kerberos_kinit_password Preauthentication failed

Volker Lendecke Volker.Lendecke at SerNet.DE
Tue Jan 20 20:05:14 GMT 2009


On Tue, Jan 20, 2009 at 11:49:40AM -0800, Herb Lewis wrote:
> Gerald (Jerry) Carter wrote:
> >
> >The wbinfo -t failure would imply that Winbind is not using the
> >same DC as it did for the join (as wbinfo -t sets up the machine
> >credentials chain on the NetLogon pipe).
> >
> Any way to force the DC's to sync the join info faster? Sometimes
> it seems I have to wait about 3 minutes before wbinfo -t works.
> 
> >This all should be fine.  Are you removing any tdbs or files
> >between the join and the wbinfo -t ?
> 
> No I'm not removing any tdb files.

With 3.0.34 the server affinity cache for net ads join was
fixed. I'd have to look if it's already in 3.2.7, but that
should fix most of those issues. Winbind should connect to
the DC net join used.

Volker
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20090120/c29211d8/attachment.bin


More information about the samba-technical mailing list