[Samba] Samba 3.0.6 Problems w/AD and Kerberos

[Blindauer Emmanuel]

Le dimanche 05 Septembre 2004 13:38, Christian Merrill a écrit :
> Running into a lot of people upgrading to the 3.0.6 package that all
> of a sudden begin to experience the "Failed to verify incoming
> ticket!" errors etc., that are generally associated with a kerberos
> package incompatibility.
>
> However many of these people are running later versions of kerberos
> *and* reverting to a previous version of Samba appears to fix the
> issue.  Is there something new setting wise that has taken place, is
> something really wrong with this new package, or is this all just a
> strange coincidence?
>
> Christian
I confirm the problem:
I'm running win2k SP4, AD, mixed mode, no other special conf.
the samba is 3.0.6, compiled from sources. I use winbind too.
winbind has some "  krb5_cc_get_principal failed (No credentials cache found)" 
but nothing special.
but the samba daemon get, for some users, 
"smbd/sesssetup.c:reply_spnego_kerberos(173) 
Failed to verify incoming ticket "
and this prevent user from acceding their share.
the used kerberos is 1.3.4

The 2000 domain has been started from scratch, no NT4 migration.

Emmanuel