samba - Mar 2009 - ads_sasl_spnego_krb5_bind failed: Ticket not yet valid

Hello,

I have a samba server set up as a member server in a native 2003 domain. 
Its ubuntu server 8.4.02 LTS. Any idea what causes this when I try to 
leave the domain?
> user@dordal:/home/backups$ sudo net ads leave -U administrator@DOMAIN.COM
> administrator@DOMAIN.COM's password:
> [2009/03/17 17:41:02, 0] libads/sasl.c:ads_sasl_spnego_bind(330)
>   kinit succeeded but ads_sasl_spnego_krb5_bind failed: Ticket not yet 
> valid
> [2009/03/17 17:41:02, 0] libads/sasl.c:ads_sasl_spnego_bind(330)
>   kinit succeeded but ads_sasl_spnego_krb5_bind failed: Ticket not yet 
> valid
> user@dordal:/home/backups$
I'm hoping there is some sort of known cause for this, but I can send my 
confs if needed.

BTW: The time on the DC and the time on this server are matched to 
within 1 second. I've seen gaps in system time as a cause of this, but 
I'd be surprised to learn how it applies here.

TIA,
Mark

Looks like you have a time-sync problem.

2009/3/17 Mark Casey <markc@unifiedgroup.com>
> Hello,
>
> I have a samba server set up as a member server in a native 2003 domain.
> Its ubuntu server 8.4.02 LTS. Any idea what causes this when I try to leave
> the domain?
>
>  user@dordal:/home/backups$ sudo net ads leave -U administrator@DOMAIN.COM
>> administrator@DOMAIN.COM's password:
>> [2009/03/17 17:41:02, 0] libads/sasl.c:ads_sasl_spnego_bind(330)
>>  kinit succeeded but ads_sasl_spnego_krb5_bind failed: Ticket not yet
>> valid
>> [2009/03/17 17:41:02, 0] libads/sasl.c:ads_sasl_spnego_bind(330)
>>  kinit succeeded but ads_sasl_spnego_krb5_bind failed: Ticket not yet
>> valid
>> user@dordal:/home/backups$
>>
>
> I'm hoping there is some sort of known cause for this, but I can send
my
> confs if needed.
>
> BTW: The time on the DC and the time on this server are matched to within 1
> second. I've seen gaps in system time as a cause of this, but I'd
be
> surprised to learn how it applies here.
>
> TIA,
> Mark
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>