samba - Feb 2025 - Windows 11 24H2, Samba 4.21.3 AD DC and domain users cannot log in

I have been busy with other things lately and have not been able to 
investigate issue more. But there were some issues before it got really 
bad.
	But strange thing is, that clean install of 22H2 had same issue after 
successfully joining domain. And issue remained after upgrading to 23H2. 
And 22H2 did not even have latest security updates available.
	For me strangest part is, that after using "Nltest /DBFlag:2080FFFF"
to
set netlogon service to provide debug logs (after that restarting 
service), that debug complains about being unable to log into ldap server.
	Also, when trying to log in with invalid password (for domain account), 
I get "The username or password is incorrect. Try again". But if I 
provide correct password, I get "Welcome" and then "The username
or
password is incorrect. Try again".


-- 
Virgo P?rna
virgo.parna at mail.ee

I don't think I've had 22H2, just win 11 23H2 clean installs and they 
work fine without issues. I'll try updating 23h2 that's working fine to 
24h2 to see if anything breaks that way. But one of the previous 
answers, that 24h2 works fine with at least 4.18 is promising.

W dniu 14.02.2025 o?13:51, Virgo P?rna via samba pisze:
> ????I have been busy with other things lately and have not been able 
> to investigate issue more. But there were some issues before it got 
> really bad.
> ????But strange thing is, that clean install of 22H2 had same issue 
> after successfully joining domain. And issue remained after upgrading 
> to 23H2. And 22H2 did not even have latest security updates available.
> ????For me strangest part is, that after using "Nltest 
> /DBFlag:2080FFFF" to set netlogon service to provide debug logs (after
> that restarting service), that debug complains about being unable to 
> log into ldap server.
> ????Also, when trying to log in with invalid password (for domain 
> account), I get "The username or password is incorrect. Try
again".
> But if I provide correct password, I get "Welcome" and then
"The
> username or password is incorrect. Try again".
>
>
-- 
Ta wiadomo?? e-mail zosta?a sprawdzona pod k?tem wirus?w przez oprogramowanie
antywirusowe Avast.
www.avast.com

I can cautiously say, that upgrading samba DC's to 4.17 (debian 
backports) solved my issue, windows 11 24h2 clients behave as they 
should, all GPO are applying as they should, users can log in, I can 
reach sysvol/netlogon, and windows machine sess itself as part of of a 
domain.

W dniu 14.02.2025 o?13:51, Virgo P?rna via samba pisze:
> ????I have been busy with other things lately and have not been able 
> to investigate issue more. But there were some issues before it got 
> really bad.
> ????But strange thing is, that clean install of 22H2 had same issue 
> after successfully joining domain. And issue remained after upgrading 
> to 23H2. And 22H2 did not even have latest security updates available.
> ????For me strangest part is, that after using "Nltest 
> /DBFlag:2080FFFF" to set netlogon service to provide debug logs (after
> that restarting service), that debug complains about being unable to 
> log into ldap server.
> ????Also, when trying to log in with invalid password (for domain 
> account), I get "The username or password is incorrect. Try
again".
> But if I provide correct password, I get "Welcome" and then
"The
> username or password is incorrect. Try again".
>
>
-- 
Ta wiadomo?? e-mail zosta?a sprawdzona pod k?tem wirus?w przez oprogramowanie
antywirusowe Avast.
www.avast.com