On 08/07/15 13:00, joseph-andre Guaragna wrote:> Hi,
> We have some issues with a kerberos on a samba client. Start process
> is all right and user can connect to the linux boxes, but few hours
> later it is not the case any more and I get the following error
>
>
> in my /var/log/syslog on client side
>
> message repeated 10 times: [ [LwKrb5GetTgtImpl
>
/builder/src-buildserver/Platform-8.2/src/linux/lwadvapi/threaded/krbtgt.c:276]
> KRB5 Error code: -1765328161 (Message: Looping detected inside
> krb5_get_in_tkt)]
> Jul 8 12:23:48 ba-tec-06 lsass: [lsass] Failed to authenticate user
> (name = 'usertest') -> error = 41956, symbol >
LW_ERROR_KRB5_GET_IN_TKT_LOOP, client pid = 15191
>
>
> I have no errors on the server side. Few desktops face the issue and I
> can't get the reason of the kerberos looping ticket.
>
> Thanks for your help
>
>
>
>
> ---------client side:
> pbis 8.2.1.2979
>
> domainjoincli query
> Error: LW_ERROR_KRB5_GET_IN_TKT_LOOP [code
0x0000a3e4]
>
> Looping detected inside krb5_get_in_tkt
>
> find-user-by-name XXXX
> Failed to locate user. Error code 40008 (LW_ERROR_NO_SUCH_USER).
>
>
> samba-common
> 2:4.1.6+dfsg-1ubuntu2.14.04.7
>
>
> ---server side:
> Version 4.1.17-Zentyal
>
>
>
>
>
> Meilleures salutations / Best regards,
>
> Joseph-Andr? GUARAGNA
Hi, not sure if this is the right place to ask about this problem, you
are using pbis and I am fairly sure 'LW_ERROR_KRB5_GET_IN_TKT_LOOP' is
an error message from pbis. I think 'LW' is short for likewiseopen, now
known as pbis.
Rowland