Samba-3.0.7-1.3E Active Directory Issues

Andrew Bartlett abartlet at
Thu Oct 14 12:50:27 GMT 2004

On Thu, 2004-10-14 at 22:18, Will Tatam wrote:
> I'm running a REHL 3 server which had previously been running perfectly
> with security=ADS but after running redhat's up2date to install 3.0.7-1E
> i started getting "Failed to verify incoming ticket!"
> After speaking to Jeremy Allison at Linux Expo he suggested that I
> needed the MIT 1.3.x version of kerberos installed, however  rpm -qa |
> grep krb5 reports
> pam_krb5-1.73-1
> krb5-libs-1.2.7-28
> krb5-devel-1.2.7-28
> krb5-workstation-1.2.7-28

Installing krb5-1.3 is considered the solution, but it's apparently
quite hard - later versions don't compile, and you certainly can't
replace the RPMs.

I tried to debug this with another site, and came up with this patch.  
Somebody needs to look over the changes back in 3.0.4 with the 'use
kerberos keytab' stuff.

My guess was:

But this apparently didn't work.  

Andrew Bartlett

Andrew Bartlett                                 abartlet at
Authentication Developer, Samba Team  
Student Network Administrator, Hawker College   abartlet at
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url :

More information about the samba-technical mailing list