Blindauer Emmanuel wrote:

Le dimanche 05 Septembre 2004 13:38, Christian Merrill a écrit :


Running into a lot of people upgrading to the 3.0.6 package that all
of a sudden begin to experience the "Failed to verify incoming
ticket!" errors etc., that are generally associated with a kerberos
package incompatibility.

However many of these people are running later versions of kerberos
*and* reverting to a previous version of Samba appears to fix the
issue.  Is there something new setting wise that has taken place, is
something really wrong with this new package, or is this all just a
strange coincidence?

Christian


I confirm the problem:
I'm running win2k SP4, AD, mixed mode, no other special conf.
the samba is 3.0.6, compiled from sources. I use winbind too.
winbind has some " krb5_cc_get_principal failed (No credentials cache found)" but nothing special.
but the samba daemon get, for some users, "smbd/sesssetup.c:reply_spnego_kerberos(173) Failed to verify incoming ticket "
and this prevent user from acceding their share.
the used kerberos is 1.3.4


The 2000 domain has been started from scratch, no NT4 migration.

Emmanuel


My customers are using 1.2.X packages but this sounds identical to the problem they are seeing. The effect of all this is the classic "I can browse to shares by \\ip.address\share_name but when I try to browse by \\netbios_name\share_name I get prompted for a account/password and these errors start popping up in the logs"

Emmanuel does this problem also go away for you when you revert to an older samba release?

Christian

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Reply via email to