kerberos_kinit_password Preauthentication failed

Herb Lewis hlewis at panasas.com
Mon Nov 10 19:07:21 GMT 2008


I'm using 3.2.4

Gerald (Jerry) Carter wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Herb Lewis wrote:
> 
>>I sometimes get this error after a net ads join. wbinfo -t will
>>fail with NT_STATUS_ACCESS_DENIED. and net ads testjoin will
>>return that error but say the join is OK. If I rejoin the domain
>>(or I think sometimes if I just wait long enough - several minutes)
>>wbinfo -t will then work. It all seems to be related to what kdc
>>is listed first in the krb5.conf file but I'm not positive.
>>
>>What causes this error. Is is just something to do with the sync
>>time between the various kdc's in the domain?
> 
> 
> Yup.  What release are you working with?  This was tested pretty
> heavily in the v3-0 code.  I haven't had a chance to do the same
> testing since libnet was introduced for the domain join process
> in v3-2.
> 
> 
> 
> 
> 
> cheers, jerry
> - --
> =====================================================================
> Samba                                    ------- http://www.samba.org
> Likewise Software          ---------  http://www.likewisesoftware.com
> "What man is a man who does not make the world better?"      --Balian
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.6 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
> 
> iD8DBQFJGG/+IR7qMdg1EfYRAmRTAJ9ZRvGNwCrrS4HGJOncUCloMX4L0gCeOspv
> A82yqs67pIhVNUu5I1k2+yQ=
> =KX3K
> -----END PGP SIGNATURE-----


More information about the samba-technical mailing list