Jetkins@austinlogistics.com
2004-Sep-22 18:34 UTC
[Samba] Unable to map or view resources by name
Hi, folks. I'm in the process of setting up a RH ES3 box as a samba server in our Active Directory environment. I have kerberos working for user authentication, and can both log into the RH machine and map drives from windows clients using domain passwords, but the drive mapping only works if I specify the share name with the server's IP address: \\10.1.200.114\share1. If I try using the server's name - \\sambasvr\share1 - the authentication fails and I see the following in the corresponding client's log file on the server: [2004/09/22 13:23:15, 1] smbd/sesssetup.c:reply_spnego_kerberos(173) Failed to verify incoming ticket! and the following in the Security log on the AD server: Event Type: Failure Audit Event Source: Security Event Category: Account Logon Event ID: 676 Date: 9/22/2004 Time: 1:23:14 PM User: NT AUTHORITY\SYSTEM Computer: TORO Description: Authentication Ticket Request Failed: User Name: jetkins$ Supplied Realm Name: AUSTINLOGISTICS.COM Service Name: krbtgt/AUSTINLOGISTICS.COM Ticket Options: 0x40810010 Failure Code: 0x6 Client Address: 10.1.200.26 The system is running kerberos 1.2.7-28 and samba 3.0.6-2.3E. Any and all suggestions gratefully accepted - while it's working as is, I'd prefer to get this last wrinkle ironed out before I release it to my users for testing. Thanks, Jon Etkins IT Administration & Support Austin Logistics, Inc
Jetkins@austinlogistics.com
2004-Sep-23 15:15 UTC
[Samba] Unable to map or view resources by name
FYI, I have upgraded to Samba 3.0.7-1.3E and the problem persists. Jon Etkins IT Administration & Support Austin Logistics, Inc samba-bounces+jetkins=austinlogistics.com@lists.samba.org wrote on 09/22/2004 01:33:55 PM:> Hi, folks. > > I'm in the process of setting up a RH ES3 box as a samba server in our > Active Directory environment. I have kerberos working for user > authentication, and can both log into the RH machine and map drives from> windows clients using domain passwords, but the drive mapping only works> if I specify the share name with the server's IP address: > \\10.1.200.114\share1. If I try using the server's name - > \\sambasvr\share1 - the authentication fails and I see the following in > the corresponding client's log file on the server: > > [2004/09/22 13:23:15, 1] smbd/sesssetup.c:reply_spnego_kerberos(173) > Failed to verify incoming ticket! > > and the following in the Security log on the AD server: > > Event Type: Failure Audit > Event Source: Security > Event Category: Account Logon > Event ID: 676 > Date: 9/22/2004 > Time: 1:23:14 PM > User: NT AUTHORITY\SYSTEM > Computer: TORO > Description: > Authentication Ticket Request Failed: > User Name: jetkins$ > Supplied Realm Name: AUSTINLOGISTICS.COM > Service Name: krbtgt/AUSTINLOGISTICS.COM > Ticket Options: 0x40810010 > Failure Code: 0x6 > Client Address: 10.1.200.26 > > The system is running kerberos 1.2.7-28 and samba 3.0.6-2.3E. Any andall> suggestions gratefully accepted - while it's working as is, I'd preferto> get this last wrinkle ironed out before I release it to my users for > testing. > > Thanks, > > Jon Etkins > IT Administration & Support > Austin Logistics, Inc > --