[Samba] Issue with FAST implementation ? Disabling really disable ?

[L. van Belle]

Hai, 

Well, it was a guess based on what I saw here and you asked for ideas. 
https://wiki.samba.org/index.php/Samba_Features_added/changed 
# Heimdal-8.0pre used for Samba Internal Kerberos, adds FAST support 
that part. 

Good that Rowland is so sharp today.. 😉 

Greetz, 

Louis





> -----Oorspronkelijk bericht-----
> Van: samba <samba-bounces at lists.samba.org> Namens Olivier BILHAUT via
> samba
> Verzonden: woensdag 20 juli 2022 15:48
> Aan: belle at samba.org
> CC: samba at lists.samba.org
> Onderwerp: Re: [Samba] Issue with FAST implementation ? Disabling really
> disable ?
> 
> Hi Louis,
> 
> Unfortunately it wasn't sufficient. I wonder if the setting works as expected
> in this case.
> 
> --
> 
> Olivier B
> 
> Le 2022-07-20 14:26, L.
> van Belle via samba a écrit :
> 
> > Try
> >
> > kdc enable fast = no
> >
> > in
> smb.conf
> >
> > Greetz,
> >
> > Louis
> >
> >> -----Oorspronkelijk
> bericht-----
> >> Van: samba <samba-bounces at lists.samba.org> Namens
> Olivier BILHAUT via
> >> samba
> >> Verzonden: woensdag 20 juli 2022
> 13:19
> >> Aan: samba <samba at lists.samba.org>
> >> Onderwerp: [Samba] Issue
> with FAST implementation ? Disabling really
> >> disable ?
> >>
> >> Hi
> list,
> >>
> >> Juste migrating from samba 4.14 to samba 4.16.3. Most works
> fine and
> > thanks
> >> again for this great work.
> >>
> >> However I have an
> issue
> >> with a smbclient run locally which seems to fail due to a FAST
> issue.
> >> The command is run from the DC itself :
> >>
> >> --
> >>
> >> $>
> >>
> /USR/LOCAL/SAMBA/BIN/SMBCLIENT \\\\DOMAIN.TLD\\NETLOGON -
> >>
> UDOMAIN/ACCOUNT -PPASS
> >>
> >> gse_get_client_auth_token:
> gss_init_sec_context failed with [
> >> Miscellaneous failure (see text):
> FAST fast response is missing FX-FAST
> >>
> (cifs/DOMAIN.TLD at LOCAL)](2529639059)
> >>
> gensec_spnego_client_negTokenInit_step:
> >> gse_krb5: creating
> NEG_TOKEN_INIT for cifs/domain.tld failed
> >> (next[(null)]):
> NT_STATUS_LOGON_FAILURE
> >> session setup failed:
> >>
> NT_STATUS_LOGON_FAILURE
> >>
> >> --
> >>
> >> I have tried to disable FAST
> with " kdc
> >> enable fast = no" (and restart) as I have seen in release
> note, but now
> > way.
> >>
> >> Any advice ?
> >>
> >> Have a nice day !
> >>
> >>
> --
> >>
> >> Olivier B
> >> --
> >> To unsubscribe from this list go to the
> following URL and read the
> >> instructions:
> https://lists.samba.org/mailman/options/samba
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba