samba - May 2016 - can't connect since samba update spnego.c:708

Hello,

Since last samba update (4.2.10) , users can't access to their share
My configuration: a samba server share in ActiceDirectory for homedir, 
user autentication for user on a openldap server. Windows client are not 
registred in the AD. Samba server on centos 7.0.
If I install the previous samba version, it works.
Which parameters should I add to make it works with last samba version ?



-----------------------------------------------------------------------------------------------------------
samba parameters :
[global]
        netbios name = SPARTACUS
        security = ADS
        workgroup = UR
        realm = UR.LOCAL

        log file = /var/log/samba/smb.log
        log level = 3

        dedicated keytab file = /etc/krb5.keytab
        kerberos method = secrets and keytab
        winbind refresh tickets = yes

        winbind trusted domains only = no
        winbind use default domain = yes
        winbind enum users  = yes
        winbind enum groups = yes

     client ntlmv2 auth = yes
     send spnego principal = no
#============================ Printing =============================     load
printers = no
     printing = bsd
     printcap name = /dev/null
     disable spoolss = yes
#============================ Share Definitions 
=============================
[homes]
     comment = homedir



----------------------------------------------------------------------------------------------------------

error:
[2016/05/09 11:03:15.038932,  3] 
../auth/ntlmssp/ntlmssp_client.c:275(ntlmssp_client_challenge)
   Got challenge flags:
[2016/05/09 11:03:15.038972,  3] 
../auth/ntlmssp/ntlmssp_util.c:69(debug_ntlmssp_flags)
   Got NTLMSSP neg_flags=0x62898215
[2016/05/09 11:03:15.039051,  3] 
../auth/ntlmssp/ntlmssp_client.c:731(ntlmssp_client_challenge)
   NTLMSSP: Set final flags:
[2016/05/09 11:03:15.039064,  3] 
../auth/ntlmssp/ntlmssp_util.c:69(debug_ntlmssp_flags)
   Got NTLMSSP neg_flags=0x62088a15
[2016/05/09 11:03:15.039076,  3] 
../auth/ntlmssp/ntlmssp_sign.c:509(ntlmssp_sign_reset)
   NTLMSSP Sign/Seal - Initialising with flags:
[2016/05/09 11:03:15.039085,  3] 
../auth/ntlmssp/ntlmssp_util.c:69(debug_ntlmssp_flags)
   Got NTLMSSP neg_flags=0x62088a15
[2016/05/09 11:03:15.041365,  3] 
../source3/libsmb/cliconnect.c:2199(cli_session_setup_done_spnego)
   SPNEGO login failed: Logon failure
[2016/05/09 11:03:15.041562,  0] 
../source3/auth/auth_domain.c:265(domain_client_validate)
   domain_client_validate: Domain password server not available.
[2016/05/09 11:03:15.041634,  2] 
../source3/auth/auth.c:315(auth_check_ntlm_password)
   check_ntlm_password:  Authentication for user [usertest] -> 
[usertest] FAILED with error NT_STATUS_LOGON_FAILURE
[2016/05/09 11:03:15.041666,  2] 
../auth/gensec/spnego.c:708(gensec_spnego_server_negTokenTarg)
   SPNEGO login failed: NT_STATUS_LOGON_FAILURE
[2016/05/09 11:03:15.043338,  3] 
../source3/smbd/server_exit.c:249(exit_server_common)
   Server exit (NT_STATUS_CONNECTION_RESET)
[2016/05/09 11:03:28.888842,  2] 
../source3/smbd/server.c:443(remove_child_pid)
   Could not find child 13843 -- ignoring
[2016/05/09 11:03:45.576516,  3] 
../source3/nmbd/nmbd_sendannounce.c:212(send_host_announcement)


Completes samba logs joined to this mail



-- 
Arnaud

> send spnego principal = no
I would look at this parameter you have there.

I tested with send spnego principal = yes.

I get the same errors


Arnaud
	
	
	
	



Le 09/05/2016 14:44, Miguel Medalha a écrit :
>
>> send spnego principal = no
>
> I would look at this parameter you have there.
>