[Samba] winbind + ads: only works for 10 hours?

[Andrew Bartlett]

On Sat, 2004-03-27 at 08:42, Jon Noack wrote:
> I run FreeBSD 5.2.1 and recently configured Samba 3.0.2a (from ports) 
> for ADS using the FreeBSD-bundled krb5 (Heimdal 0.6, I believe) and 
> OpenLDAP 2.1.28 (from ports).  It is setup to authenticate off a Windows 
> 2000 Domain Controller and is primarily used to provide proxy 
> authentication for Squid.  I will share more about my configuration if 
> asked, but as it works flawlessly at first I think it's something minor.
> 
> Everything works quite well until 10 hours after winbindd was started. 
> Then requests get denied.  I set up a cron job to demonstrate this.  The 
> cron job just logs the time and the output of "wbinfo -t" every five 
> minutes:


>  I suppose I could restart winbindd every 9 hours...

Fixes for this are in the current CVS tree.  We now fetch a new ticket
as the old ticket expires.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20040327/585d0fb2/attachment.bin