[an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] (none) [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] (none) [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive]
 
[an error occurred while processing this directive] [an error occurred while processing this directive]
Skåne Sjælland Linux User Group - http://www.sslug.dk Home   Subscribe   Mail Archive   Forum   Calendar   Search
MhonArc Date: [Date Prev] [Date Index] [Date Next]   Thread: [Date Prev] [Thread Index] [Date Next]   MhonArc
 

Re: [TEKNIK] samba/kerberos svært problem



Martin Møller Skarbiniks Pedersen skrev:
Hejsa,

  Jeg har et ganske svært problem (synes jeg ihvertfalde).

  På en RedHat 4.4 Enterprise installationen, der skal erstatte en dyr
mainframe er der installeret Samba 3.0.10 mod en windows AD med
kerberos m.m. og det fungerer godt fint.
  Nu er der kommet et krav, som kan løses med parameteren "acl map
full control=no", som findes fra og med Samba 3.0.20.
  Så igang med up2date for at få opgraderet samba+kerberos incl.
diverse dependecies og
få linux maskinen meldt ind i domænet igen.

  Men nu virker det ikke.
$net ads testjoin
   siger ok, men
$getent
  viser kun linux brugerne og jeg kan ikke forbinde fra windows.

Jeg har fundet flg. i logfilerne.
Nogle gode idéer ?


[2008/02/22 15:32:36, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(279)
 ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt
integrity check failed
[2008/02/22 15:32:36, 3] libads/kerberos_verify.c:ads_verify_ticket(427)
 ads_verify_ticket: krb5_rd_req with auth failed (Decrypt integrity check faile
d)
[2008/02/22 15:32:36, 1] smbd/sesssetup.c:reply_spnego_kerberos(316)
 Failed to verify incoming ticket with error NT_STATUS_LOGON_FAILURE!
[2008/02/22 15:32:36, 3] smbd/error.c:error_packet_set(106)
 error packet at smbd/sesssetup.c(318) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_
FAILURE
[2008/02/22 15:33:36, 3] smbd/sec_ctx.c:set_sec_ctx(241)
 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0


Mvh
Martin


Før du gør noget vildt så kontroller lige at tiden går rigtigt på din domæne kontroller og din RH-boks. Er der mere end 5 min. forskel så kan du ikke godkende.

Normalt skal man ikke melde en maskine ind i et domæne efter opdatering, men det lyder som om at der noget galt med computerpasswordet til din RH-boks
prøv at melde den ud
slet maskinkontoen i AD'et
meld samba boksen ind igen.

Er der fornuftigt output fra
wbinfo -u
wbinfo -g
så kontroller winbind. tøm evt. dens cache

prøv
client use spnego = no


/Rune


 
Home   Subscribe   Mail Archive   Index   Calendar   Search

 
 
Questions about the web-pages to <www_admin>. Last modified 2008-03-01, 02:01 CET [an error occurred while processing this directive]
This page is maintained by [an error occurred while processing this directive]MHonArc [an error occurred while processing this directive] # [an error occurred while processing this directive] *