[Samba] samba in ADS problem

[damiend at mckennagroup.co.uk]

Hi all

I have two samba server on the network a week woring fine, then yesterday morning they just stopped.

In the log I get the following 

any ideas whats going on ?



[2007/11/01 10:23:30, 3] smbd/process.c:switch_message(926)
  switch message SMBsesssetupX (pid 5671) conn 0x0
[2007/11/01 10:23:30, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2007/11/01 10:23:30, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1244)
  wct=12 flg2=0xc807
[2007/11/01 10:23:30, 2] smbd/sesssetup.c:setup_new_vc_session(1200)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2007/11/01 10:23:30, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1029)
  Doing spnego session setup
[2007/11/01 10:23:30, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1060)
  NativeOS=[] NativeLanMan=[] PrimaryDomain=[]
[2007/11/01 10:23:30, 3] smbd/sesssetup.c:reply_spnego_negotiate(697)
  reply_spnego_negotiate: Got secblob of size 1510
[2007/11/01 10:23:30, 3] libads/kerberos_verify.c:ads_keytab_verify_ticket(172)
  ads_keytab_verify_ticket: krb5_rd_req failed for all 24 matched keytab principals
[2007/11/01 10:23:30, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(279)
  ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed
[2007/11/01 10:23:30, 3] libads/kerberos_verify.c:ads_verify_ticket(427)
  ads_verify_ticket: krb5_rd_req with auth failed (Decrypt integrity check failed)
[2007/11/01 10:23:30, 1] smbd/sesssetup.c:reply_spnego_kerberos(316)
  Failed to verify incoming ticket with error NT_STATUS_LOGON_FAILURE!
[2007/11/01 10:23:30, 3] smbd/error.c:error_packet_set(106)
  error packet at smbd/sesssetup.c(318) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE
[2007/11/01 10:23:30, 3] smbd/process.c:process_smb(1068)
  Transaction 9 of length 1644
[2007/11/01 10:23:30, 3] smbd/process.c:switch_message(926)
  switch message SMBsesssetupX (pid 5671) conn 0x0
[2007/11/01 10:23:30, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2007/11/01 10:23:30, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1244)
  wct=12 flg2=0xc807
[2007/11/01 10:23:30, 2] smbd/sesssetup.c:setup_new_vc_session(1200)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2007/11/01 10:23:30, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1029)
  Doing spnego session setup
[2007/11/01 10:23:30, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1060)
  NativeOS=[] NativeLanMan=[] PrimaryDomain=[]
[2007/11/01 10:23:30, 3] smbd/sesssetup.c:reply_spnego_negotiate(697)
  reply_spnego_negotiate: Got secblob of size 1510
[2007/11/01 10:23:30, 3] libads/kerberos_verify.c:ads_keytab_verify_ticket(172)
  ads_keytab_verify_ticket: krb5_rd_req failed for all 24 matched keytab principals
[2007/11/01 10:23:30, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(279)
  ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed
[2007/11/01 10:23:30, 3] libads/kerberos_verify.c:ads_verify_ticket(427)
  ads_verify_ticket: krb5_rd_req with auth failed (Decrypt integrity check failed)
[2007/11/01 10:23:30, 1] smbd/sesssetup.c:reply_spnego_kerberos(316)
  Failed to verify incoming ticket with error NT_STATUS_LOGON_FAILURE!
[2007/11/01 10:23:30, 3] smbd/error.c:error_packet_set(106)
  error packet at smbd/sesssetup.c(318) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE
[2007/11/01 10:23:30, 3] smbd/process.c:process_smb(1068)
  Transaction 10 of length 1644
[2007/11/01 10:23:30, 3] smbd/process.c:switch_message(926)
  switch message SMBsesssetupX (pid 5671) conn 0x0
[2007/11/01 10:23:30, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2007/11/01 10:23:30, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1244)
  wct=12 flg2=0xc807
[2007/11/01 10:23:30, 2] smbd/sesssetup.c:setup_new_vc_session(1200)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2007/11/01 10:23:30, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1029)
  Doing spnego session setup
[2007/11/01 10:23:30, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1060)
  NativeOS=[] NativeLanMan=[] PrimaryDomain=[]
[2007/11/01 10:23:30, 3] smbd/sesssetup.c:reply_spnego_negotiate(697)
  reply_spnego_negotiate: Got secblob of size 1510
[2007/11/01 10:23:30, 3] libads/kerberos_verify.c:ads_keytab_verify_ticket(172)
  ads_keytab_verify_ticket: krb5_rd_req failed for all 24 matched keytab principals
[2007/11/01 10:23:30, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(279)
  ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed
[2007/11/01 10:23:30, 3] libads/kerberos_verify.c:ads_verify_ticket(427)
  ads_verify_ticket: krb5_rd_req with auth failed (Decrypt integrity check failed)
[2007/11/01 10:23:30, 1] smbd/sesssetup.c:reply_spnego_kerberos(316)
  Failed to verify incoming ticket with error NT_STATUS_LOGON_FAILURE!
[2007/11/01 10:23:30, 3] smbd/error.c:error_packet_set(106)
  error packet at smbd/sesssetup.c(318) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE
[2007/11/01 10:23:33, 3] smbd/process.c:process_smb(1068)
  Transaction 11 of length 1644
[2007/11/01 10:23:33, 3] smbd/process.c:switch_message(926)
  switch message SMBsesssetupX (pid 5671) conn 0x0
[2007/11/01 10:23:33, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2007/11/01 10:23:33, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1244)


 my smb.conf


[global]
        csc policy = disable
        ldap ssl = no
        name resolve order = host bcast
        socket options = SO_REUSEADDR IPTOS_THROUGHPUT SO_SNDBUF=32768 SO_RCVBUF=32768
        host msdfs = No
        deadtime = 600
        username map = /etc/samba/user.map
        interfaces = eth0
        follow symlinks = No
        encrypt passwords = yes
        realm = LOCAL.MCKENNAGROUP.CO.UK
        use kerberos keytab = Yes
        dos filetime resolution = Yes
        map archive = No
        #svcctl list = cupsd
        wide links = no
        printing = cups
        printcap = cups


        enhanced browsing = No
        workgroup = MCKENNAGROUP
        create mode = 0664
        security = ADS
        bind interfaces only = Yes
        max smbd processes = 100
        directory mode = 775
        domain master = no
        preferred master = no
        writable = yes
        log level = 3