samba - Jan 2004 - 3.0.0 -> 3.0.1 upgrade causes "Failed to verify

I am having the same problem as well. This is just an educated guess, but I
think the problem has to do with the "in-memory krb5 keytab support"
Anyone
have any workarounds? 
 
-Jim

James,

I strongly suggest you use current CVS 3.0.2pre code.
There are quite a few bug fixes and 3.0.1 has one that ited quite a few
that feed it. :)

There will be a 3.0.2 release quite soon.

- John T.

On Sat, 3 Jan 2004, James Trater wrote:
> I am having the same problem as well. This is just an educated guess, but I
> think the problem has to do with the "in-memory krb5 keytab
support" Anyone
> have any workarounds?
>
> -Jim
>
>
>
>
>
-- 
John H Terpstra
Email: jht@samba.org

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
I could use some help debugging this new LDAP server.  :-)

Situation:

I've set:
~ passdb backend = ldapsam_compat:ldap://127.0.0.1 smbpasswd guest

Using the old schema. Will consider upgrading the schema after I get
it working as is.  Right now I've got a paralell install.
Here are the symptoms:

On the 'Doze side:
With the previous version, I was able to double click on the server in
"My Network Places" and it would prompt for a password.
Now it just dumps the user into the server.  You can see some of the
shares.  Also if your current Windows user is an Administrator, then
you get access to the Administrator user's home directory.  Not so for
other Windows users.

On the Linux side:
On starup, no errors are reported.
No errors are reported in the log (/var/log/messages) at log level 6
if a normal user double clicks on the server from Windows.
I did get these errors which seem to suggest that samba is not talking
to the ldap server:

Jan  3 21:01:17 enigma smbd3[7340]: [2004/01/03 21:01:17, 0]
printing/print_cups.c:cups_queue_get(899)
Jan  3 21:01:17 enigma smbd3[7340]:   Unable to get jobs for
ipp://localhost/printers/pdf-generator - client-error-not-found

.and also:

