Mark Casey
2009-Mar-17 22:51 UTC
[Samba] ads_sasl_spnego_krb5_bind failed: Ticket not yet valid
Hello, I have a samba server set up as a member server in a native 2003 domain. Its ubuntu server 8.4.02 LTS. Any idea what causes this when I try to leave the domain?> user@dordal:/home/backups$ sudo net ads leave -U administrator@DOMAIN.COM > administrator@DOMAIN.COM's password: > [2009/03/17 17:41:02, 0] libads/sasl.c:ads_sasl_spnego_bind(330) > kinit succeeded but ads_sasl_spnego_krb5_bind failed: Ticket not yet > valid > [2009/03/17 17:41:02, 0] libads/sasl.c:ads_sasl_spnego_bind(330) > kinit succeeded but ads_sasl_spnego_krb5_bind failed: Ticket not yet > valid > user@dordal:/home/backups$I'm hoping there is some sort of known cause for this, but I can send my confs if needed. BTW: The time on the DC and the time on this server are matched to within 1 second. I've seen gaps in system time as a cause of this, but I'd be surprised to learn how it applies here. TIA, Mark
Peter Rosenthal
2009-Mar-20 18:42 UTC
[Samba] ads_sasl_spnego_krb5_bind failed: Ticket not yet valid
Looks like you have a time-sync problem. 2009/3/17 Mark Casey <markc@unifiedgroup.com>> Hello, > > I have a samba server set up as a member server in a native 2003 domain. > Its ubuntu server 8.4.02 LTS. Any idea what causes this when I try to leave > the domain? > > user@dordal:/home/backups$ sudo net ads leave -U administrator@DOMAIN.COM >> administrator@DOMAIN.COM's password: >> [2009/03/17 17:41:02, 0] libads/sasl.c:ads_sasl_spnego_bind(330) >> kinit succeeded but ads_sasl_spnego_krb5_bind failed: Ticket not yet >> valid >> [2009/03/17 17:41:02, 0] libads/sasl.c:ads_sasl_spnego_bind(330) >> kinit succeeded but ads_sasl_spnego_krb5_bind failed: Ticket not yet >> valid >> user@dordal:/home/backups$ >> > > I'm hoping there is some sort of known cause for this, but I can send my > confs if needed. > > BTW: The time on the DC and the time on this server are matched to within 1 > second. I've seen gaps in system time as a cause of this, but I'd be > surprised to learn how it applies here. > > TIA, > Mark > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >
Possibly Parallel Threads
- Can join ADS domain, all accounts/auth work fine, but leaving domain fails
- kinit succeeded but ads_sasl_spnego_krb5_bind failed: The context has expired : Success
- winbind - wbinfo problem - SOLVED
- samba 4.0.3: ads_sasl_spnego_krb5_bind failed with "Did not find a plugin for ccache_ops" [solaris]
- kinit succeeded but ads_sasl_spnego_krb5_bind failed: Cannot contact any KDC for requested realm