On Mon, 2005-02-21 at 14:10 +0100, AntÃn wrote: 
> Andrew Bartlett wrote:
> 
> > On Wed, 2005-02-16 at 10:09 -0500, Greg Folkert wrote:
> >> On Wed, 2005-02-16 at 11:49 +0100, AntÃn wrote:
> >> > Hi,
> >> > 
> >> > I 've a gateway and I want to use squid authenticated with Windows
> >> > 2000 Active Directory users.
> >> > 
> >> > I've a development platform with Debian/Sarge as gateway, and it
> >> > works. (samba 3.0.10-1 and Kerberos 1.3.6-1)
> >> > 
> >> > On the other side the production platform uses RedHat Enterprise
> >> > AS3, initially with Samba 3.0.6 and Kerberos 1.2.7-28. I was not
> >> > able to use Active directory groups without get smb panic errors in
> >> > winbindd, so I update to Samba 3.0.9-1.3E.2 and Kerberos 1.2.7-38
> >> > (last available updates).
> >> 

> |connecting to PDC from GATEWAY with kerberos principal
> [EMAIL PROTECTED]
> |Doing kerberos session setup
> |failed tcon_X with NT_STATUS_ACCESS_DENIED


This looks like a bug that is fixed in Samba 3.0.11, ie we were getting
the krb5 smb signing wrong.

Otherwise, see if the windows server gives hints as to the cause of the
error.

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net

Attachment: signature.asc
Description: This is a digitally signed message part

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to