BAD_NET_RESP and GET_TGT

[Andrew Bartlett]

I've now seen the imfamous BAD_NET_RESP error in a short run of make
test, using my faster-drs-krb5-ccache-p-im branch.

I run make test TESTS="repl drs"

In st/vampire_dc/samba_test.log I see:

../source4/dsdb/common/util.c:4807: Failed to find account dn
(serverReference) for CN=PROMOTEDVDC,CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=samba,DC=example,DC=com, parent of
DSA with objectGUID 6f0bc0f7-8e07-42ac-bb07-64fefb3c728b, sid S-1-5-21-
2961692879-429220407-1585664198-1167
../source4/rpc_server/drsuapi/updaterefs.c:371: Refusing
DsReplicaUpdateRefs for sid S-1-5-21-2961692879-429220407-1585664198-
1167 with GUID 6f0bc0f7-8e07-42ac-bb07-64fefb3c728b
.

In st/promoted_dc/samba_test.log I see:

UpdateRefs failed with WERR_DS_DRA_ACCESS_DENIED/NT code 0xc0002105 for
6f0bc0f7-8e07-42ac-bb07-64fefb3c728b._msdcs.samba.example.com
DC=ForestDnsZones,DC=samba,DC=example,DC=com

In st/ad_dc_ntvfs/samba_test.log I don't see anything.

I'm thinking the GET_TGT work should help fix this.

I have the full st/ dir kept aside for reference.

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba