Samba- "Preauthentication failed" every time the machine password changes

Solution Verified - Updated -

Issue

As per the default winbind settings, every week the machine account password is changed on our rhel8.9 hosts. However, every week when this happens we soon afterwards get 'Preauthentication failed' messages in the logs and users report they can't log in.

[2024/07/31 15:51:43.156481,  0] ../../source3/libsmb/trusts_util.c:626(trust_pw_change)
  2024/07/31 15:51:43 : trust_pw_change(EXAMPLE): Verified new password remotely using netlogon_creds_cli:CLI[RHELCLIENT/RHELCLIENT$]/SRV[adserver01/EXAMPLE]
..snip..
[2024/07/31 16:32:10.008227,  0] ../../source3/libads/kerberos_util.c:74(ads_kinit_password)
  kerberos_kinit_password RHELCLIENT$@example.com failed: Preauthentication failed

Environment

  • Red Hat Enterprise Linux 8.9
  • Active Directory
  • Samba + winbind

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content