samr_LookupDomain)
Returning domain sid for domain DRBHOME ->
S-1-5-21-379225270-2612589903-3976116126
[2016/02/28 07:29:41.428800, 2]
../source3/passdb/pdb_ldap.c:524(init_sam_from_ldap)
init_sam_from_ldap: Entry found for user: pc-dave$
[2016/02/28 07:29:41.430068, 3]
../source3/passdb/lookup_sid.c:1560(get_primary_group_sid)
Forcing Primary Group to 'Domain Users' for pc-dave$
[2016/02/28 07:29:41.430827, 3]
../source3/rpc_server/samr/srv_samr_nt.c:2947(_samr_QueryUserInfo)
User:[pc-dave$]
[2016/02/28 07:29:41.431081, 3]
../source3/rpc_server/samr/srv_samr_nt.c:2947(_samr_QueryUserInfo)
User:[pc-dave$]
[2016/02/28 07:29:41.431203, 3]
../source3/rpc_server/samr/srv_samr_nt.c:2650(get_user_info_18)
User:[pc-dave$] 0x80
[2016/02/28 07:29:41.431364, 2]
../libcli/auth/credentials.c:381(netlogon_creds_server_check_internal)
credentials check failed
[2016/02/28 07:29:41.431467, 0]
../source3/rpc_server/netlogon/srv_netlog_nt.c:997(_netr_ServerAuthenticate3)
_netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth
request from client PC-DAVE machine account PC-DAVE$
