Samba-4.7.1-6 smbd can't authenticate against Active Directory

Issues related to configuring your network
Post Reply
charlweed
Posts: 6
Joined: 2016/01/22 16:54:25

Samba-4.7.1-6 smbd can't authenticate against Active Directory

Post by charlweed » 2018/07/13 22:23:41

This is an FYI, as I don't see any other specific reference to this issue.
There is some issue in the smbd server in samba-4.7.1-6.el7.x86_64, where it won't authenticate with active directory as a member server. The logged smbd errors contain "kerberos_kinit_password failed: Preauthentication failed".
The previous smb worked correctly, with the same configuration. I built Samba 4.8.3 from source, and kept the same configuration, and that version works as well. This is only a problem in smbd, as sssd works regardless.
I do not know what the real problem is, but the broken smbd ends up using a different keytab entry for the cifs service then Active Directory wants. I could not find a workaroud, other than installing a more recent version built from source.
Good Luck!

Post Reply