[Samba] SPNEGO login failed: The type of a token object is inappropriate for its attempted use. (centos 8 upgrade regression)

Jelle de Jong jelledejong at powercraft.nl
Thu Dec 23 12:02:32 UTC 2021


Hello everybody,

I had to downgrade samba on all my centos 8 systems this morning after 
an upgrade made caused kerberos logins to stop working.

yum downgrade samba -y

it also downgraded sssd packages but only downgrading sssd did not work.

How do I debug this further and does anyone encountered the same problem 
and found a solution?

Testing with the bellow command showed me:

LC_ALL=C smbclient -d 10 -k -L samba01.organization.lan

Starting GENSEC mechanism spnego
Starting GENSEC submechanism gse_krb5
gensec_update_send: gse_krb5[0x5590f7bb38e0]: subreq: 0x5590f7baa280
gensec_update_send: spnego[0x5590f7bad880]: subreq: 0x5590f7bb2410
gensec_update_done: gse_krb5[0x5590f7bb38e0]: 
NT_STATUS_MORE_PROCESSING_REQUIRED 
tevent_req[0x5590f7baa280/../../source3/librpc/crypto/gse.c:848]: 
state[2] error[0 (0x0)]  state[struct gensec_gse_update_state 
(0x5590f7baa430)] timer[(nil)] finish[../../source3/librpc/crypto/gse.c:859]
gensec_update_done: spnego[0x5590f7bad880]: 
NT_STATUS_MORE_PROCESSING_REQUIRED 
tevent_req[0x5590f7bb2410/../../auth/gensec/spnego.c:1631]: state[2] 
error[0 (0x0)]  state[struct gensec_spnego_update_state 
(0x5590f7bb25c0)] timer[(nil)] finish[../../auth/gensec/spnego.c:2116]
SPNEGO login failed: The type of a token object is inappropriate for its 
attempted use.
session setup failed: NT_STATUS_BAD_TOKEN_TYPE

Kind regards,

Jelle de Jong



More information about the samba mailing list