[Samba] get_service_ticket: kerberos_kinit_password ULISES$@SYSTEMMASTER.COM.AR@SYSTEMMASTER.COM.AR failed: Preauthentication failed

Mariano Sokal marianosokal at siisa.com.ar
Fri Jul 7 23:05:45 GMT 2006


Mariano Sokal wrote:
>> get_service_ticket: kerberos_kinit_password
> ULISES$@SYSTEMMASTER.COM.AR at SYSTEMMASTER.COM.AR failed: 
>> Preauthentication failed
> 
>> Do you have more than one DC?  I'm cleaning up this code some
>> right now actually.  The failure is coming when net is trying
>> to derive the salt used for DES keys.  It's kind of messy at the
>> moment.  My guess is that you access failures may be related
>> to something other than this message.
> 
> 
> Jerry:
> 
> Yes, we have 2 DC (darthsith and darthvader ;) )

>Could be a replication issue.  Sometimes the krb5 libs
>don't always communicate with the same DC as smbd.
>We're trying to fix this some in 3.0.23.

So there´s no way at this moment that I can make this computer join the ADS?
What if I turn one DC off and make the computer join... would that work when I turn the second DC back on? Did I say something stupid? :)

Regards,
Mariano



More information about the samba mailing list