[Samba] RE: Bug 1315 -- wrong schannel auth len 24 -- am I having same problem on my Mac?

[William R. Lorenz]

Hi Chris,

I remember seeing the 'Failed to verify incoming ticket!' over the course
of my adventures, and I think that it's rather safe to say that if you're
trying to use Samba to authenticate against an Active Directory server, it
would be wise to start with 3.0.4 and a working patch. ;)  I've heard that
downgrading to a specific version will help to fix this as well, though.

Maybe someone with a more authoritive answer could hop in on this thread.

I will have RPM packages w/ 3.0.4 and the patch available later this
afternoon for a Fedora Core 1 installation.  The packages also work on a
Fedora Core 2 install, which is due out for public consumption tomorrow, I
do believe.  Everything works hunky-dory on FC2 for me with the packages:  
winbind against ADS, `wbinfo -u,-g,-t`, ext3 with FS ACLs set via Samba,
users, groups, and the rest of the goods.  I'm quite pleased now. :)

The patch is attached to https://bugzilla.samba.org/show_bug.cgi?id=1315
and can be applied to a tarball (.tar.gz) using the `patch` utility, too.

On Mon, 17 May 2004, Huyler, Christopher M wrote:

> Can someone verify that I am having the same problem with Mac OS X
> Panther (10.3.3) using Samba 3.0.2 based on my log below?  I get this
> trying to connect from my WinXP machine to my Mac which is configured
> with ADS. If so, can you point me to a set of instructions on upgrading

  [...]

> [2004/05/17 09:43:34, 1]
> /SourceCache/samba/samba-56/samba/source/smbd/sesssetup.c:
>  reply_spnego_kerberos(173) Failed to verify incoming ticket!

> # -----Original Message-----
> #
> # The fix for 3.0.4 is attached to
> #
> #	https://bugzilla.samba.org/show_bug.cgi?id=1315
> #
> # Anders, I posted this previsouly in response to one of
> # the threads you referred to.
> #
> # http://lists.samba.org/archive/samba/2004-May/085842.html

--          _ 
__ __ ___ _| | William R. Lorenz <wrl at express.org> 
\ V  V / '_| | http://www.clevelandlug.net/ ; "Every revolution was 
 \./\./|_| |_| first a thought in one man's mind." - Ralph Waldo Emerson