[Samba] Old, reliable samba 3.5 and Active directory suddenly not reliable

[Bart Janssens]

Hi Robert,

You may want to consider installing the Solaris 10 Samba patches:
119757-25 (sparc)
119758-25 (x86)

-25 updates the Solaris 10 Samba package to 3.6.7

Regards,

-Bart


On 23/10/12 17:14, Robert M. Martel - CSU wrote:
>
>
> On 10/22/2012 05:10 PM, Andrew Bartlett wrote:
>> On Mon, 2012-10-22 at 14:51 -0400, Robert M. Martel - CSU wrote:
>
>>> [2012/10/22 14:23:07.353280,  0] 
>>> libads/kerberos.c:333(ads_kinit_password)
>>>     kerberos_kinit_password WEBDEVEL$@CSUNET.CSUOHIO.EDU failed: 
>>> Clients
>>> credentials have been revoked
>>> Join to domain is not valid: Access denied
>>>
>>>
>>> The Active Directory admins are still saying that they have not changed
>>> anything on their side.
>>
>> It seems unlikely if you just re-joined, but in case we are talking
>> about multiple machines, could the password have been expired?
>
> The problem existed for multiple machines.
>
> After Brian Campbell's note I double-checked the clock-sync on the 
> servers and found it to be okay.
>
> The Active Directory (AD) admins that "did not change anything" 
> finally reported having some vague problem with their domain server 
> replication that only seem to affect *my* Samba servers (I may be the 
> only person on campus running Samba servers that are members of the 
> university's Active Directory system.)
>
> There was some more hand waving, reports of trying to get some support 
> out of Microsoft, and finally a mention that *someone* had been making 
> some changes to AD config in preparation of moving from Lotus Notes 
> Email to MS Exchange.
>
> The AD admins then "did something else" and now the problem no longer 
> exists.  I am still trying to get some real information as to what 
> happened.
>
> If I (ever) find out I will note it here.  I always hate seeing 
> problem reports in Email archives that never talk about resolution.
>
> Thank you!
>
> At least I got my Samba versions less out of date.  Have to see if 
> building 3.6 is as much of a pain on Solaris as 3.5 has been.
>
>
>