Displaying 2 results from an estimated 2 matches for "cifs_srv__keytab".
Did you mean:
cifs_srv_keytab
2019 Apr 25
1
AD member server, some users suddenly can only connect to shares via ip address
Hai,
Small addition to Rowland question.
> dig and dig -x show the expected results, as do nslookup on the windows
And you did test this again all you dns server? Or just random servers?
> keytab MEMORY:cifs_srv__keytab (aes256-cts-hmac-sha1-96)]
Did you check for the keytab list in on the member?
klist -ket
> On 2019/04/25 13:46, Rowland Penny via samba wrote:
> > No, the key error is that dns doesn't seem to be working, if you can
> > connect via ipaddress, then you are not using kerberos.
Y...
2019 Apr 25
3
AD member server, some users suddenly can only connect to shares via ip address
...ferent subnet, especially a remote one (WAN connection). There
are no firewalls between the subnets.
The key error seems to be this
gss_accept_sec_context failed with [ Miscellaneous failure (see
text): Failed to find cifs/pta-cluster.ad.gibb.co.za at AD.GIBB.CO.ZA(kvno
81) in keytab MEMORY:cifs_srv__keytab (aes256-cts-hmac-sha1-96)]
(pta-cluster.ad.gibb.co.za is the member server)
I'm guessing this is a kerberos keytab error. I am using the default
kerberos method in smb.conf.
dig and dig -x show the expected results, as do nslookup on the windows
clients
My DC's are real Windows 2008 a...