[root@enigma root]# tail -f /var/log/ldap/ldap.log
Jan  3 21:05:00 enigma slapd[4003]: conn=329 op=2 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:00 enigma slapd[3989]: conn=-1 fd=18 closed
Jan  3 21:05:00 enigma slapd[3989]: daemon: conn=330 fd=18 connection
from IP=127.0.0.1:33417 (IP=0.0.0.0:389) accepted.
Jan  3 21:05:00 enigma slapd[4004]: conn=330 op=0 BIND
dn="CN=ROOT,DC=J9STARR,DC=NET" method=128
Jan  3 21:05:00 enigma slapd[4004]: conn=330 op=0 RESULT tag=97 err=0
textJan  3 21:05:00 enigma slapd[4003]: conn=330 op=1 SRCH
base="dc=j9starr,dc=net" scope=1 filter="(uid=mail)"
Jan  3 21:05:00 enigma slapd[4003]: conn=330 op=1 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:00 enigma slapd[4004]: conn=330 op=2 SRCH
base="ou=Group,dc=j9starr,dc=net" scope=1
filter="(&(objectClass=posixGroup)(memberUid=mail))"
Jan  3 21:05:00 enigma slapd[4004]: conn=330 op=2 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:00 enigma slapd[3989]: conn=-1 fd=18 closed
Jan  3 21:05:16 enigma slapd[3989]: daemon: conn=331 fd=18 connection
from IP=192.168.2.88:33418 (IP=0.0.0.0:389) accepted.
Jan  3 21:05:16 enigma slapd[4003]: conn=331 op=0 BIND
dn="CN=ROOT,DC=J9STARR,DC=NET" method=128
Jan  3 21:05:16 enigma slapd[4003]: conn=331 op=0 RESULT tag=97 err=0
textJan  3 21:05:16 enigma slapd[4004]: conn=331 op=1 SRCH
base="dc=j9starr,dc=net" scope=2
filter="(&(rid=501)(objectClass=sambaAccount))"
Jan  3 21:05:16 enigma slapd[4004]: conn=331 op=1 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:16 enigma slapd[3989]: daemon: conn=332 fd=20
connection
from IP=127.0.0.1:33419 (IP=0.0.0.0:389) accepted.
Jan  3 21:05:16 enigma slapd[4003]: conn=332 op=0 BIND
dn="CN=ROOT,DC=J9STARR,DC=NET" method=128
Jan  3 21:05:16 enigma slapd[4003]: conn=332 op=0 RESULT tag=97 err=0
textJan  3 21:05:16 enigma slapd[4004]: conn=332 op=1 SRCH
base="dc=j9starr,dc=net" scope=1 filter="(uid=nobody)"
Jan  3 21:05:16 enigma slapd[4004]: conn=332 op=1 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:16 enigma slapd[4003]: conn=332 op=2 SRCH
base="ou=Group,dc=j9starr,dc=net" scope=1
filter="(&(objectClass=posixGroup)(memberUid=nobody))"
Jan  3 21:05:16 enigma slapd[4003]: conn=332 op=2 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:16 enigma slapd[4004]: conn=331 op=2 SRCH
base="ou=Group,dc=j9starr,dc=net" scope=2
filter="(&(objectClass=sambaGroupMapping)(gidNumber=65534))"
Jan  3 21:05:16 enigma slapd[4004]: conn=331 op=2 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:16 enigma slapd[4003]: conn=331 op=3 SRCH
base="ou=Group,dc=j9starr,dc=net" scope=2
filter="(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))"
Jan  3 21:05:16 enigma slapd[4003]: conn=331 op=3 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:16 enigma slapd[4004]: conn=331 op=4 SRCH
base="ou=Group,dc=j9starr,dc=net" scope=2
filter="(&(objectClass=posixGroup)(gidNumber=4294967295))"
Jan  3 21:05:16 enigma slapd[4004]: conn=331 op=4 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:16 enigma slapd[4003]: conn=331 op=5 SRCH
base="ou=Group,dc=j9starr,dc=net" scope=2
filter="(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))"
Jan  3 21:05:16 enigma slapd[4003]: conn=331 op=5 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:16 enigma slapd[4004]: conn=331 op=6 SRCH
base="ou=Group,dc=j9starr,dc=net" scope=2
filter="(&(objectClass=posixGroup)(gidNumber=4294967295))"
Jan  3 21:05:16 enigma slapd[4004]: conn=331 op=6 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:16 enigma slapd[4003]: conn=331 op=7 SRCH
base="ou=Group,dc=j9starr,dc=net" scope=2
filter="(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))"
Jan  3 21:05:16 enigma slapd[4003]: conn=331 op=7 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:16 enigma slapd[4004]: conn=331 op=8 SRCH
base="ou=Group,dc=j9starr,dc=net" scope=2
filter="(&(objectClass=posixGroup)(gidNumber=4294967295))"
Jan  3 21:05:16 enigma slapd[4004]: conn=331 op=8 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:16 enigma slapd[4003]: conn=331 op=9 SRCH
base="ou=Group,dc=j9starr,dc=net" scope=2
filter="(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))"
Jan  3 21:05:16 enigma slapd[4003]: conn=331 op=9 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:16 enigma slapd[4004]: conn=331 op=10 SRCH
base="ou=Group,dc=j9starr,dc=net" scope=2
filter="(&(objectClass=posixGroup)(gidNumber=4294967295))"
Jan  3 21:05:16 enigma slapd[4004]: conn=331 op=10 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:16 enigma slapd[4003]: conn=331 op=11 SRCH
base="ou=Group,dc=j9starr,dc=net" scope=2
