Hi. On 22.07.2013 16:28, Eugene M. Zheganin wrote: > When I'm trying to join a machine to a domain via ADS I get > "kerberos_kinit_password d...@norma.com failed: Looping detected inside > krb5_get_in_tkt". In the same time plain "kinit d...@norma.com" from a > console gives me a ticket without errors. Is this a bug (so I should > report it) or can this still be some misconfiguration on my side ? I'm > doing this on testparm-approved config file from 3.5.x. > > P.S. FreeBSD 10.0-CURRENT. > After not having luck with ntlm_auth in samba4, I decided to return and to investigate this problem. In wireshark I see that this looping is actually a sequence of exchanges AS-REQ -> KRB5KDC_ERR_PREAUTH_REQUIRED. After two tries I got this (looping detected ...) error from kinit.
What is the reason of samba kinit not preauthenticating (while FreeBSD's kinit does, because it works) ? Plus, after each joining retry I got in 'Active directory users in computers' a new machine account from this samba instance (does this mean it has actually joined ?). below is the link to a -d 10 output from the net ads join: http://tech.hq.norma.perm.ru/files/join.log Thanks. Eugene. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
