On 1/3/19 11:46 PM, Miroslav Geisselreiter wrote: > > Previously I deleted all files from /var/lib/samba, than set ldap > admin password: > smbpasswd -W > Than I re-join DC, it did not help. Shame. I'm not really sure what else to try, beyond my previous suggestion that it doesn't make sense to be both a domain member and use an ldap passdb backend. Try reverting the configuration file to the last known-good state. Leave the domain. Change "security = user". I'd expect that your system would work without any interactions with the DC.