[Samba] Failed to verify incoming ticket! When clients use netbios names only!

[Hansjörg Maurer]

Hi

we see the similar messages too.

Gerald (Jerry) Carter wrote:
> m.bland wrote:
>
> > thor:/var/log/samba# cat /etc/samba/smb.conf
> > [global]
>
> > workgroup = DOMAIN
> > realm = DOMAIN
>
> Are these really the same value ?
do they have to?
When I try to set them to the same value I get the following message
when joining the domain.

[root at rmvbs02 root]# net ads join  -U Admin
Admin's password:
The workgroup in /etc/samba/smb.conf does not match the short
domain name obtained from the server.
Using the name [DOMNAME] from the server.
You should set "workgroup = DOMNAME" in /etc/samba/smb.conf.
Using short domain name -- DOMNAME
Failed to set servicePrincipalNames. Please ensure that
the DNS domain of this server matches the AD domain,
Or rejoin with using Domain Admin credentials.
Deleted account for 'RMVBS02' in realm 'REALM'
Failed to join domain: Type or value exists


But we have a DNS not matching the REALM.

Could this lead to this problem?

(the above join only works with net rpc join, even while User Admin has
full rights on the domain)

Greetings

hansjörg

>
> ...
>
> > thor:/var/log/samba# cat /etc/krb5.conf
> > [libdefaults]
> >  default_realm = DOMAIN.NAME
>
>
>
>
>
>
> cheers, jerry

-- 
_________________________________________________________________

Deutsches Zentrum fuer Luft- und Raumfahrt e.V.
in der Helmholtz-Gemeinschaft

Institut fuer Robotik und Mechatronik

Dr. Hansjörg Maurer

LAN- und Systemmanager

Münchner Strasse 20
82234 Wessling
Germany

Telefon: 08153/28-2431
Telefax: 08153/28-1134

E-Mail: Hansjoerg.Maurer at dlr.de
Internet: http://www.robotic.dlr.de/

__________________________________________________________________


There are 10 types of people in this world,
those who understand binary and those who don't.