Sorry for the translation. actually my first installation is a samba put into production, to avoid errors, I cloned on a new VM not to break my current system. on this one I redid an installation with DEB packages "https://dev.tranquil.it" I then made a restoration. I presice that the supply is a samba3 pdc migration to samba4 dc "samba-tool domain samba3upgrade". I only have one DC at the moment. I checked the database with "dbcheck", no problems. if the machine is newly joined on the domain the gpo computer works the first time, but not the other startups.
On Tue, 26 Feb 2019 18:54:31 +0100 David Jehin <bedou210977 at gmail.com> wrote:> Sorry for the translation.Never apologise for not speaking English, It always amazes me just how many people can speak some English, when I cannot speak any other language (I struggle with English and its my native tongue ;-) )> actually my first installation is a samba put into production, to > avoid errors, I cloned on a new VM not to break my current system. > on this one I redid an installation with DEB packages > "https://dev.tranquil.it" I then made a restoration. > I presice that the supply is a samba3 pdc migration to samba4 dc > "samba-tool domain samba3upgrade". > > I only have one DC at the moment. > I checked the database with "dbcheck", no problems.I understand now, you are trying to upgrade to AD and are in the testing phase.> > if the machine is newly joined on the domain the gpo computer works > the first time, but not the other startups.That is strange, it works on the first boot, but never again. What GPO is it ? It isn't one of the two default GPO's, is it ? Rowland
> > > That is strange, it works on the first boot, but never again. > What GPO is it ? > It isn't one of the two default GPO's, is it ? > > > Hello no i have created a computer GPO for a specific OU where the > computers and the users are stored with the appropriate rights. i do a > gpupdate / force, the gpo are applied correctly, gpresult proves to me that > everything is correct. but when i start the computer no gpo computer are > applied and the samba logs of the computer shows me this: > > GSS server Update(krb5)(1) Update failed: Miscellaneous failure (see >> text): Decrypt integrity check failed > > [2019/02/25 10:21:11.914286, 1] >> ../auth/gensec/spnego.c:1218(gensec_spnego_server_negTokenInit_step) > > gensec_spnego_server_negTokenInit_step: gssapi_krb5: parsing >> NEG_TOKEN_INIT content failed (next[(null)]): NT_STATUS_LOGON_FAILURE > > [2019/02/25 10:21:11.944559, 1] >> ../source4/auth/gensec/gensec_gssapi.c:790(gensec_gssapi_update_internal) > > > I presice that I test a standard samba installation "samba-tool domain > provision --realm='''MONDOMAINE.LAN''' --domain '''MONDOMAINE''' > --server-role=dc" is that everything works fine, it seems to me that it > comes from the migrationthanks> -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >