[Samba] ads_sasl_spnego_krb5_bind failed: Ticket not yet valid

[Peter Rosenthal]

Looks like you have a time-sync problem.

2009/3/17 Mark Casey <markc at unifiedgroup.com>

> Hello,
>
> I have a samba server set up as a member server in a native 2003 domain.
> Its ubuntu server 8.4.02 LTS. Any idea what causes this when I try to leave
> the domain?
>
>  user at dordal:/home/backups$ sudo net ads leave -U administrator at DOMAIN.COM
>> administrator at DOMAIN.COM's password:
>> [2009/03/17 17:41:02, 0] libads/sasl.c:ads_sasl_spnego_bind(330)
>>  kinit succeeded but ads_sasl_spnego_krb5_bind failed: Ticket not yet
>> valid
>> [2009/03/17 17:41:02, 0] libads/sasl.c:ads_sasl_spnego_bind(330)
>>  kinit succeeded but ads_sasl_spnego_krb5_bind failed: Ticket not yet
>> valid
>> user at dordal:/home/backups$
>>
>
> I'm hoping there is some sort of known cause for this, but I can send my
> confs if needed.
>
> BTW: The time on the DC and the time on this server are matched to within 1
> second. I've seen gaps in system time as a cause of this, but I'd be
> surprised to learn how it applies here.
>
> TIA,
> Mark
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>