samba - Apr 2004 - Accessing samba machine with IP address but not with fqdn/hostnam e

I have a Debian woody running Samba 3.0.2a in ads security mode as member of
a Windows 2003 Active Directory, I run winbind+pam, wbinfo e net ads
testjoin, its all working fine. 
>From any workstation, or even from the W2003 domain controller itself, I
can?t access the samba server as \\linuxnetbiosname
<file:///\\linuxnetbiosname> , as \\machine_ip_address
<file:///\\machine_ip_address>  works.

 

I also could see a error in the log.<machine_name> the messages:

[2004/04/04 00:20:26, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)

  Failed to verify incoming ticket!

 

After what the user is prompted with a logon screen, even if I type the
correct user and password, he it?s not able to browser in this server.

 

Any help ?

 

 

 

 

 



========================================================= 
Esta mensagem pode conter informa??o confidencial e/ou privilegiada. Se voc?
n?o for o destinat?rio ou a pessoa autorizada a receber esta mensagem, n?o
dever? utilizar, copiar, alterar, divulgar a informa??o nela contida ou
tomar qualquer a??o baseada nessas informa??es. Se voc? recebeu esta
mensagem por engano, por favor avise imediatamente o remetente, respondendo
o e-mail e em seguida apague-o. Agradecemos sua coopera??o. 

This message may contain confidential and/or privileged information. If you
are not the addressee or authorized to receive this for the addressee, you
must not use, copy, disclose, change, take any action based on this message
or any information herein. If you have received this message in error,
please advise the sender immediately by reply e-mail and delete this
message. Thank you for your cooperation. 
=========================================================

What version of Kerberos are you running on your box?
Upgrade to 1.3.1 (or higher) and it may work for you.
I think older versions of Kerberos may not be working
with Active Directory servers.  I had the same issue,
and upgrading my Kerberos version solved the problem.

When you map via IP address, it is using NTLM, AFAIK.
When you map via hostname, it is using Kerberos, which
if you have an old version, is not going to work right.

Thanks,
Scott Moseman


-----Original Message-----
From: samba-bounces+smoseman=novolink.net@lists.samba.org
Sent: Monday, April 05, 2004 1:48 PM
To: 'samba@lists.samba.org'
Subject: [Samba] Accessing samba machine with IP address but not
withfqdn/hostnam e


I have a Debian woody running Samba 3.0.2a in ads security mode as
member
of a Windows 2003 Active Directory, I run winbind+pam, wbinfo e net ads
testjoin, its all working fine. 
>From any workstation, or even from the W2003 domain controller itself,
I
can?t access the samba server as \\linuxnetbiosname
<file:///\\linuxnetbiosname> , as \\machine_ip_address
<file:///\\machine_ip_address>  works.
 

I also could see a error in the log.<machine_name> the messages:

[2004/04/04 00:20:26, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)

  Failed to verify incoming ticket!

After what the user is prompted with a logon screen, even if I type the
correct user and password, he it?s not able to browser in this server.

Any help ?