RE: Gentoo, Samba, Upgrade, Authentications now failing

["Robert Mattson" <R.Mattson@xxxxxxxxxxxxxx>]

Gentlemen,

The following links may or may not be of help.

http://bugs.gentoo.org/show_bug.cgi?id=224201
http://lists.samba.org/archive/samba/2008-June/141041.html


You can specify a default in /etc/krb5.conf like this:
.
.
[realms]
 doma.com= {
  kdc = DOMA.com:88
  admin_server = doma.com:749
  default_domain = doma.com
 }
.
.

But I'm far from an expert.

Rob


Robert LR Mattson      |   La Trobe University |
PhD Candidate          |  Melbourne, Australia | 
Dept. Computer Science |Phone:+(613) 9479 1408 |
Office: PS1-219   |Mob:  +(61)417 515 695 |
-----Original Message-----
From: samba-bounces+r.mattson=latrobe.edu.au@xxxxxxxxxxxxxxx
[mailto:samba-bounces+r.mattson=latrobe.edu.au@xxxxxxxxxxxxxxx] On
Behalf Of Jason Gerfen
Sent: Tuesday, 3 June 2008 10:43 PM
Cc: samba@xxxxxxxxxxxxxxx
Subject: Re:  Gentoo, Samba, Upgrade, Authentications now failing

Hmm... I am on Version 3.0.28a using Gentoo's emerge utility.

In my logs I am recieving:
check_ntlm_password:  Authentication for user [smb] -> [smb] FAILED with

error NT_STATUS_NO_SUCH_USER
...
ads_verify_ticket: smb_krb5_parse_name(thor$) failed (Configuration file

does not specify default realm)


But I can see all my information for the user with the following
commands:

wbinfo -u smb
wbinfo -i smb
wbinfo -n smb
wbinfo -S <SID>
getent passwd smb

Everything shows the user in Active Directory but I cannot authenticate 
them any longer since the upgrade. Any advice?



John Drescher wrote:
> On Tue, Jun 3, 2008 at 7:52 AM, Jason Gerfen
<jason.gerfen@xxxxxxxxxxxx> wrote:
>> I just updated Samba on Gentoo due to a security vulnerability and
the
>> authentication for domain accounts is now failing. Has anyone else
seen
>> this?
>> --
> I have upgraded a domain memberservers last week to
> net-fs/samba-3.0.30 but not the PDC. No problems so far with that.
> 
> John


-- 
Jas
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba