[Samba] Failed to find cifs/fs-share at dom.corp (kvno 109) in keytab
L.P.H. van Belle
belle at bazuin.nl
Wed Oct 9 06:32:49 UTC 2019
I suggest, you try this.
Check you time and update it.
Then change you krb5.conf file to.
default_realm = DOM.CORP
dns_lookup_kdc = true
dns_lookup_realm = false
forwardable = true
proxiable = true
kdc_timesync = 1
debug = false
And reboot you server, that makes sure memory is also clean.
> Failed to find cifs/dom.corp at DOM.CORP
show the output of
And show you smb.conf if still not correct.
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens
> banda bassotti via samba
> Verzonden: woensdag 9 oktober 2019 5:34
> Aan: sambalist
> Onderwerp: Re: [Samba] Failed to find cifs/fs-share at dom.corp
> (kvno 109) in keytab
> Rowland, it is not a problem of mount but of kerberso ticket:
> [2019/10/08 10:58:09.626059, 1]
> gensec_spnego_server_negTokenInit_step: gse_krb5: parsing
> content failed (next[(null)]): NT_STATUS_LOGON_FAILURE
> [2019/10/08 10:58:09.634532, 1]
> gss_accept_sec_context failed with [ Miscellaneous failure
> (see text):
> Failed to find cifs/dom.corp at DOM.CORP(kvno 109) in keytab
> MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
> before 10:00 it used kvno (kerberos version number) 108 after
> 10:00 kvno
> Il giorno mar 8 ott 2019 alle ore 22:26 Rowland penny via samba <
> samba at lists.samba.org> ha scritto:
> > On 08/10/2019 21:11, banda bassotti wrote:
> > > none of this :) access to the share by windows clients
> and yes, I can
> > > read, I only reported the log output nothing more,
> > If you are not mounting anything, then you do not need the keytab.
> > Also, I never said you couldn't read, I just pointed out
> that you can
> > look at the keytab '/etc/samba/fs.keytab' until you are blue in the
> > face, but it will do you no good, because it is the wrong keytab.
> > From your error message, something seems to be trying to
> mount a share
> > somewhere. If your clients are just connecting to a share and do not
> > need to mount anything, then I suggest you find what is
> trying to mount
> > the share and stop it.
> > Rowland
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions: https://lists.samba.org/mailman/options/samba
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
More information about the samba