> What do you get when you do wbinfo -a user or wbinfo -k user? Plaintext and Kerberos authentication succeeds, but challenge-response doesn't for some reason. Not sure if that's related? Thanks, James.