samba - Nov 2005 - Going insane - ads_secrets_verify_ticket

I have been fighting with this FreeBSD port for two days
off/on
 
Can anyone please suggest something?  Even if it's paid
support to fix this?
 
Thanks!
Eric
 
 
 
[2005/11/03 17:03:17, 3]
smbd/sesssetup.c:reply_sesssetup_and_X_spnego(619)
  NativeOS=[Windows 2002 Service Pack 2 2600]
NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
[2005/11/03 17:03:17, 3]
smbd/sesssetup.c:reply_spnego_negotiate(480)
  Got OID 1 2 840 48018 1 2 2
[2005/11/03 17:03:17, 3]
smbd/sesssetup.c:reply_spnego_negotiate(480)
  Got OID 1 2 840 113554 1 2 2
[2005/11/03 17:03:17, 3]
smbd/sesssetup.c:reply_spnego_negotiate(480)
  Got OID 1 3 6 1 4 1 311 2 2 10
[2005/11/03 17:03:17, 3]
smbd/sesssetup.c:reply_spnego_negotiate(483)
  Got secblob of size 1340
[2005/11/03 17:03:17, 3]
libads/kerberos_verify.c:ads_secrets_verify_ticket(235)
  ads_secrets_verify_ticket: enc type [16] failed to decrypt
with error Message size is incompatible with encryption type
[2005/11/03 17:03:17, 3]
libads/kerberos_verify.c:ads_secrets_verify_ticket(235)
  ads_secrets_verify_ticket: enc type [5] failed to decrypt
with error Message size is incompatible with encryption type
[2005/11/03 17:03:17, 3]
libads/kerberos_verify.c:ads_secrets_verify_ticket(235)
  ads_secrets_verify_ticket: enc type [23] failed to decrypt
with error Decrypt integrity check failed
[2005/11/03 17:03:17, 3]
libads/kerberos_verify.c:ads_secrets_verify_ticket(235)
  ads_secrets_verify_ticket: enc type [3] failed to decrypt
with error Message size is incompatible with encryption type
[2005/11/03 17:03:17, 3]
libads/kerberos_verify.c:ads_secrets_verify_ticket(235)
  ads_secrets_verify_ticket: enc type [2] failed to decrypt
with error Message size is incompatible with encryption type
[2005/11/03 17:03:17, 3]
libads/kerberos_verify.c:ads_secrets_verify_ticket(235)
  ads_secrets_verify_ticket: enc type [1] failed to decrypt
with error Message size is incompatible with encryption type
[2005/11/03 17:03:17, 3]
libads/kerberos_verify.c:ads_verify_ticket(347)
  ads_verify_ticket: krb5_rd_req with auth failed (Unknown
error: 0)
[2005/11/03 17:03:17, 1]
smbd/sesssetup.c:reply_spnego_kerberos(173)
  Failed to verify incoming ticket!
[2005/11/03 17:03:17, 3] smbd/error.c:error_packet(147)
  error packet at smbd/sesssetup.c(174) cmd=115
(SMBsesssetupX) NT_STATUS_LOGON_FAILURE
[2005/11/03 17:03:17, 3] smbd/process.c:process_smb(1114)

On Thu, 2005-11-03 at 17:08 -0500, Toll, Eric wrote:
> I have been fighting with this FreeBSD port for two days
> off/on
>  
> Can anyone please suggest something?  Even if it's paid
> support to fix this?
The 'message size incorrect' messages are a red herring.

It looks to me like you need to rejoin the domain:  The KDC is issuing
you a ticket you cannot decrypt, because it's record of your machine
account password doesn't match yours.

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url :
http://lists.samba.org/archive/samba/attachments/20051104/f995a1c2/attachment.bin