[Samba] RE: Bug 1315 -- wrong schannel auth len 24 -- am I having same problem on my Mac?

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Huyler, Christopher M wrote:

| Can someone verify that I am having the same problem
| with Mac OS X Panther (10.3.3) using Samba 3.0.2 based
| on my log below?  I get this trying to connect from
| my WinXP machine to my Mac which is configure with ADS.
|
| If so, can you point me to a set of instructions on upgrading
| from 3.0.2 to 3.0.4 with this patch?
|
| I don't have control over the server I authenticate
| with...it is about 300 miles away, so upgrading my own
| machine would be the only option.

This is not the same as bug #1315.  This is a krb5 lib
problem.  You need to use a version of kerberos that supports
the ARCFOUR_HMAC_MD5 (23) encryption type.  Looks like
either you have an old version of krb5 libs (assuming
included with Panther) or a misconfiguration.

| ads_verify_ticket: krb5_rd_req with auth failed (Bad
|   encryption type)
| Failed to verify incoming ticket!





cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFAqNDBIR7qMdg1EfYRAmCBAKDhKuRN6Rxm5iv70/kM02Q63LYiuQCfXcR5
eYXw/NqxSSopTRUNMpXvvaI=
=RcsC
-----END PGP SIGNATURE-----