Thanx for your answer!
Do you need additional informations? logs, tests, ecc.. ?
Heinz
Am Mittwoch, 15. April 2015 02:28 CEST, Andrew Bartlett <abartlet at
samba.org> schrieb:
> On Tue, 2015-04-14 at 16:35 +0200, Heinz H?lzl wrote:
> > hi,
> >
> > now i did some tests with the "auth methods" option.
> >
> >
> > "auth methods = sam, sam_ignoredomain, unix, winbind, wbc,
trustdomain, ntdomain, guest"
> > -> RDP works
> > -> smbclient -k does not work
> >
> >
> > "auth methods = sam, sam_ignoredomain, unix, winbind, wbc,
trustdomain, ntdomain, guest, samba4"
> > -> RDP hangs an the welcome-scrren
> > -> smbclient -k works fine
> >
> >
> > it seems there ist some problem with the "auth methods =
samba4"
>
> Thanks for looking into this. In general, please don't change
'auth
> methods', as it is the auth methods override that changes the behaviour
> of the authentication stack, both for NTLM and for Kerberos, to match
> what is needed for the AD DC.
>
> Without it, we look in the wrong place when trying to decyrpt the
> kerberos tickets, which explains the -k failures.
>
> I'm also surprised it helped, as I thought we were overriding it.
>
> That said, this is a very interesting debugging point.
>
> Andrew Bartlett
>
> --
> Andrew Bartlett
> http://samba.org/~abartlet/
> Authentication Developer, Samba Team http://samba.org
> Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
>
>
>
>