To circumvent a PDC mode issue with workstation trust we are testing this custom-template fragment for smb.conf:
cat /etc/e-smith/templates-custom/etc/samba/smb.conf/30badlock30badlock workaround – custom template
[global]
allow dcerpc auth level connect = yes
server signing = mandatory
warning This may break older clients.
Edit: run also this command
signal-event nethserver-samba-update