problem with tickets verification

Maxime Pejot maxime.pejot at mckesson.fr
Mon May 9 08:28:45 EDT 2005


Hello from France! And gratz for the job you are doing
 
I'm busy installing and configuring a Linux server, with a samba based
file-sharing system, using an AD authentication on a widows 2k server.
I tried to use samba v 3.0.14, with Kerberos v 1.2.7. My configuration
file looks like that :
 
Krb5.conf :
 
[libdefaults]
 ticket_lifetime = 24000
 default_realm = DOMAIN.MCK
 dns_lookup_realm = false
 dns_lookup_kdc = false 
 
[realms]
 domain.MCK = {
  kdc = serv.domain.mck
  admin_server = serv.domain.mck
  default_domain = domain.mck
}
 
[domain_realm]
 .domain.mck = DOMAIN.MCK
 domain.mck = DOMAIN.MCK
 
[stuff]
 
And as I try to connect my linux server from a windows 2k client, I get,
in the log.smbd file:
 
[2005/05/09 12:08:10, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)
  Failed to verify incoming ticket!
=> Here is what I get when login and pass are good. When they aren't, I
also get
NT_STATUS_NO_SUCH_USER or simply nothing if pass is bad and login good.
I can't see where the problem is. Please, give me an answer or a
beginning, because this blocks me a lot.
 
Thanks a lot for any ideas you can have
 
Mask


More information about the Kerberos mailing list