On 9 March 2017 at 12:06, John Beranek <[email protected]> wrote: > On 9 March 2017 at 10:29, John Beranek <[email protected]> wrote: >> So, an update on this - I left the server for a day, and Samba has >> stopped authenticating. Samba log says: >> [snip] >> >> So, adcli updated the keytab, but Samba auth still stopped working? > > It seems a bit worse than this though, as sssd itself is upset too: > > Mar 9 12:05:19 server [sssd[krb5_child[32221]]]: Key version number > for principal in key table is incorrect > Mar 9 12:05:19 server [sssd[krb5_child[32221]]]: Key version number > for principal in key table is incorrect > > I'm going to try to clear the SSSD databases to see if that helps.
Cleared all SSSD databases, and re-ran "adcli join" and SSSD was happy again. Disconnected the SMB share on my Windows workstation and re-established (with a Username/Password prompt??) and SMB access is working again: confusing. John -- John Beranek To generalise is to be an idiot. http://redux.org.uk/ -- William Blake _______________________________________________ sssd-users mailing list -- [email protected] To unsubscribe send an email to [email protected]