filter="(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))"
Jan  3 21:05:16 enigma slapd[4003]: conn=331 op=11 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:16 enigma slapd[4004]: conn=331 op=12 SRCH
base="ou=Group,dc=j9starr,dc=net" scope=2
filter="(&(objectClass=posixGroup)(gidNumber=4294967295))"
Jan  3 21:05:16 enigma slapd[4004]: conn=331 op=12 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:16 enigma slapd[4003]: conn=331 op=13 SRCH
base="ou=Group,dc=j9starr,dc=net" scope=2
filter="(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))"
Jan  3 21:05:16 enigma slapd[4003]: conn=331 op=13 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:16 enigma slapd[4004]: conn=331 op=14 SRCH
base="ou=Group,dc=j9starr,dc=net" scope=2
filter="(&(objectClass=posixGroup)(gidNumber=4294967295))"
Jan  3 21:05:16 enigma slapd[4004]: conn=331 op=14 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:16 enigma slapd[4003]: conn=331 op=15 SRCH
base="ou=Group,dc=j9starr,dc=net" scope=2
filter="(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))"
Jan  3 21:05:16 enigma slapd[4003]: conn=331 op=15 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:16 enigma slapd[4004]: conn=331 op=16 SRCH
base="ou=Group,dc=j9starr,dc=net" scope=2
filter="(&(objectClass=posixGroup)(gidNumber=4294967295))"
Jan  3 21:05:16 enigma slapd[4004]: conn=331 op=16 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:16 enigma slapd[4003]: conn=331 op=17 SRCH
base="ou=Group,dc=j9starr,dc=net" scope=2
filter="(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))"
Jan  3 21:05:16 enigma slapd[4003]: conn=331 op=17 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:16 enigma slapd[4004]: conn=331 op=18 SRCH
base="ou=Group,dc=j9starr,dc=net" scope=2
filter="(&(objectClass=posixGroup)(gidNumber=4294967295))"
Jan  3 21:05:16 enigma slapd[4004]: conn=331 op=18 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:16 enigma slapd[4003]: conn=331 op=19 SRCH
base="ou=Group,dc=j9starr,dc=net" scope=2
filter="(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))"
Jan  3 21:05:16 enigma slapd[4003]: conn=331 op=19 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:16 enigma slapd[4004]: conn=331 op=20 SRCH
base="ou=Group,dc=j9starr,dc=net" scope=2
filter="(&(objectClass=posixGroup)(gidNumber=4294967295))"
Jan  3 21:05:16 enigma slapd[4004]: conn=331 op=20 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:16 enigma slapd[4003]: conn=331 op=21 SRCH
base="ou=Group,dc=j9starr,dc=net" scope=2
filter="(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))"
Jan  3 21:05:16 enigma slapd[4003]: conn=331 op=21 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:16 enigma slapd[4004]: conn=331 op=22 SRCH
base="ou=Group,dc=j9starr,dc=net" scope=2
filter="(&(objectClass=posixGroup)(gidNumber=4294967295))"
Jan  3 21:05:16 enigma slapd[4004]: conn=331 op=22 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:16 enigma slapd[4003]: conn=331 op=23 SRCH
base="ou=Group,dc=j9starr,dc=net" scope=2
filter="(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))"
Jan  3 21:05:16 enigma slapd[4003]: conn=331 op=23 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:16 enigma slapd[4004]: conn=331 op=24 SRCH
base="ou=Group,dc=j9starr,dc=net" scope=2
filter="(&(objectClass=posixGroup)(gidNumber=4294967295))"
Jan  3 21:05:16 enigma slapd[4004]: conn=331 op=24 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:16 enigma slapd[4003]: conn=331 op=25 SRCH
base="ou=Group,dc=j9starr,dc=net" scope=2
filter="(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))"
Jan  3 21:05:16 enigma slapd[4003]: conn=331 op=25 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:16 enigma slapd[4004]: conn=331 op=26 SRCH
base="ou=Group,dc=j9starr,dc=net" scope=2
filter="(&(objectClass=posixGroup)(gidNumber=4294967295))"
Jan  3 21:05:16 enigma slapd[4004]: conn=331 op=26 SEARCH RESULT
tag=101 err=0 textJan  3 21:05:16 enigma slapd[3989]: conn=-1 fd=18 closed
Jan  3 21:05:16 enigma slapd[3989]: conn=-1 fd=20 closed




-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
 
iD8DBQE/95/y57L0B7uXm9oRAvKSAKCCSwQf2imVS/082ncAsA4/SAwtUgCeKWmP
48sQi9vHs/oM7xm8WOCypYo=/HUB
-----END PGP SIGNATURE-----

John H Terpstra wrote:
> I strongly suggest you use current CVS 3.0.2pre code.
> There are quite a few bug fixes and 3.0.1 has one that ited quite a few
> that feed it. :)
Sorry, no luck. Downloaded CVS code about 30 minutes ago (SAMBA_3_0 
branch), configured, installed, restarted daemons. Currently logged-in 
workstations generate "Failed to verify incoming ticket!" in samba
logs;
switching back 3.0.0 everything works fine.