samba - Jun 2005 - Help: Failed to verify incoming ticket! revisited, problems with Samba/2003

I am struggling with a Samba/Server 2003 problem which doesn't make
sense.

I have compiled Samba 3.0.14a and MIT Kerberos 1.3.6 several times on
different machines.  I have a set of RPMS which work fine on one of my
workstations, but do not work on the server.  On the server I get the
dreaded:

reply_spnego_kerberos(173)
Failed to verify incoming ticket!

in the logs.  I have compiled kerberos and samba on this machine, and
still get the same error message.  What is strange is that everything
was working with this version of Kerberos and Samba a few days ago.  I
deleted this and installed from my custom RPMS and nothing has worked
since.

I've deleted all old executables.  I've made sure libnss_winbind.so is
installed properly.  nsswitch.conf is configured.  I've checked the
system time.  The server is joined to the domain, yet still it doesn't
work.

wbinfo, getent passwd both work correctly on the server.  kinit works
correctly on the server.


-- log.smbd with log level 3 --

[2005/06/02 11:47:24, 3] smbd/process.c:process_smb(1091)
  Transaction 7 of length 1418
[2005/06/02 11:47:24, 3] smbd/process.c:switch_message(886)
  switch message SMBsesssetupX (pid 5968) conn 0x0
[2005/06/02 11:47:24, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/02 11:47:24, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655)
  wct=12 flg2=0xc807
[2005/06/02 11:47:24, 2] smbd/sesssetup.c:setup_new_vc_session(608)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
all old resources.
[2005/06/02 11:47:24, 3]
smbd/sesssetup.c:reply_sesssetup_and_X_spnego(535)
  Doing spnego session setup
[2005/06/02 11:47:24, 3]
smbd/sesssetup.c:reply_sesssetup_and_X_spnego(566)
  NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows
2002 5.1] PrimaryDomain=[]
[2005/06/02 11:47:24, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
  Got OID 1 2 840 48018 1 2 2
[2005/06/02 11:47:24, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
  Got OID 1 2 840 113554 1 2 2
[2005/06/02 11:47:24, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
  Got OID 1 3 6 1 4 1 311 2 2 10
[2005/06/02 11:47:24, 3] smbd/sesssetup.c:reply_spnego_negotiate(447)
  Got secblob of size 1187
[2005/06/02 11:47:24, 3]
libads/kerberos_verify.c:ads_secrets_verify_ticket(235)
  ads_secrets_verify_ticket: enc type [23] failed to decrypt with error
Decrypt integrity check failed
[2005/06/02 11:47:24, 3]
libads/kerberos_verify.c:ads_verify_ticket(347)
  ads_verify_ticket: krb5_rd_req with auth failed (Unknown code 0)
[2005/06/02 11:47:24, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)
  Failed to verify incoming ticket!
[2005/06/02 11:47:24, 3] smbd/error.c:error_packet(129)
  error packet at smbd/sesssetup.c(174) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE
[2005/06/02 11:47:24, 3] smbd/process.c:process_smb(1091)
  Transaction 8 of length 1568
[2005/06/02 11:47:24, 3] smbd/process.c:switch_message(886)
  switch message SMBsesssetupX (pid 5968) conn 0x0
[2005/06/02 11:47:24, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/02 11:47:24, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655)
  wct=12 flg2=0xc807
[2005/06/02 11:47:24, 2] smbd/sesssetup.c:setup_new_vc_session(608)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
all old resources.
[2005/06/02 11:47:24, 3]
smbd/sesssetup.c:reply_sesssetup_and_X_spnego(535)
  Doing spnego session setup
[2005/06/02 11:47:24, 3]
smbd/sesssetup.c:reply_sesssetup_and_X_spnego(566)
  NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows
2002 5.1] PrimaryDomain=[]
[2005/06/02 11:47:24, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
  Got OID 1 2 840 48018 1 2 2
[2005/06/02 11:47:24, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
  Got OID 1 2 840 113554 1 2 2
[2005/06/02 11:47:24, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
  Got OID 1 3 6 1 4 1 311 2 2 10
[2005/06/02 11:47:24, 3] smbd/sesssetup.c:reply_spnego_negotiate(447)
  Got secblob of size 1337
[2005/06/02 11:47:24, 3]
libads/kerberos_verify.c:ads_secrets_verify_ticket(235)
  ads_secrets_verify_ticket: enc type [23] failed to decrypt with error
Decrypt integrity check failed
[2005/06/02 11:47:24, 3]
libads/kerberos_verify.c:ads_verify_ticket(347)
  ads_verify_ticket: krb5_rd_req with auth failed (Unknown code 0)
[2005/06/02 11:47:24, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)
  Failed to verify incoming ticket!
[2005/06/02 11:47:24, 3] smbd/error.c:error_packet(129)
  error packet at smbd/sesssetup.c(174) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE
[2005/06/02 11:48:24, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0

Any suggestions?

Josh




		
__________________________________ 
Discover Yahoo! 
Get on-the-go sports scores, stock quotes, news and more. Check it out! 
http://discover.yahoo.com/mobile.html