Samba / Domain Member

[Neo <neo@spacerat.ch>]

Hi dear Debian fellows

I have some Debian9 machines, which are joined to a W2K8 Windows AD.

I can succesfully login/auth to the domain, but it keeps crashing 
somehow. I see quickly the login msg, but then its crashing me out.

There are no references in the logs.

As im a bit puzzled about whats state of the art of now, should i go for 
debug winbind or use sssd?

smbd --version
Version 4.5.8-Debian

cat /etc/krb5.conf
[logging]
    default = FILE:/var/log/krb5libs.log
    kdc = FILE:/var/log/krb5kdc.log
    admin_server = FILE:/var/log/kadmind.log

[libdefaults]
    default_realm = OURDOM.NET
    dns_lookup_realm = false
    dns_lookup_kdc = true
    ticket_lifetime = 24h
    renew_lifetime = 7d


cat /etc/samba/smb.conf
[global]

    workgroup = ourdom
    security = ADS
    realm = our.realm.net

    log file = /var/log/samba/%m.log
    log level = 1

    idmap config * : backend = tdb
    idmap config * : range = 3000-7999

    username map = /etc/samba/user.map

    client signing = yes
    client use spnego = yes
    dedicated keytab file = /etc/krb5.keytab
    kerberos method = secrets and keytab

    winbind refresh tickets = yes
    winbind trusted domains only = no
    winbind use default domain = yes
    winbind enum users  = yes
    winbind enum groups = yes

Any clues?

Thank you.

Spacerat