search for: decyrpt

hi, now i did some tests with the "auth methods" option. "auth methods = sam, sam_ignoredomain, unix, winbind, wbc, trustdomain, ntdomain, guest" -> RDP works -> smbclient -k does not work "auth methods = sam, sam_ignoredomain, unix, winbind, wbc, trustdomain, ntdomain, guest, samba4" -> RDP hangs an the welcome-scrren -> smbclient -k works fine

...looking into this. In general, please don't change 'auth methods', as it is the auth methods override that changes the behaviour of the authentication stack, both for NTLM and for Kerberos, to match what is needed for the AD DC. Without it, we look in the wrong place when trying to decyrpt the kerberos tickets, which explains the -k failures. I'm also surprised it helped, as I thought we were overriding it. That said, this is a very interesting debugging point. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://sam...

...eneral, please don't change 'auth > methods', as it is the auth methods override that changes the behaviour > of the authentication stack, both for NTLM and for Kerberos, to match > what is needed for the AD DC. > > Without it, we look in the wrong place when trying to decyrpt the > kerberos tickets, which explains the -k failures. > > I'm also surprised it helped, as I thought we were overriding it. > > That said, this is a very interesting debugging point. > > Andrew Bartlett > > -- > Andrew Bartlett > http://samba.org/~aba...