Hints or check lists for that type or error ? [2004/05/27 14:11:06.627563, 10, pid=23616] libads/kerberos_verify.c:ads_verify_ticket(185) ads_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type [2004/05/27 14:11:06.627589, 10, pid=23616] passdb/secrets.c:secrets_named_mutex_release(716) secrets_named_mutex: released mutex for replay cache mutex [2004/05/27 14:11:06.627603, 3, pid=23616] libads/kerberos_verify.c:ads_verify_ticket(193) ads_verify_ticket: krb5_rd_req with auth failed (Bad encryption type) [2004/05/27 14:11:06.627633, 1, pid=23616] smbd/sesssetup.c:reply_spnego_kerberos(174) Failed to verify incoming ticket! [2004/05/27 14:11:06.627759, 3, pid=23616] smbd/error.c:error_packet(118) error packet at smbd/sesssetup.c(175) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE thanks for any help ! Bertram _________________________________________________________________ Dialoguez en direct et gratuitement avec vos amis sur http://g.msn.fr/FR1001/866 MSN Messenger !
Note that I compiled MIT Kerberos 1.3.3 with : --enable-dns-for-realm --without-krb4 --enable-shared and I added the : ./configure ... \ --with-ads --with-krb5=/usr/local \ ... lines>From: "Yohann Ferreira" <bertram25@hotmail.com> >To: samba@lists.samba.org >Subject: [Samba] Any ideas ? >Date: Thu, 27 May 2004 13:02:34 +0000 > >Hints or check lists for that type or error ? > >[2004/05/27 14:11:06.627563, 10, pid=23616] >libads/kerberos_verify.c:ads_verify_ticket(185) > ads_verify_ticket: enc type [1] failed to decrypt with error Bad >encryption type >[2004/05/27 14:11:06.627589, 10, pid=23616] >passdb/secrets.c:secrets_named_mutex_release(716) > secrets_named_mutex: released mutex for replay cache mutex >[2004/05/27 14:11:06.627603, 3, pid=23616] >libads/kerberos_verify.c:ads_verify_ticket(193) > ads_verify_ticket: krb5_rd_req with auth failed (Bad encryption type) >[2004/05/27 14:11:06.627633, 1, pid=23616] >smbd/sesssetup.c:reply_spnego_kerberos(174) > Failed to verify incoming ticket! >[2004/05/27 14:11:06.627759, 3, pid=23616] smbd/error.c:error_packet(118) > error packet at smbd/sesssetup.c(175) cmd=115 (SMBsesssetupX) >NT_STATUS_LOGON_FAILURE > >thanks for any help ! > >Bertram > >_________________________________________________________________ >Dialoguez en direct et gratuitement avec vos amis sur >http://g.msn.fr/FR1001/866 MSN Messenger ! > >-- >To unsubscribe from this list go to the following URL and read the >instructions: http://lists.samba.org/mailman/listinfo/samba_________________________________________________________________ MSN Actions Solidaires : http://www.msn.fr/actionssolidaires/ la solidarit? ? port?e de click
Hm, any chance there are rests of an older kerberos-installation somewhere on the box? an your os accidently loads older libraries? or perhaps old samba pieces? Christoph Yohann Ferreira schrieb:> Note that I compiled MIT Kerberos 1.3.3 with : > --enable-dns-for-realm --without-krb4 --enable-shared > > and I added the : > ./configure > ... \ > --with-ads --with-krb5=/usr/local \ > ... > > lines > >> From: "Yohann Ferreira" <bertram25@hotmail.com> >> To: samba@lists.samba.org >> Subject: [Samba] Any ideas ? >> Date: Thu, 27 May 2004 13:02:34 +0000 >> >> Hints or check lists for that type or error ? >> >> [2004/05/27 14:11:06.627563, 10, pid=23616] >> libads/kerberos_verify.c:ads_verify_ticket(185) >> ads_verify_ticket: enc type [1] failed to decrypt with error Bad >> encryption type >> [2004/05/27 14:11:06.627589, 10, pid=23616] >> passdb/secrets.c:secrets_named_mutex_release(716) >> secrets_named_mutex: released mutex for replay cache mutex >> [2004/05/27 14:11:06.627603, 