[EMAIL PROTECTED] wrote:
FYI, I have upgraded to Samba 3.0.7-1.3E and the problem persists.
Jon Etkins
IT Administration & Support
Austin Logistics, Inc
[EMAIL PROTECTED] wrote on
09/22/2004 01:33:55 PM:
Hi, folks.
I'm in the process of setting up a RH ES3 box as a samba server in our
Active Directory environment. I have kerberos working for user
authentication, and can both log into the RH machine and map drives from
windows clients using domain passwords, but the drive mapping only works
if I specify the share name with the server's IP address:
\\10.1.200.114\share1. If I try using the server's name -
\\sambasvr\share1 - the authentication fails and I see the following in
the corresponding client's log file on the server:
[2004/09/22 13:23:15, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)
Failed to verify incoming ticket!
and the following in the Security log on the AD server:
Event Type: Failure Audit
Event Source: Security
Event Category: Account Logon
Event ID: 676
Date: 9/22/2004
Time: 1:23:14 PM
User: NT AUTHORITY\SYSTEM
Computer: TORO
Description:
Authentication Ticket Request Failed:
User Name: jetkins$
Supplied Realm Name: AUSTINLOGISTICS.COM
Service Name: krbtgt/AUSTINLOGISTICS.COM
Ticket Options: 0x40810010
Failure Code: 0x6
Client Address: 10.1.200.26
The system is running kerberos 1.2.7-28 and samba 3.0.6-2.3E. Any and
all
suggestions gratefully accepted - while it's working as is, I'd prefer
to
get this last wrinkle ironed out before I release it to my users for
testing.
Thanks,
Jon Etkins
IT Administration & Support
Austin Logistics, Inc
--
Sounds like you're running into either the kerberos compatibility errors
we see with win2k3 or the newest problem where people upgrade from
3.0.6+ and then start encountering apparent kerberos failures in win2k
environments. Do you see any "Failed to verify incoming ticket!" errors
in /var/log/samba files?
Christian
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
