CentOS Stream 10 – Common Problem 197 – Diagnosis and Fix

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution – Primary Fix
7. Solution – Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

Domain users cannot log in; wbinfo -t fails with ‘NT_STATUS_NO_LOGON_SERVERS’.

Environment & Reproduction

Time drift or missing DNS records for AD domain controllers.

rpm -q samba-winbind
wbinfo -P

Root Cause Analysis

winbind can’t reach a domain controller for SAM/Kerberos checks.

Quick Triage

Test DC reachability and time sync.

nslookup -type=SRV _kerberos._tcp.example.com
chronyc tracking

Step-by-Step Diagnosis

Inspect winbind status and join state.

net ads testjoin
journalctl -u winbind -n 200 --no-pager

Solution – Primary Fix

Re-join the domain and restart winbind.

net ads leave -U Administrator
net ads join -U Administrator
systemctl restart winbind

Solution – Alternative Approaches

Pin DNS to working DCs in /etc/resolv.conf.

echo -e 'nameserver 10.0.0.10nnameserver 10.0.0.11' > /etc/resolv.conf

Verification & Acceptance Criteria

wbinfo -t returns ‘checking the trust secret… succeeded’.

wbinfo -t
getent passwd 'EXAMPLEuser'

Rollback Plan

Restore prior /etc/samba/smb.conf.

cp /etc/samba/smb.conf.bak /etc/samba/smb.conf && systemctl restart winbind smb

Prevention & Hardening

Monitor trust and time with a daily check.

wbinfo -t || logger 'winbind trust broken'

Related Errors & Cross-Refs

No logon servers, trust secret failure, SSSD AD issues.

Related tutorial: View the step-by-step tutorial for centos-stream-10.

View all centos-stream-10 tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

Samba AD docs, sssd-ad notes.