samba - Feb 2005 - smbd/sesssetup.c:reply_spnego_kerberos(173) Failedtoverify incoming ticket!

One thing to rule out is that there is a clock difference of greater
than 5 minutes between Samba Domain Member and the DCs. Make sure that
you Samba Domain Member clock has approximately the same time as the DC.
You can do net time set -S dcname/dcip.

		-Marc
> -----Original Message-----
> From: joysn@gmx.net [mailto:joysn@gmx.net]
> Sent: Tuesday, February 01, 2005 2:19 PM
> To: Ryan Frantz
> Cc: samba@lists.samba.org
> Subject: Re: [Samba] smbd/sesssetup.c:reply_spnego_kerberos(173)
> Failedtoverify incoming ticket!
> 
> Hi Ryan!
> 
> i didn't build samba, i used the binaries shipped with my debian sarge
> distro... do you think it's an issue with the kerberos version this
> samba is using?
> 
> Joysn
> 
> On Tue, Feb 01, 2005 at 05:11:30PM -0500, Ryan Frantz wrote:
> >
> > This sounds similar to a problem I was having (RH AS 2.1, though).
What
> > was the configure command you used to build Samba?
> >
> > I kept getting that very same error when using the Kerberos
> > libraries/executables from the system.
> 
> --
> "The greatest proof that intelligent life other that humans exists in
>  the universe is that none of it has tried to contact us!"
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba

Hi Marc!

thx for that hint. if the difference is greater than the configured (default)
5 minutes then i get a clock skew error when joining samba to the AD
domain. but all machines are synced to the same time, so that can not
be the problem...

Joysn

On Tue, Feb 01, 2005 at 03:06:52PM -0800, Kaplan, Marc
wrote:
> One thing to rule out is that there is a clock difference of greater
> than 5 minutes between Samba Domain Member and the DCs. Make sure that
> you Samba Domain Member clock has approximately the same time as the DC.
> You can do net time set -S dcname/dcip.
-- 
"The greatest proof that intelligent life other that humans exists in
 the universe is that none of it has tried to contact us!"