samba - May 2024 - trust relationship between this computer and the primary domain failed

FreeBSD-13.2p9
V4.13.17

Somehow one of our users has gotten their Win11Pro WS to produce this error. 
They were logged on earlier today and after their screen saver timed out they
were unable to log back onto the domain. The notice received after the user
password was entered is:

trust relationship between this computer and the primary domain failed

How do I reset the computer account using samba-tool to allow this system to
reconnect to the domain?

Thanks,


-- 
***          e-Mail is NOT a SECURE channel          ***
        Do NOT transmit sensitive data via e-Mail
   Unencrypted messages have no legal claim to privacy
 Do NOT open attachments nor follow links sent by e-Mail

James B. Byrne                mailto:ByrneJB at Harte-Lyne.ca
Harte & Lyne Limited          http://www.harte-lyne.ca
9 Brockley Drive              vox: +1 905 561 1241
Hamilton, Ontario             fax: +1 905 561 0757
Canada  L8E 3C3

Hi James,

Clock drift?

Best regards,

Peter

On 22.05.2024 20:53, James B. Byrne via samba wrote:
> FreeBSD-13.2p9
> V4.13.17
>
> Somehow one of our users has gotten their Win11Pro WS to produce this
error.
> They were logged on earlier today and after their screen saver timed out
they
> were unable to log back onto the domain. The notice received after the user
> password was entered is:
>
> trust relationship between this computer and the primary domain failed
>
> How do I reset the computer account using samba-tool to allow this system
to
> reconnect to the domain?
>
> Thanks,
>
>

On Wed, May 22, 2024 19:28:31 UTC, Peter Milesson miles at atmos.eu wrote:
> Hi James,
>
> Clock drift?
No.  The WS clock is synced with network time.

I disconnected the network cable which allowed the user to log into their
workstation with their downloaded roaming profile.  I then plugged the network
cable back in which connected to the network as an unauthenticated domain
connection.  They have network connectivity but not a domain session.

They have been told that any changes made to their profile locally will not be
preserved, including saving documents or downloaded files, unless they manually
move them somewhere on the local system storage.

I do not know what caused this but I did discover while disconnecting the
network cable that its retention clip was broken.  So, it might be an artefact
of a network interruption at an unfortunate time.  I have changed the cable but
I still need to know how to deal with this computer authentication problem.

If driven to it I will simply deleted the computer from the AD and add it back
in with a new objectSid.

-- 
***          e-Mail is NOT a SECURE channel          ***
        Do NOT transmit sensitive data via e-Mail
   Unencrypted messages have no legal claim to privacy
 Do NOT open attachments nor follow links sent by e-Mail

James B. Byrne                mailto:ByrneJB at Harte-Lyne.ca
Harte & Lyne Limited          http://www.harte-lyne.ca
9 Brockley Drive              vox: +1 905 561 1241
Hamilton, Ontario             fax: +1 905 561 0757
Canada  L8E 3C3

Mandi! James B. Byrne via samba
  In chel di` si favelave...
> FreeBSD-13.2p9
> V4.13.17
'AD' domain or 'NT' domain?

> trust relationship between this computer and the primary domain failed
With NT domain, and a decent Win11 patchset installed, it is normal...

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''         
http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bont?, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)