[Samba] s3 connect to s4 ads woes, need guidance..

[Andrew Bartlett]

On Wed, 2012-05-09 at 09:37 -0400, Aaron E. wrote:
> The problem came right back after I posted that it was fixed after being 
> compiled... I've been doing much more troubleshooting trial and error 
> with options in smb.conf.. Here is a debug of the machine..
> 
> Machine Details Samba4 Domain,, Samba3 Print server, Windows 2008 R2

> [2012/05/09 09:18:56,  0] 
> libads/kerberos_verify.c:72(ads_dedicated_keytab_verify_ticket)
>    krb5_rd_req failed (Wrong principal in request)
> [2012/05/09 09:18:56,  3] libads/kerberos_verify.c:568(ads_verify_ticket)
>    ads_verify_ticket: krb5_rd_req with auth failed (Wrong principal in 
> request)

My suggestion is to remove any non-default setting for 'kerberos method'
and rejoin.  My guess is that you are connecting under a different name
to that stored in the system-wide /etc/krb5.keytab.  Our default method
copes with this. 

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org