[Samba] Issue with FAST implementation ? Disabling really disable ?

[L. van Belle]

Try 

kdc enable fast = no 

in smb.conf


Greetz, 

Louis


> -----Oorspronkelijk bericht-----
> Van: samba <samba-bounces at lists.samba.org> Namens Olivier BILHAUT via
> samba
> Verzonden: woensdag 20 juli 2022 13:19
> Aan: samba <samba at lists.samba.org>
> Onderwerp: [Samba] Issue with FAST implementation ? Disabling really
> disable ?
> 
> Hi list,
> 
> Juste migrating from samba 4.14 to samba 4.16.3. Most works fine and
thanks
> again for this great work.
> 
> However I have an issue
> with a smbclient run locally which seems to fail due to a FAST issue.
> The command is run from the DC itself :
> 
> --
> 
> $>
> /USR/LOCAL/SAMBA/BIN/SMBCLIENT \\\\DOMAIN.TLD\\NETLOGON -
> UDOMAIN/ACCOUNT -PPASS
> 
> gse_get_client_auth_token: gss_init_sec_context failed with [
> Miscellaneous failure (see text): FAST fast response is missing FX-FAST
> (cifs/DOMAIN.TLD at LOCAL)](2529639059)
> gensec_spnego_client_negTokenInit_step:
> gse_krb5: creating NEG_TOKEN_INIT for cifs/domain.tld failed
> (next[(null)]): NT_STATUS_LOGON_FAILURE
> session setup failed:
> NT_STATUS_LOGON_FAILURE
> 
> --
> 
> I have tried to disable FAST with " kdc
> enable fast = no" (and restart) as I have seen in release note, but now
way.
> 
> Any advice ?
> 
> Have a nice day !
> 
> --
> 
> Olivier B
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba