Hi,
This is probably a problem with your kerberos version.
Try mapping with ip address like this:
C:\> net use t: \\10.10.10.1\teste
_________________________
Nuno Silva
Engineering Solutions / Enterprise Computing
-----Original Message-----
From: samba-bounces+nuno.silva=novabase.pt@lists.samba.org
[mailto:samba-bounces+nuno.silva=novabase.pt@lists.samba.org] On Behalf Of
Warbeck, Mark
Sent: sexta-feira, 30 de Julho de 2004 17:57
To: samba@lists.samba.org
Subject: [Samba] Failed to verify incoming ticket
Hi,
I'm trying to get Samba 3.0.2 working against a Windows 2003 Active
Directory. I can join the Linux box (RedHat Advanced Server) to the
domain using "net ads join" and it appears in the Windows
machine's
Users and Computers snap in but when trying to map a drive from Windows
you just get a continuous password dialog bog and on the Linux box Samba
produces the following error in the Samba log:
Smbd/sesssetup.c:reply_spnego_kerberos(173)
Failed to verify incoming ticket!
Here is smb.conf:
###########
#======================= Global Settings
====================================[global]
workgroup = w2k3
netbios name = fs
server string = Samba Server
log file = /var/log/samba/smbd.log
max log size = 50
security = ads
realm = W2K3.TEST
client use spnego = yes
use spnego = yes
client signing = yes
server signing = yes
encrypt passwords = yes
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
; local master = no
; os level = 33
dns proxy = no
#============================ Share Definitions
=============================[homes]
comment = Home Directories
browseable = no
writable = yes
##############
And here's krb5.conf:
##############
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
# ticket_lifetime = 24000
default_realm = W2K3.TEST
# dns_lookup_realm = false
# dns_lookup_kdc = false
[realms]
W2K3.TEST = {
kdc = test-dc.w2k3.test:88
admin_server = test-dc.w2k3.test:749
default_domain = w2k3.test
}
[domain_realm]
.w2k3.test = W2K3.TEST
w2k3.test = W2K3.TEST
[kdc]
# profile = /var/kerberos/krb5kdc/kdc.conf
[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
}
##############
Thanks,
Mark
--
Mark Warbeck
Systems Engineer
Engineering Science and Mechanics
Virginia Tech
323A Norris Hall
Mail Code 0219
Blacksburg, VA 24061
540.231.7489
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba