Shares broken / utilities broken -- GSS server Update(krb5)(1) Update failed: [SOLVED]

Joe Comeaux joe.comeaux at worleyco.com
Fri Jun 29 09:36:20 MDT 2012


> Yes, that would do it.
> Running:
> source4/scripting/devel/chgtdcpass
> should fix it.

This fixed the issue with the windows utilities being able to manage active directory. The problem with the samba shares not working properly had to do with a pid file ( smbd-fileserver.conf.pid ) existing, which stopped the file server binary from launching. After removing the pid file and restarting samba, both samba and smbd are running and working as expected.

The error message "... Failed to find ... in keytab FILE:/usr/local/samba/private/secrets.keytab " does not appear any more, but the error message that was in the logs prior to the change are starting to appear again : "/usr/local/samba/sbin/samba_dnsupdate: RuntimeError: kinit for ATLAS$@LOC.DOM.SMB failed (Clients credentials have been revoked) ".
Along with a bunch of these :

[2012/06/29 10:29:17,  1] ../source4/auth/gensec/gensec_gssapi.c:645(gensec_gssapi_update)
  GSS server Update(krb5)(1) Update failed:  Miscellaneous failure (see text): Decrypt integrity check failed
[2012/06/29 10:29:17,  1] ../auth/gensec/spnego.c:574(gensec_spnego_parse_negTokenInit)
  SPNEGO(gssapi_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE

Every ten minutes or so I get these as well ( which have been appearing for some months now ) :
/usr/local/samba/sbin/samba_spnupdate: ltdb: tdb(/usr/local/samba/private/sam.ldb.d/DC=LOC,DC=DOM,DC=SMB.ldb): tdb_mmap failed for size -39583744 (Cannot allocate memory)

Are any of these errors anything I should be concerned with?
Thanks again
-Joe




More information about the samba-technical mailing list