Samba problems (again)

[Alex Lavrov.]

Hello,

After I reinstalled a server with RedHat ES3, I ran into a strange problem.

Samba is configured to work with a domain, binding went ok, but when I try \\server\public, a get this message in the log files:
[2007/07/05 20:09:22, 1] smbd/sesssetup.c:reply_spnego_kerberos(172)
Failed to verify incoming ticket!

If I do \\\public, everything wirks fine.

Any ideas what can be done?

Thanx.

[Rob Leadbeater]

Hi Alex,

Is the time synchronised properly between all the relevant servers...? I seem to recall the ticketing mechanism in Kerberos being picky about that...

Cheers,

Rob

[Alex Lavrov.]

Yep, I already cheked it. The difference is couple of seconds.

[Ivan Krastev]

Try to add rc4-hmac algorithm in your KERB5.conf file.


regards,
ivan

[Court Campbell]

from:

http://www.wlug.org.nz/ActiveDirectoryKerberos

The solution was to remove (comment out just in case!) the following 3 lines from krb5.conf:

[libdefaults]
#default_tgs_enctypes = des3-hmac-sha1 des-cbc-crc des-cbc-md5
#default_tkt_enctypes = des3-hmac-sha1 des-cbc-crc des-cbc-md5
#permitted_enctypes = des3-hmac-sha1 des-cbc-crc des-cbc-md5

[Steven E. Protter]

Shalom,

up2date the system to current.

Seems like a DNS inconsistency if what the system thinks it is versus what the domain says it is.

Shabbat Shalom Alex.

I'll check this Motzei Shabbat.

SEP

[Alex Lavrov.]

Hello,

Thanx for the replies. I will try them on Sunday and update this thread.


Alex.