[Samba] Samba 3.0 beta with Kerberos support

Markus Moeller mm at mail.deuba.com
Mon Jul 14 12:48:36 GMT 2003


It seems I am missing some parts for setting up samba with Kerberos support.

I can successfully connect with smbclient -k to a Windows XP,2003 server. But 
when I run smbd with 

security = ADS
realm = MYREALM.COM
 
and a working krb5.conf. ( kerberised telnet/ftp/etc works) I get an error  
message on Windows XP/2003.

Also if I try to connect with smbclient -k .... I get NT_STATUS_LOGON_FAILURE 
and the server finishes with 

Doing spnego session setup
NativeOS=[Unix] NativeLanMan=[Samba]
Got OID 1 2 840 48018 1 2 2
Got OID 1 3 6 1 4 1 311 2 2 10
Got secblob of size 1660
failed to fetch machine password
Failed to verify incoming ticket!
error string = File exists
error packet at smbd/sesssetup.c(177) cmd=115 (SMBsesssetupX) 
NT_STATUS_LOGON_FAILURE
created /tmp/SMBsesssetupX.78.resp len 39


Where does the "failed to fetch machine password" error come from ?  A trace 
of the server doesn't show any attempt of reading krb5.conf nor krb5.keytab.

Any help is appreciated.

Thanks
Markus






More information about the samba mailing list