[Samba] Samba 3.0.6 Problems w/AD and Kerberos

Christian Merrill cmerrill at redhat.com
Wed Sep 8 19:22:42 GMT 2004

Blindauer Emmanuel wrote:

>Le dimanche 05 Septembre 2004 13:38, Christian Merrill a écrit :
>>Running into a lot of people upgrading to the 3.0.6 package that all
>>of a sudden begin to experience the "Failed to verify incoming
>>ticket!" errors etc., that are generally associated with a kerberos
>>package incompatibility.
>>However many of these people are running later versions of kerberos
>>*and* reverting to a previous version of Samba appears to fix the
>>issue.  Is there something new setting wise that has taken place, is
>>something really wrong with this new package, or is this all just a
>>strange coincidence?
>I confirm the problem:
>I'm running win2k SP4, AD, mixed mode, no other special conf.
>the samba is 3.0.6, compiled from sources. I use winbind too.
>winbind has some "  krb5_cc_get_principal failed (No credentials cache found)" 
>but nothing special.
>but the samba daemon get, for some users, 
>Failed to verify incoming ticket "
>and this prevent user from acceding their share.
>the used kerberos is 1.3.4
>The 2000 domain has been started from scratch, no NT4 migration.
My customers are using 1.2.X packages but this sounds identical to the 
problem they are seeing.  The effect of all this is the classic "I can 
browse to shares by \\ip.address\share_name but when I try to browse by 
\\netbios_name\share_name I get prompted for a account/password and 
these errors start popping up in the logs"

Emmanuel does this problem also go away for you when you revert to an 
older samba release?


More information about the samba mailing list