Moshe Shaham schrieb:
We upgraded our Solaris 9 samba server to version 3.0.2a and configured
Kerberos MIT 1.3.2.
I was able to run kinit and join samba to our windows 2003 domain as a
domain member, but when I am trying to browse the samba shares from a
windows XP machine it is failing. When I am looking at the samba logs this
is what I am getting:
[2004/03/30 11:15:26, 3] libads/kerberos_verify.c:ads_verify_ticket(323)
ads_verify_ticket: enc type [3] failed to decrypt with error Decrypt
integrity check failed
[2004/03/30 11:15:26, 3] libads/kerberos_verify.c:ads_verify_ticket(330)
ads_verify_ticket: krb5_rd_req with auth failed (Bad encryption type)
[2004/03/30 11:15:26, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)
Failed to verify incoming ticket!
[2004/03/30 11:15:26, 3] smbd/error.c:error_packet(94)
error string = No such file or directory
[2004/03/30 11:15:26, 3] smbd/error.c:error_packet(118)
error packet at smbd/sesssetup.c(174) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE
I was trying to run smbclient -k '\\machine\share' and it failed. After
initiating the kinit command I was then able to run the smbclient -k
command. Accessing the shares from a windows box is still failing.
I am little confused, do I need to create a Kerberos database in the samba
server and manage the users tickets? My understanding is that I am
authenticating against windows 2003 Kerberos database.
Thanks,
Moshe
where is your smb.conf, this looks like that you dont set security = user
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
