Am 01.07.2018 um 11:04 schrieb Rowland Penny via samba:> Do you have access to the Windows DC ? > If so, can you check if the computer (u1customer) has the required cifs > SPN, if it doesn't exist, it will need to be added.I can talk to the windows-admin tmrw.> Once you are sure it does exist, you can use 'net ads keytab add > <principal>' to add it to /etc/krb5.keytab > > One of the problems I am trying to get my head round is this: > > ticket kvno 277 > > '277' ?????Don't ask *me* ;-) The message seems to have disappeared now. We will see tomorrow when ~30 users access the shares.
Am 2018-07-01 um 15:56 schrieb Stefan G. Weichinger via samba:> Am 01.07.2018 um 11:04 schrieb Rowland Penny via samba: > >> Do you have access to the Windows DC ? >> If so, can you check if the computer (u1customer) has the required cifs >> SPN, if it doesn't exist, it will need to be added. > > I can talk to the windows-admin tmrw. > >> Once you are sure it does exist, you can use 'net ads keytab add >> <principal>' to add it to /etc/krb5.keytabWe did that today, the cifs SPN is now on the DCs and in the samba keytab. The message re-appeared though: gss_accept_sec_context failed with [Unspecified GSS failure. Minor code may provide more information: Request ticket server cifs/U1customer.customer.intra at customer.INTRA kvno 277 not found in keytab; keytab is likely out of date]
On Mon, 2 Jul 2018 09:49:52 +0200 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote:> Am 2018-07-01 um 15:56 schrieb Stefan G. Weichinger via samba: > > Am 01.07.2018 um 11:04 schrieb Rowland Penny via samba: > > > >> Do you have access to the Windows DC ? > >> If so, can you check if the computer (u1customer) has the required > >> cifs SPN, if it doesn't exist, it will need to be added. > > > > I can talk to the windows-admin tmrw. > > > >> Once you are sure it does exist, you can use 'net ads keytab add > >> <principal>' to add it to /etc/krb5.keytab > > We did that today, the cifs SPN is now on the DCs and in the samba > keytab. > > The message re-appeared though: > > gss_accept_sec_context failed with [Unspecified GSS failure. Minor > code may provide more information: Request ticket server > cifs/U1customer.customer.intra at customer.INTRA kvno 277 not found in > keytab; keytab is likely out of date] >One question I don't remember asking, just where is that message appearing ? and is it the exact message (complete with headers, times etc. What I am trying to get at, is this a Samba problem or some form of mounting problem i.e. is something asking for a particular keytab that has gone out of date. Rowland