[Samba] Failed to verify incoming ticket

[Nuno Silva]

Hi,

This is probably a problem with your kerberos version.

Try mapping with ip address like this:

C:\> net use t: \\10.10.10.1\teste 



_________________________
Nuno Silva
Engineering Solutions / Enterprise Computing




-----Original Message-----
From: samba-bounces+nuno.silva=novabase.pt at lists.samba.org
[mailto:samba-bounces+nuno.silva=novabase.pt at lists.samba.org] On Behalf Of
Warbeck, Mark
Sent: sexta-feira, 30 de Julho de 2004 17:57
To: samba at lists.samba.org
Subject: [Samba] Failed to verify incoming ticket

Hi,

I'm trying to get Samba 3.0.2 working against a Windows 2003 Active
Directory. I can join the Linux box (RedHat Advanced Server) to the
domain using "net ads join" and it appears in the Windows machine's
Users and Computers snap in but when trying to map a drive from Windows
you just get a continuous password dialog bog and on the Linux box Samba
produces the following error in the Samba log:

Smbd/sesssetup.c:reply_spnego_kerberos(173)
  Failed to verify incoming ticket!

Here is smb.conf:
###########
#======================= Global Settings
=====================================
[global]

   workgroup = w2k3 

   netbios name = fs

   server string = Samba Server

   log file = /var/log/samba/smbd.log

   max log size = 50

   security = ads

   realm = W2K3.TEST

   client use spnego = yes

   use spnego = yes

   client signing = yes

   server signing = yes

   encrypt passwords = yes

   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

;   local master = no

;   os level = 33

   dns proxy = no 


#============================ Share Definitions
==============================
[homes]
   comment = Home Directories
   browseable = no
   writable = yes
##############

And here's krb5.conf:
##############
[logging]
 default = FILE:/var/log/krb5libs.log
 kdc = FILE:/var/log/krb5kdc.log
 admin_server = FILE:/var/log/kadmind.log

[libdefaults]
# ticket_lifetime = 24000
 default_realm = W2K3.TEST
# dns_lookup_realm = false
# dns_lookup_kdc = false

[realms]
 W2K3.TEST = {
  kdc = test-dc.w2k3.test:88
  admin_server = test-dc.w2k3.test:749
  default_domain = w2k3.test
 }

[domain_realm]
 .w2k3.test = W2K3.TEST	
 w2k3.test = W2K3.TEST

[kdc]
#  profile = /var/kerberos/krb5kdc/kdc.conf

[appdefaults]
 pam = {
   debug = false
   ticket_lifetime = 36000
   renew_lifetime = 36000
   forwardable = true
   krb4_convert = false
 }
##############

Thanks,
Mark

--
Mark Warbeck
Systems Engineer
Engineering Science and Mechanics
Virginia Tech
323A Norris Hall
Mail Code 0219
Blacksburg, VA 24061
540.231.7489 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba