[Samba] Samba kerberos more time sensitive that Windows?
Jason.Haar at trimble.co.nz
Mon Mar 12 22:50:14 GMT 2007
We just had a problem where a user couldn't connect to a Samba server
that is a full ADS member. The same user could successfully connect to
The problem was obvious - their clock was 5 hours out, and Samba
rejected their connections with a "Failed to verify incoming ticket".
Correcting the time fixed the fault. However, it remains that Samba
rejected them when Windows servers didn't.
Is that an option that can be enabled? Anything that makes Samba look
more like Windows is a Good Thing (even if it violates the entire point
of Kerberos! ;-)
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
More information about the samba