3, pid=23616] >> libads/kerberos_verify.c:ads_verify_ticket(193) >> ads_verify_ticket: krb5_rd_req with auth failed (Bad encryption type) >> [2004/05/27 14:11:06.627633, 1, pid=23616] >> smbd/sesssetup.c:reply_spnego_kerberos(174) >> Failed to verify incoming ticket! >> [2004/05/27 14:11:06.627759, 3, pid=23616] smbd/error.c:error_packet(118) >> error packet at smbd/sesssetup.c(175) cmd=115 (SMBsesssetupX) >> NT_STATUS_LOGON_FAILURE >> >> thanks for any help ! >> >> Bertram >> >> _________________________________________________________________ >> Dialoguez en direct et gratuitement avec vos amis sur >> http://g.msn.fr/FR1001/866 MSN Messenger ! >> >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: http://lists.samba.org/mailman/listinfo/samba > > > _________________________________________________________________ > MSN Actions Solidaires : http://www.msn.fr/actionssolidaires/ la > solidarit? ? port?e de click >
I removed everything and tried again from scratsch. After little mistakes, I joined the 2k domain as a member server and obtain getent passwd working only with a fresh Mandrake 9.2 install + MIT Kerberos 1.3.3 + Samba 3.0.5pre1. But no connections available from win2k client. Stil the same errors... I've seen on the net a 'supposed hotfix' about win2k server responding with a bad type of enctype. It's KB833708. What do you think of this ? Thanks !>From: Christoph Scheeder <christoph.scheeder@scheeder.de> >To: Yohann Ferreira <bertram25@hotmail.com> >CC: samba@lists.samba.org >Subject: Re: [Samba] Any ideas ? >Date: Thu, 27 May 2004 16:10:52 +0200 > >Hm, >any chance there are rests of an older kerberos-installation somewhere >on the box? an your os accidently loads older libraries? >or perhaps old samba pieces? >Christoph > >Yohann Ferreira schrieb: >>Note that I compiled MIT Kerberos 1.3.3 with : >>--enable-dns-for-realm --without-krb4 --enable-shared >> >>and I added the : >>./configure >>... \ >>--with-ads --with-krb5=/usr/local \ >>... >> >>lines >> >>>From: "Yohann Ferreira" <bertram25@hotmail.com> >>>To: samba@lists.samba.org >>>Subject: [Samba] Any ideas ? >>>Date: Thu, 27 May 2004 13:02:34 +0000 >>> >>>Hints or check lists for that type or error ? >>> >>>[2004/05/27 14:11:06.627563, 10, pid=23616] >>>libads/kerberos_verify.c:ads_verify_ticket(185) >>> ads_verify_ticket: enc type [1] failed to decrypt with error Bad >>>encryption type >>>[2004/05/27 14:11:06.627589, 10, pid=23616] >>>passdb/secrets.c:secrets_named_mutex_release(716) >>> secrets_named_mutex: released mutex for replay cache mutex >>>[2004/05/27 14:11:06.627603, 3, pid=23616] >>>libads/kerberos_verify.c:ads_verify_ticket(193) >>> ads_verify_ticket: krb5_rd_req with auth failed (Bad encryption type) >>>[2004/05/27 14:11:06.627633, 1, pid=23616] >>>smbd/sesssetup.c:reply_spnego_kerberos(174) >>> Failed to verify incoming ticket! >>>[2004/05/27 14:11:06.627759, 3, pid=23616] smbd/error.c:error_packet(118) >>> error packet at smbd/sesssetup.c(175) cmd=115 (SMBsesssetupX) >>>NT_STATUS_LOGON_FAILURE >>> >>>thanks for any help ! >>> >>>Bertram >>> >>>_________________________________________________________________ >>>Dialoguez en direct et gratuitement avec vos amis sur >>>http://g.msn.fr/FR1001/866 MSN Messenger ! >>> >>>-- >>>To unsubscribe from this list go to the following URL and read the >>>instructions: http://lists.samba.org/mailman/listinfo/samba >> >> >>_________________________________________________________________ >>MSN Actions Solidaires : http://www.msn.fr/actionssolidaires/ la >>solidarit? ? port?e de click >> >_________________________________________________________________ MSN Search, le moteur de recherche qui pense comme vous ! http://search.msn.fr/