[Samba] Re: Samba 3.0.6 Problems w/AD and Kerberos

[Josh T]

I've had this problem since a Samba.org .deb package upgrade 3.0.5 to 
3.0.6 on Debian stable.  Domain is ADS Windows 2000 Native - both domain 
controllers are  W2K Server SP4.  I'm using an XP SP2 PC and a Windows 
2000 Server SP4 PC as clients to test (simply because they're by my desk).

Yesterday, I set up a fresh test install od debian stable (under VMWare) 
and installed from source MIT Kerberos 1.3.4, OpenLDAP 2.2.15, and Samba 
3.0.6 to see if it was a problem with Debian Stable's older kerberos. 
But I had the same problem - \\ipaddress worked, but \\name didn't.

So I removed Samba 3.0.6 via:
stopping the daemons
net ads leave
make uninstall in the source dir
manually deleting /lib/libnss_win*
manually deleting any samba related files in /var/log & /var/run, etc.

I then downloaded and compiled Samba 3.0.5 and set it up.  It was 
working last night, however this morning I started having the same 
problems...


Here's a log of a XP SP2 client failing to connect to Samba 3.0.6 test:
[2004/09/08 13:57:38, 3] libads/kerberos_verify.c:ads_verify_ticket(307)
   ads_verify_ticket: krb5_rd_req with auth failed (Unknown code 0)
[2004/09/08 13:57:38, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)
   Failed to verify incoming ticket!
[2004/09/08 13:57:38, 3] smbd/error.c:error_packet(105)
   error string = No such file or directory
[2004/09/08 13:57:38, 3] smbd/error.c:error_packet(129)
   error packet at smbd/sesssetup.c(174) cmd=115 (SMBsesssetupX) 
NT_STATUS_LOGON_FAILURE


Here's a log of a Windows 2000 Server SP4 client failing to connect to 
Samba 3.0.5 test:
[2004/09/09 07:50:28, 3] libads/kerberos_verify.c:ads_verify_ticket(193)
   ads_verify_ticket: krb5_rd_req with auth failed (Bad encryption type)
[2004/09/09 07:50:28, 1] smbd/sesssetup.c:reply_spnego_kerberos(174)
   Failed to verify incoming ticket!
[2004/09/09 07:50:28, 3] smbd/error.c:error_packet(118)
   error packet at smbd/sesssetup.c(175) cmd=115 (SMBsesssetupX) 
NT_STATUS_LOGON_FAILURE

Thanks,
Josh