Kerberos auth. problems with Samba 3 & XP SP1

Luke Howard lukeh at PADL.COM
Sun Sep 28 23:00:21 GMT 2003

>I am getting the same "ads_verify_ticket: krb5_rd_req with auth failed (Bad
>encryption type)" message that others are seeing - see log below.

You likely need to rebuild SAMBA with a Kerberos library that supports
rc4-hmac (such as MIT Kerberos 1.3, or very recent versions of Heimdal), or
ensure that the SAMBA server's principal has the UF_USE_DES_KEY_ONLY bit
set on its userAccountControl attribute.

-- Luke

More information about the samba-technical mailing list