[Samba] Failed to find cifs/fs-share at dom.corp (kvno 109) in keytab

Rowland penny rpenny at samba.org
Wed Oct 9 07:16:30 UTC 2019


On 09/10/2019 04:34, banda bassotti via samba wrote:
> Rowland, it is not a problem of mount but of kerberso ticket:
>
> [2019/10/08 10:58:09.626059,  1]
> ../../auth/gensec/spnego.c:1218(gensec_spnego_server_negTokenInit_step)
>    gensec_spnego_server_negTokenInit_step: gse_krb5: parsing NEG_TOKEN_INIT
> content failed (next[(null)]): NT_STATUS_LOGON_FAILURE
> [2019/10/08 10:58:09.634532,  1]
> ../../source3/librpc/crypto/gse.c:660(gse_get_server_auth_token)
>    gss_accept_sec_context failed with [ Miscellaneous failure (see text):
> Failed to find cifs/dom.corp at DOM.CORP(kvno 109) in keytab
> MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
>
> before 10:00 it used kvno (kerberos version number) 108 after 10:00 kvno
> 109.
>
It looks like your kerberos ticket has expired and not been renewed, a 
new one has been created instead.

However, the ticket is for 'cifs/dom.corp at DOM.CORP'

You would normally only use such a ticket to mount something.

I think you need to post your smb.conf

Rowland





More information about the samba mailing list