samba - Apr 2016 - Fileserver upgraded from 4.1.17 to 4.2 dosen't authenticate users

On 04/18/2016 08:35 PM, Marc Muehlfeld wrote:
> Hello Johannes,
>
> Am 18.04.2016 um 18:52 schrieb Johannes Amorosa | Celluloid VFX:
>>> What log level are you currently using?
>>>
>> Log level 2, but basically we want to keep log level because we are
>> debugging.
>
> Was Samba installed through rpm/deb or did you compile it? In that case
> you can increase the log level in the sources for these messages and
> re-compile.
>
>
> Regards,
> Marc
>
We are using sernets packages, there is no decisions made if we upgrade 
to 4.3 with a sernet
subscription contract or I'll start compiling - if we do the later I 
will have a look at the sources and
report back here.

-- 
Johannes Amorosa | Celluloid VFX

Celluloid Visual Effects GmbH & Co. KG
Paul-Lincke-Ufer 39/40, 10999 Berlin

Hallo

The Debian team was unable to keep 4.1.17 patched, so they switched to
4.2 branch. However, fileserver at this version (4.2.10) is no more able
to communicate with DC at samba 3.5 (unable to authenticate users - got
weird rpc version error in log)

Please, are there any parameters that could make this work for a while now?

Sincerely

Peter

On 04/20/2016 5:22 AM, Mgr. Peter Tuharsky wrote:
> Hallo
>
> The Debian team was unable to keep 4.1.17 patched, so they switched to
> 4.2 branch. However, fileserver at this version (4.2.10) is no more able
> to communicate with DC at samba 3.5 (unable to authenticate users - got
> weird rpc version error in log)
>
> Please, are there any parameters that could make this work for a while now?
>
> Sincerely
>
> Peter
Peter,

I've been asking the same basic question periodically for the last two 
weeks and have not gotten any replies that make things work.  No one has 
volunteered that their Samba NT4 domain works with the new versions.

You could start by looking at the "Winbindd/Netlogon improvements" 
section here: https://www.samba.org/samba/history/samba-4.2.0.html

None of these parameters made any difference for me, but your luck may 
be better than mine.  Additionally, you will face the challenges brought 
on by the security fixes.  It's not looking good for Samba NT4 domains.

Dale