[Samba] Samba, ADS and "Failed to verify incoming ticket!"

[Buozis, Martynas]

Hello

I think I found problem. When I put secrets.tdb and lock directory NOT
on NFS share it worked ! Isn't possible to put all SAMBA running files
on NFS share ? Any comments ? 


With best regards
Martynas 
 
-----Original Message-----
From: samba-bounces+martynas=ti.com at lists.samba.org
[mailto:samba-bounces+martynas=ti.com at lists.samba.org] On Behalf Of
Buozis, Martynas
Sent: Friday, April 08, 2005 3:06 PM
To: samba at lists.samba.org
Subject: [Samba] Samba, ADS and "Failed to verify incoming ticket!"

Hello

I have Samba that joined Windows 2003 based ADS. At least "net ads
testjoin" and "net rpc testjoin" gives that "Join is OK". Alas clients
can't connect to Samba server. In a log I see following messages :

[2005/04/08 14:51:41, 0] tdb/tdbutil.c:(725)
  tdb(/web/opt/etc/smbprivate//secrets.tdb): tdb_lock failed on list 2
ltype=2 (Resource temporarily unavailable)
[2005/04/08 14:51:41, 1] libads/kerberos_verify.c:(312)
  ads_verify_ticket: unable to protect replay cache with mutex.
[2005/04/08 14:51:41, 1] smbd/sesssetup.c:(173)
  Failed to verify incoming ticket!
[2005/04/08 14:51:41, 3] smbd/error.c:(105)
  error string = Resource temporarily unavailable
[2005/04/08 14:51:41, 3] smbd/error.c:(129)
  error packet at smbd/sesssetup.c(174) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE
[2005/04/08 14:51:41, 3] smbd/process.c:(1334)
  timeout_processing: End of file from client (client has disconnected).

Other "net ads" based commands are working fine. I can get "ads status"
displayed without any suspicious entries, I can get users/groups lists.
But client (that is member of same domain) connections always end with
above shown entries in log file.

Any ideas what can be wrong ?

With best regards
Martynas
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba