[Samba] AD controller problems.

Giovanni Cambria cambria at sisted.it
Wed Dec 10 15:20:31 GMT 2008


Derek, spend a couple of minutes to see this link
http://lists-archives.org/samba/36627-kinit-succeeded-but-ads_sasl_spnego_krb5_bind-failed.html

someone seemed had the same problem, time ago

;-) G.

----- Original Message ----- 
From: "Derek Harkness" <dharknes at umd.umich.edu>
To: "Samba List" <samba at lists.samba.org>
Sent: Tuesday, December 09, 2008 11:06 PM
Subject: Re: [Samba] AD controller problems.


>I did check that by doing a time sync against both of the other DCs. 
>Ntpdate adjusted the clock by a couple of milliseconds, not enough to 
>through off kerberos.
>
> Thanks,
> Derek
>
> On Dec 9, 2008, at 12:29 PM, Giovanni Cambria wrote:
>
>> What about the time syncronization of the RTC clock of every DCs?
>>
>> G.
>> ----- Original Message ----- From: "Derek Harkness" 
>> <dharknes at umd.umich.edu
>> >
>> To: "Samba List" <samba at lists.samba.org>
>> Sent: Monday, December 08, 2008 4:40 PM
>> Subject: [Samba] AD controller problems.
>>
>>
>>> In my AD setup I have 3 domain controllers (dc1, dc2, dc3) when  samba/ 
>>> winbind are talking to dc1 everything is great when talking  to dc2 or 
>>> dc3 I get this error "kinit succeeded but  ads_sasl_spnego_krb5_bind 
>>> failed: Strong(er) authentication  required" and nothing works.  I 
>>> don't think its a samba config  problem but my AD admins aren't real 
>>> helpful in getting samba  working.
>>> Has anybody else seen this or maybe got a solution/work around?
>>> Thanks,
>>> Derek
>>> -- 
>>> To unsubscribe from this list go to the following URL and read the
>>> instructions:  https://lists.samba.org/mailman/listinfo/samba
>>>
>>
>
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
>
> 



More information about the samba mailing list