[Samba] Issue with FAST implementation ? Disabling really disable ?

[Olivier BILHAUT]

Hi Louis, 

Unfortunately it wasn't sufficient. I wonder if the setting
works as expected in this case. 

--

Olivier B

Le 2022-07-20 14:26, L.
van Belle via samba a écrit :

> Try 
> 
> kdc enable fast = no 
> 
> in
smb.conf
> 
> Greetz, 
> 
> Louis
> 
>> -----Oorspronkelijk
bericht-----
>> Van: samba <samba-bounces at lists.samba.org> Namens
Olivier BILHAUT via
>> samba
>> Verzonden: woensdag 20 juli 2022
13:19
>> Aan: samba <samba at lists.samba.org>
>> Onderwerp: [Samba] Issue
with FAST implementation ? Disabling really
>> disable ?
>> 
>> Hi
list,
>> 
>> Juste migrating from samba 4.14 to samba 4.16.3. Most works
fine and
> thanks
>> again for this great work.
>> 
>> However I have an
issue
>> with a smbclient run locally which seems to fail due to a FAST
issue.
>> The command is run from the DC itself :
>> 
>> --
>> 
>> $>
>>
/USR/LOCAL/SAMBA/BIN/SMBCLIENT \\\\DOMAIN.TLD\\NETLOGON -
>>
UDOMAIN/ACCOUNT -PPASS
>> 
>> gse_get_client_auth_token:
gss_init_sec_context failed with [
>> Miscellaneous failure (see text):
FAST fast response is missing FX-FAST
>>
(cifs/DOMAIN.TLD at LOCAL)](2529639059)
>>
gensec_spnego_client_negTokenInit_step:
>> gse_krb5: creating
NEG_TOKEN_INIT for cifs/domain.tld failed
>> (next[(null)]):
NT_STATUS_LOGON_FAILURE
>> session setup failed:
>>
NT_STATUS_LOGON_FAILURE
>> 
>> --
>> 
>> I have tried to disable FAST
with " kdc
>> enable fast = no" (and restart) as I have seen in release
note, but now
> way.
>> 
>> Any advice ?
>> 
>> Have a nice day !
>> 
>>
--
>> 
>> Olivier B
>> --
>> To unsubscribe from this list go to the
following URL and read the
>> instructions: 
https://lists.samba.org/mailman/options/samba