[Samba] Re: Kerberos Error

[Norman Zhang]

Martin Zielinski wrote:

> 3. What do we (samba users) need to know about the ticket received by kinit? 
> Do we ever need to renew it? Or is the ticket obsolete after joining the 
> domain? 

Have you tried my workaround? It is recommended by 
http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/domain-member.html#ads-member.

What do you get when you type

# klist tickets

>> [libdefaults]
>>  ticket_lifetime = 24000
>>  default_realm = HQ.ARKONNETWORKS.COM
>> ; default_tgs_enctypes = des3-hmac-sha1 des-cbc-crc
>> ; default_tkt_enctypes = des3-hmac-sha1 des-cbc-crc
>> ; permitted_enctypes = des3-hmac-sha1 des-cbc-crc
>>
>> default_etypes = des-cbc-crc des-crc-md5
>> default_etypes_des = des-cbc-crc des-crc-md5

Regards,
Norman Zhang