Bug 16029 - Wrong NT_STATUS code when a smartcard authentication failed because of wrong time
Summary: Wrong NT_STATUS code when a smartcard authentication failed because of wrong ...
Status: NEW
Alias: None
Product: Samba 4.1 and newer
Classification: Unclassified
Component: AD: LDB/DSDB/SAMDB (show other bugs)
Version: 4.24.0rc*
Hardware: All All
: P5 normal (vote)
Target Milestone: ---
Assignee: Samba QA Contact
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2026-03-11 11:31 UTC by Denis Cardon
Modified: 2026-03-11 21:24 UTC (History)
3 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Denis Cardon 2026-03-11 11:31:34 UTC 
When time is not correct on a AD member computer, and we try to authenticate with a smartcard, we got NT_STATUS_LOGON_FAILURE on a Samba-AD.

On a MS-AD, one would get a NT_STATUS_TIME_DIFFERENCE_AT_DC.

This is not a big issue, just a difference in behavior.