Hi Roman, On Fri, Mar 26, 2004 at 10:53:25AM +0600, Roman Yerin wrote: > failed kerberos session setup with Unknown error -1765328343 > > anybody knows what's a problem? > > freebsd 5.2.1 + samba 3.0.2a + heimdal 0.6
although your problem is solved now, I still have one question: did you
recompile samba yourself? I'm asking because your error-codes indicate to
a problem I was seeing with heimdal on SuSE Linux as well.
You should see
failed kerberos session setup with Ticket expired
instead of
failed kerberos session setup with Unknown error -1765328343
from krb5_err.h:
#define KRB5KRB_AP_ERR_TKT_EXPIRED (-1765328352L)
I guess that if you apply the attached patch (that initiates the
krb5-error table for heimdal's error_message - something MIT kerberos does
not need), you will see error messages that are much more "speaking".
Bye,
Guenther
--
Guenther Deschner [EMAIL PROTECTED]
SuSE Linux AG GnuPG: 8EE11688
Berliner Str. 27 phone: +49 (0) 30 / 430944778
D-13507 Berlin fax: +49 (0) 30 / 43732804
--- source/libads/kerberos_verify.c 6 Jun 2003 14:53:22 -0000 1.10.2.1
+++ source/libads/kerberos_verify.c 1 Jul 2003 21:30:17 -0000
@@ -62,6 +62,7 @@
password.data = password_s;
password.length = strlen(password_s);
+ initialize_krb5_error_table();
ret = krb5_init_context(&context);
if (ret) {
DEBUG(1,("krb5_init_context failed (%s)\n", error_message(ret)));
--- source/libads/krb5_setpw.c 6 Jun 2003 14:53:22 -0000 1.16.2.1
+++ source/libads/krb5_setpw.c 1 Jul 2003 21:30:17 -0000
@@ -470,6 +470,7 @@
krb5_creds creds, *credsp;
krb5_ccache ccache;
+ initialize_krb5_error_table();
ret = krb5_init_context(&context);
if (ret) {
DEBUG(1,("Failed to init krb5 context (%s)\n", error_message(ret)));
@@ -584,6 +585,7 @@
krb5_creds creds;
char *chpw_princ = NULL, *password;
+ initialize_krb5_error_table();
ret = krb5_init_context(&context);
if (ret) {
DEBUG(1,("Failed to init krb5 context (%s)\n", error_message(ret)));
--- source/libsmb/clikrb5.c 1 Jul 2003 14:40:37 -0000 1.36.2.2
+++ source/libsmb/clikrb5.c 1 Jul 2003 21:30:20 -0000
@@ -320,7 +320,8 @@
ENCTYPE_DES_CBC_MD5,
ENCTYPE_DES_CBC_CRC,
ENCTYPE_NULL};
-
+
+ initialize_krb5_error_table();
retval = krb5_init_context(&context);
if (retval) {
DEBUG(1,("krb5_init_context failed (%s)\n",
--- source/utils/net_lookup.c 1 Jul 2003 14:40:47 -0000 1.8.2.1
+++ source/utils/net_lookup.c 1 Jul 2003 21:30:24 -0000
@@ -177,6 +177,7 @@
krb5_data realm;
char **realms;
+ initialize_krb5_error_table();
rc = krb5_init_context(&ctx);
if (rc) {
DEBUG(1,("krb5_init_context failed (%s)\n",
--- source/libads/kerberos.c 2003-06-28 23:40:40.000000000 +0200
+++ source/libads/kerberos.c 2003-09-18 02:54:27.000000000 +0200
@@ -62,6 +62,7 @@
krb5_principal me;
krb5_creds my_creds;
+ initialize_krb5_error_table();
if ((code = krb5_init_context(&ctx)))
return code;
pgp00000.pgp
Description: PGP signature
-- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
