[Samba] samba 3, ADS, kerberos, keytab problem - Additional pre-authentication required

[Jeremy Allison]

On Tue, Mar 23, 2004 at 09:12:53AM -0500, Jim McDonough wrote:

> Yes, I'm looking into this right now....as we cache the "connection" inside
> winbind, so we don't have to continually re-authenticate, it seems we don't
> ever time-out and renew the tickets.

Hmmm. We don't currently have timeout processing in the
winbindd main loop. Shouldn't be too difficult to add
though. Do you have sample code to renew a ticket, or
should we just drop the connection just before the
ticket expires and let the ordinary re-connection code
deal with it ?

Jeremy.