NT_STATUS_LOGON_FAILURE on Debian 9 with kerberos and sssd libwbclient

[Martin Scott]

Hi,

I have Debian 9 samba installed with sssd.

Samba Version 4.5.6-Debian
SSSD 1.15.0

I have configured samba to use the sssd libwbclient but keep get a login failure for valid
user name and password when using smbclient -k

I can't work out why this is happening, any help would be greatly appreciated.

Log snippet below

[2017/03/24 09:03:00.756770,  5, pid=1814, effective(0, 0), real(0, 0)]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2017/03/24 09:03:00.756775,  5, pid=1814, effective(0, 0), real(0, 0)]
../source3/auth/token_util.c:639(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2017/03/24 09:03:00.756785,  4, pid=1814, effective(0, 0), real(0, 0)]
../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2017/03/24 09:03:00.756790,  1, pid=1814, effective(0, 0), real(0, 0)]
../source3/smbd/sesssetup.c:290(reply_sesssetup_and_X_spnego)
  Failed to generate session_info (user and group token) for session setup:
NT_STATUS_LOGON_FAILURE
[2017/03/24 09:03:00.756803,  5, pid=1814, effective(0, 0), real(0, 0)]
../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order)
  check lock order 1 for smbXsrv_session_global.tdb
[2017/03/24 09:03:00.756808, 10, pid=1814, effective(0, 0), real(0, 0)]
../lib/dbwrap/dbwrap.c:114(debug_lock_order)
  lock order:  1:smbXsrv_session_global.tdb 2:<none> 3:<none>
[2017/03/24 09:03:00.756817, 10, pid=1814, effective(0, 0), real(0, 0)]
../source3/lib/dbwrap/dbwrap_ctdb.c:1064(fetch_locked_internal)
  Locking db 1795596909 key 18669855
[2017/03/24 09:03:00.756832, 10, pid=1814, effective(0, 0), real(0, 0)]
../source3/lib/ctdbd_conn.c:617(ctdbd_control)
  ctdbd_control: Sending ctdb packet reqid=84, vnn=4026531841, opcode=128,
srvid=1795596909
  len=100, magic=43544442, vers=1, gen=0, op=7, reqid=84
[2017/03/24 09:03:00.756854,  5, pid=1814, effective(0, 0), real(0, 0)]
../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor)
  release lock order 1 for smbXsrv_session_global.tdb
[2017/03/24 09:03:00.756860, 10, pid=1814, effective(0, 0), real(0, 0)]
../lib/dbwrap/dbwrap.c:114(debug_lock_order)
  lock order:  1:<none> 2:<none> 3:<none>
[2017/03/24 09:03:00.756865, 10, pid=1814, effective(0, 0), real(0, 0)]
../source3/lib/dbwrap/dbwrap_ctdb.c:932(db_ctdb_record_destr)
  Unlocking db 1795596909 key 18669855
[2017/03/24 09:03:00.756891,  3, pid=1814, effective(0, 0), real(0, 0)]
../source3/smbd/error.c:82(error_packet_set)
  NT error packet at ../source3/smbd/sesssetup.c(293) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE