We upgraded our Solaris 9 samba server to version 3.0.2a and configured Kerberos MIT 1.3.2. I was able to run kinit and join samba to our windows 2003 domain as a domain member, but when I am trying to browse the samba shares from a windows XP machine it is failing. When I am looking at the samba logs this is what I am getting: [2004/03/30 11:15:26, 3] libads/kerberos_verify.c:ads_verify_ticket(323) ads_verify_ticket: enc type [3] failed to decrypt with error Decrypt integrity check failed [2004/03/30 11:15:26, 3] libads/kerberos_verify.c:ads_verify_ticket(330) ads_verify_ticket: krb5_rd_req with auth failed (Bad encryption type) [2004/03/30 11:15:26, 1] smbd/sesssetup.c:reply_spnego_kerberos(173) Failed to verify incoming ticket! [2004/03/30 11:15:26, 3] smbd/error.c:error_packet(94) error string = No such file or directory [2004/03/30 11:15:26, 3] smbd/error.c:error_packet(118) error packet at smbd/sesssetup.c(174) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE
I was trying to run smbclient -k '\\machine\share' and it failed. After initiating the kinit command I was then able to run the smbclient -k command. Accessing the shares from a windows box is still failing. I am little confused, do I need to create a Kerberos database in the samba server and manage the users tickets? My understanding is that I am authenticating against windows 2003 Kerberos database. Thanks, Moshe -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
