Hi All, Little update:
After installing kerberos 1.3.3 recompiling samba against those libs/include the problem went away!! I am a little unclear regarding what really needed to be put in krb5.conf At the moment I have them as suggested by Dimitri > default_tkt_enctypes = des-cbc-crc des-cbc-md5 > default_tgs_enctypes = des-cbc-crc des-cbc-md5 So I don't understand what those defaults do, why put any default, and why encryption type that is not put in there should have a problem. Also, if I do need to list all supported etypes, what are they? What are all possible etypes that windows 200x using? And one more question. Does Kerberos has important files similar to secrets.tdb that are kept even after reboot and where does Kerberos keep them. Thanks again for the wonderful support in this complicated issue, Cheers, Ephi -----Original Message----- From: Andrew Bartlett [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 14, 2005 8:03 PM To: Ephi Dror Cc: [email protected] Subject: RE: [Samba] Kerberos enc type [xx] failed On Tue, 2005-06-14 at 19:04 -0700, Ephi Dror wrote: > Hi Andrew, > > I upgraded krb5 libs to 1.3.3 and now the error became "Decrypt > integrity check failed". Just checking, have you rebuilt Samba against the new libs/headers? We detect the older libs, and do workarounds that you don't want any more. Also, how did you upgrade the kerberos libs. I meant to say in my original mail that it is known to be a very painful process, so I wonder if the libs you installed are the ones you are using. Check what configure said, and what ldd says. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Samba Developer, SuSE Labs, Novell Inc. http://suse.de Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College http://hawkerc.net -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
