[Samba] Unable to map or view resources by name
Christian Merrill
cmerrill at redhat.com
Thu Sep 23 15:29:33 GMT 2004
Jetkins at austinlogistics.com wrote:
>FYI, I have upgraded to Samba 3.0.7-1.3E and the problem persists.
>
>Jon Etkins
>IT Administration & Support
>Austin Logistics, Inc
>
>
>samba-bounces+jetkins=austinlogistics.com at lists.samba.org wrote on
>09/22/2004 01:33:55 PM:
>
>
>
>>Hi, folks.
>>
>>I'm in the process of setting up a RH ES3 box as a samba server in our
>>Active Directory environment. I have kerberos working for user
>>authentication, and can both log into the RH machine and map drives from
>>
>>
>
>
>
>>windows clients using domain passwords, but the drive mapping only works
>>
>>
>
>
>
>>if I specify the share name with the server's IP address:
>>\\10.1.200.114\share1. If I try using the server's name -
>>\\sambasvr\share1 - the authentication fails and I see the following in
>>the corresponding client's log file on the server:
>>
>>[2004/09/22 13:23:15, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)
>> Failed to verify incoming ticket!
>>
>>and the following in the Security log on the AD server:
>>
>>Event Type: Failure Audit
>>Event Source: Security
>>Event Category: Account Logon
>>Event ID: 676
>>Date: 9/22/2004
>>Time: 1:23:14 PM
>>User: NT AUTHORITY\SYSTEM
>>Computer: TORO
>>Description:
>>Authentication Ticket Request Failed:
>> User Name: jetkins$
>> Supplied Realm Name: AUSTINLOGISTICS.COM
>> Service Name: krbtgt/AUSTINLOGISTICS.COM
>> Ticket Options: 0x40810010
>> Failure Code: 0x6
>> Client Address: 10.1.200.26
>>
>>The system is running kerberos 1.2.7-28 and samba 3.0.6-2.3E. Any and
>>
>>
>all
>
>
>>suggestions gratefully accepted - while it's working as is, I'd prefer
>>
>>
>to
>
>
>>get this last wrinkle ironed out before I release it to my users for
>>testing.
>>
>>Thanks,
>>
>>Jon Etkins
>>IT Administration & Support
>>Austin Logistics, Inc
>>--
>>
>>
Sounds like you're running into either the kerberos compatibility errors
we see with win2k3 or the newest problem where people upgrade from
3.0.6+ and then start encountering apparent kerberos failures in win2k
environments. Do you see any "Failed to verify incoming ticket!" errors
in /var/log/samba files?
Christian
More information about the samba
mailing list