[Samba] Unable to map or view resources by name

Christian Merrill cmerrill at redhat.com
Thu Sep 23 15:29:33 GMT 2004


Jetkins at austinlogistics.com wrote:

>FYI, I have upgraded to Samba  3.0.7-1.3E and the problem persists.
>
>Jon Etkins
>IT Administration & Support
>Austin Logistics, Inc
>
>
>samba-bounces+jetkins=austinlogistics.com at lists.samba.org wrote on 
>09/22/2004 01:33:55 PM:
>
>  
>
>>Hi, folks.
>>
>>I'm in the process of setting up a RH ES3 box as a samba server in our 
>>Active Directory environment.  I have kerberos working for user 
>>authentication, and can both log into the RH machine and map drives from 
>>    
>>
>
>  
>
>>windows clients using domain passwords, but the drive mapping only works 
>>    
>>
>
>  
>
>>if I specify the share name with the server's IP address: 
>>\\10.1.200.114\share1.  If I try using the server's name - 
>>\\sambasvr\share1 - the authentication fails and I see the following in 
>>the corresponding client's log file on the server:
>>
>>[2004/09/22 13:23:15, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)
>>  Failed to verify incoming ticket!
>>
>>and the following in the Security log on the AD server:
>>
>>Event Type:     Failure Audit
>>Event Source:   Security
>>Event Category: Account Logon 
>>Event ID:       676
>>Date:           9/22/2004
>>Time:           1:23:14 PM
>>User:           NT AUTHORITY\SYSTEM
>>Computer:       TORO
>>Description:
>>Authentication Ticket Request Failed:
>>        User Name:      jetkins$
>>        Supplied Realm Name:    AUSTINLOGISTICS.COM
>>        Service Name:   krbtgt/AUSTINLOGISTICS.COM
>>        Ticket Options: 0x40810010
>>        Failure Code:   0x6
>>        Client Address: 10.1.200.26
>>
>>The system is running kerberos 1.2.7-28 and samba 3.0.6-2.3E.  Any and 
>>    
>>
>all 
>  
>
>>suggestions gratefully accepted - while it's working as is, I'd prefer 
>>    
>>
>to 
>  
>
>>get this last wrinkle ironed out before I release it to my users for 
>>testing.
>>
>>Thanks,
>>
>>Jon Etkins
>>IT Administration & Support
>>Austin Logistics, Inc
>>-- 
>>    
>>
Sounds like you're running into either the kerberos compatibility errors 
we see with win2k3 or the newest problem where people upgrade from 
3.0.6+ and then start encountering apparent kerberos failures in win2k 
environments.  Do you see any "Failed to verify incoming ticket!" errors 
in /var/log/samba files?

Christian



More information about the samba mailing list