[Samba] Samba, ADS and "Failed to verify incoming ticket!"

[Paul Gienger]

>I think I found problem. When I put secrets.tdb and lock directory NOT
>on NFS share it worked ! Isn't possible to put all SAMBA running files
>on NFS share ? Any comments ? 
>  
>
What would you hope to gain by doing this?  Please say you aren't trying 
to run several servers with the same backend data files...

(hitting reply to all is good ;) apparenlty I am not)

>
>With best regards
>Martynas 
> 
>-----Original Message-----
>From: samba-bounces+martynas=ti.com at lists.samba.org
>[mailto:samba-bounces+martynas=ti.com at lists.samba.org] On Behalf Of
>Buozis, Martynas
>Sent: Friday, April 08, 2005 3:06 PM
>To: samba at lists.samba.org
>Subject: [Samba] Samba, ADS and "Failed to verify incoming ticket!"
>
>Hello
>
>I have Samba that joined Windows 2003 based ADS. At least "net ads
>testjoin" and "net rpc testjoin" gives that "Join is OK". Alas clients
>can't connect to Samba server. In a log I see following messages :
>
>[2005/04/08 14:51:41, 0] tdb/tdbutil.c:(725)
>  tdb(/web/opt/etc/smbprivate//secrets.tdb): tdb_lock failed on list 2
>ltype=2 (Resource temporarily unavailable)
>[2005/04/08 14:51:41, 1] libads/kerberos_verify.c:(312)
>  ads_verify_ticket: unable to protect replay cache with mutex.
>[2005/04/08 14:51:41, 1] smbd/sesssetup.c:(173)
>  Failed to verify incoming ticket!
>[2005/04/08 14:51:41, 3] smbd/error.c:(105)
>  error string = Resource temporarily unavailable
>[2005/04/08 14:51:41, 3] smbd/error.c:(129)
>  error packet at smbd/sesssetup.c(174) cmd=115 (SMBsesssetupX)
>NT_STATUS_LOGON_FAILURE
>[2005/04/08 14:51:41, 3] smbd/process.c:(1334)
>  timeout_processing: End of file from client (client has disconnected).
>
>Other "net ads" based commands are working fine. I can get "ads status"
>displayed without any suspicious entries, I can get users/groups lists.
>But client (that is member of same domain) connections always end with
>above shown entries in log file.
>
>Any ideas what can be wrong ?
>
>With best regards
>Martynas
>--
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/listinfo/samba
>
>
>  
>

-- 
Paul Gienger                    Office: 701-281-1884
Applied Engineering Inc.
Systems Architect               Fax:    701-281-1322
URL: www.ae-solutions.com       mailto: pgienger at ae-solutions.com