<div>
<div class="content wysiwyg-content">
i add additional DC to samba 4 &nbsp;(using <a href="https://www.tecmint.com/join-additional-ubuntu-dc-to-samba4-ad-dc-failover-replication/" rel="ugc">https://www.tecmint.com/join-additional-ubuntu-dc-to-samba4-ad-dc-failover-replication/</a>&nbsp; &nbsp; &nbsp; article )<br />
all is working fine. wbinfo -u and wbinfo -g show correct and. som extern user can i login to server. but some domin user not allow to login. <br />
/var/log/auth.log :<br />
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=&quot;ip&quot; &nbsp;user=&quot;user&quot;<br />
pam_winbind(sshd:auth): getting password (0x00000388)<br />
pam_winbind(sshd:auth): pam_get_item returned a password<br />
pam_winbind(sshd:auth): request wbcLogonUser failed: WBC_ERR_AUTH_ERROR, PAM error: PAM_SYSTEM_ERR (4), NTSTATUS: NT_STATUS_CONNECTION_DISCO<wbr />NNECTED, Error message was: The transport connection is now disconnected.<br />
pam_winbind(sshd:auth): internal module error (retval = PAM_SYSTEM_ERR(4), user = 'user'<br />
debug1: PAM: password authentication failed for &quot;user&quot;: Authentication failure<br />
debug3: mm_answer_authpassword: sending result 0<br />
debug3: mm_request_send entering: type 13<br />
<br />
Can you see what is wrong here?
</div>
</div>


i add additional DC to samba 4  (using https://www.tecmint.com/join-additional-ubuntu-dc-to-samba4-ad-dc-failover-replication/      article )
all is working fine. wbinfo -u and wbinfo -g show correct and. som extern user can i login to server. but some domin user not allow to login. 
/var/log/auth.log :
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost="ip"  user="user"
pam_winbind(sshd:auth): getting password (0x00000388)
pam_winbind(sshd:auth): pam_get_item returned a password
pam_winbind(sshd:auth): request wbcLogonUser failed: WBC_ERR_AUTH_ERROR, PAM error: PAM_SYSTEM_ERR (4), NTSTATUS: NT_STATUS_CONNECTION_DISCONNECTED, Error message was: The transport connection is now disconnected.
pam_winbind(sshd:auth): internal module error (retval = PAM_SYSTEM_ERR(4), user = 'user'
debug1: PAM: password authentication failed for "user": Authentication failure
debug3: mm_answer_authpassword: sending result 0
debug3: mm_request_send entering: type 13

Can you see what is wrong here?

login to domain controller server

Linux is a UNIX-like open source operating system with hundreds of distinct distributions, including: Fedora, openSUSE, Ubuntu, Debian, Slackware, Gentoo, CentOS, and Arch Linux. Linux is generally associated with web and database servers, but has become popular in many niche industries and applications.

Linux

Samba

A domain controller is a server that responds to security authentication requests within a computer network domain. It is a network server that is responsible for allowing host access to domain resources. It authenticates users, stores user account information and enforces security policy for a domain

Domain Controller

Servers are computing devices that are similar to desktop computers in that they have the same basic components, but are significantly different in size, configuration and purpose. Servers are usually accessed over a network, and many run unattended, without a computer monitor, input device, audio hardware or USB interfaces. Many servers do not have a graphical user interface (GUI), and are configured and managed remotely. Servers typically include hardware redundancy such as dual power supplies, RAID disk systems, and ECC memory, along with extensive pre-boot memory testing and verification. Critical components might be hot swappable, and to guard against overheating, servers might have more powerful fans or use water cooling.

Server Hardware

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.

Active Directory

A server is a computer program or a machine that waits for requests from other machines or software (clients) and responds to them. This architecture is called the client–server model. The clients may run on the same computer or may connect to the server over a network. The purpose of a server is to share data or hardware and software resources among clients. Typical computing servers are database servers, file servers, mail servers, print servers, web servers, game servers, and application servers.