Negotiate not done when session setup using Kerberos fails with CONNECTION_RESET in winbindd

Shilpa K shilpa.krishnareddy at gmail.com
Fri Dec 20 12:07:07 UTC 2024


Hello,

In one of our setups, there was a considerable amount of network latency.
In one case, after negotiation is done by winbindd to the DC in the
function cm_prepare_connection(), by the time the kerberos ticket was
obtained, DC reset the connection. During fallback to NTLMSSP, as the
negotiation was not done again, session setup failed with
NT_STATUS_CONNECTION_DISCONNECTED. Should we not redo the negotiation in
case when the reset happens while establishing session setup using kerberos?

Thanks in advance,
Shilpa


More information about the samba-technical mailing list