[Samba] ads kerberos key problem

[David Shapiro]

I tried to use the samba share that I was able to access this morning,
but now I cannot get to it.  The error in the client's log is:
 
Doing spnego session setup
[2006/02/09 13:14:02, 3]
../smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664)
  NativeOS=[Windows 2002 Service Pack 1 2600] NativeLanMan=[Windows
2002 5.1] PrimaryDomain=[]
[2006/02/09 13:14:02, 10] ../smbd/password.c:register_vuid(182)
  register_vuid: allocated vuid = 101
[2006/02/09 13:14:02, 3]
../smbd/sesssetup.c:reply_spnego_negotiate(525)
  Got OID 1 2 840 48018 1 2 2
[2006/02/09 13:14:02, 3]
../smbd/sesssetup.c:reply_spnego_negotiate(525)
  Got OID 1 2 840 113554 1 2 2
[2006/02/09 13:14:02, 3]
../smbd/sesssetup.c:reply_spnego_negotiate(525)
  Got OID 1 3 6 1 4 1 311 2 2 10
[2006/02/09 13:14:02, 3]
../smbd/sesssetup.c:reply_spnego_negotiate(528)
  Got secblob of size 1396
[2006/02/09 13:14:02, 10] ../passdb/secrets.c:secrets_named_mutex(809)
  secrets_named_mutex: got mutex for replay cache mutex
[2006/02/09 13:14:02, 3]
../libads/kerberos_verify.c:ads_secrets_verify_ticket(249)
  ads_secrets_verify_ticket: enc type [1] failed to decrypt with error
Message size is incompatible with encryption type
[2006/02/09 13:14:02, 3]
../libads/kerberos_verify.c:ads_secrets_verify_ticket(249)
  ads_secrets_verify_ticket: enc type [3] failed to decrypt with error
Message size is incompatible with encryption type
[2006/02/09 13:14:02, 10]
../passdb/secrets.c:secrets_named_mutex_release(821)
  secrets_named_mutex: released mutex for replay cache mutex
[2006/02/09 13:14:02, 3]
../libads/kerberos_verify.c:ads_verify_ticket(378)
  ads_verify_ticket: krb5_rd_req with auth failed (Error 0)
[2006/02/09 13:14:02, 1]
../smbd/sesssetup.c:reply_spnego_kerberos(180)
  Failed to verify incoming ticket!
[2006/02/09 13:14:02, 3] ../smbd/error.c:error_packet(146)
  error packet at ../smbd/sesssetup.c(182) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE
[2006/02/09 13:14:02, 5] ../lib/util.c:show_msg(454)
[2006/02/09 13:14:02, 5] ../lib/util.c:show_msg(464)

 
I rejoined the ads realm again, but that did not help.  I am using
heimdel krb5.  Why does it think my size is wrong?
 
 
 
David Shapiro
Unix Team Lead
919-765-2011