[Samba] after DCs migration to 4.7, two things

[mj]

Hi,

On 11/07/2017 09:51 PM, Rowland Penny wrote:
>> And anyone on my second issue, on
>>> [2017/11/07 18:23:25.114429,
>>> 1] ../source4/auth/gensec/gensec_gssapi.c:790(gensec_gssapi_update_internal)
>>> GSS server Update(krb5)(1) Update failed:  Miscellaneous failure
>>> (see text): Failed to findDC4$@SAMBA.COMPANY.COM(kvno 1) in keytab
>>> FILE:/var/lib/samba/private/secrets.keytab  (arcfour-hmac-md5)
>>> [2017/11/07 18:23:25.114456,
>>> 1] ../auth/gensec/spnego.c:411(gensec_spnego_parse_negTokenInit)
>>> SPNEGO(gssapi_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
>> That one worries me a bit more than the DNS thing...
>>
> It seems that something is looking for 'key version number 1' (kvno 1)
> but the klist you posted shows kvno 2

For the archives: the errors above have disappeared automatically.

Perhaps they were caused by the fact that I had replaced all three old 
4.5 DCs with three new 4.7 DCs, but using the same dns name and ip.

Perhaps some clients noticed the later than others or so.

MJ