Samba-3.0.7-1.3E Active Directory Issues

[Andrew Bartlett]

On Thu, 2004-10-14 at 22:18, Will Tatam wrote:
> I'm running a REHL 3 server which had previously been running perfectly
> with security=ADS but after running redhat's up2date to install 3.0.7-1E
> i started getting "Failed to verify incoming ticket!"
> 
> After speaking to Jeremy Allison at Linux Expo he suggested that I
> needed the MIT 1.3.x version of kerberos installed, however  rpm -qa |
> grep krb5 reports
> 
> pam_krb5-1.73-1
> krb5-libs-1.2.7-28
> krb5-devel-1.2.7-28
> krb5-workstation-1.2.7-28

Installing krb5-1.3 is considered the solution, but it's apparently
quite hard - later versions don't compile, and you certainly can't
replace the RPMs.

I tried to debug this with another site, and came up with this patch.  
Somebody needs to look over the changes back in 3.0.4 with the 'use
kerberos keytab' stuff.

My guess was:
http://hawkerc.net/staff/abartlet/kerberos-verify-fix2.patch

But this apparently didn't work.  

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at samba.org
Authentication Developer, Samba Team            http://samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20041014/4756c08f/attachment.bin