View Issue Details
|ID||Project||Category||View Status||Date Submitted||Last Update|
|0015525||CentOS-7||samba||public||2018-12-04 15:30||2018-12-11 20:02|
|Platform||x86_64||OS||CentOS||OS Version||7.6.1810 (Core)|
|Target Version||Fixed in Version|
|Summary||0015525: Samba on CentOS 7.x suddenly ceases to authenticate|
As of December 4th, 2018, Samba shares on (official) CentOS 7.x
*suddenly* become inaccessible from Windows 10 workstations, reporting
Authentication failure is reported, but the same shares *are*
accessible from GNU/Linux workstations, using the known credentials
Samba server: samba-4.8.3-4.el7.x86_64
(official package from CentOS 7.x repo)
Samba clients: Windows 10 + all updates, as of December 4th, 2018
No errors or rejects are reported in logs, log level 4 ("Allowing
Thanks a lot for your kind help!
|Steps To Reproduce||I suddenly happened on December 4th, 2018 on many CentOS 7.x systems.|
|Additional Information||I cannot verify if this is a Samba or a Windows issue (occuring after automatic updates).|
|Tags||No tags attached.|
I can confirm similar behavior in our environment. Servers are SSSD + AD configured. Mac and WIndows clients fail with either username/pass or Kerberos auth. Samba claims that cifs/ SPN is missing for kerberos auth, and simply bad password for user/pass clients.
Server on Centos 7.5 is still authenticating clients no issue
|Update: Removing SSSD and Samba from Centos 7.6 server and manually installing SSSD and Samba RPMs from Centos 7.5 base/updates restored service.|
Confirming in our environment also. Several file servers (10+) patched overnight from Samba 4.7.1-9.el7_5 to 4.8.3-4.el7 on x86_64 cause the behaviour documented above. Also using SSSD+AD server side, with Windows and Mac clients. Seems to occur on client machines that aren't bound to AD, and connecting with a password challenge. AD bound machines (machines with a kerberos object in AD) don't appear to have the problem.
Will attempt the Samba+SSSD rollback shortly.
|Downgrading samba packages to 4.7* solved our issue for now.|
|Confirming problem after update. Updated Samba (4.8.3-4) works from linux (cifs) and mac (10.12.6 (16G1710)) for both guest (public share) and real user (identified by password), but not from windows (Win7 x64). Simple setup, no LDAP.|