search for: kdc_proxy_request

...39;t work, at least for >> version 4.9.4. Is there any stuff I can test? Or can you give me an >> entry point to the code? Thanks. > > Have a look in source4/kdc/kdc-heimdal.c and source4/kdc/kdc-process.c > for how it gets the error HDB_NOT_FOUND_HERE and turns that into > KDC_PROXY_REQUEST, which triggers sending it off to another DC. > > A packet trace should be your first task to confirm nothing is being > sent on the any DC. > > Andrew Bartlett > Well, my fault. The client isn't trying Kerberos, it's trying LDAP simple binds, which works using MS RO...

On 03/29/2019 10:37 AM, Andrew Bartlett wrote: > On Fri, 2019-03-29 at 10:16 +0100, Adam Minski via samba wrote: >> >> On 03/28/2019 05:32 PM, Rowland Penny via samba wrote: >> >> [...] >> >>>> Should the samba RDOC act like the windows version or is it different >>>> by design? >>>> >>> >>> Yes it should and

...eimdal KDC, and it doesn't work, at least for > version 4.9.4. Is there any stuff I can test? Or can you give me an > entry point to the code? Thanks. Have a look in source4/kdc/kdc-heimdal.c and source4/kdc/kdc-process.c for how it gets the error HDB_NOT_FOUND_HERE and turns that into KDC_PROXY_REQUEST, which triggers sending it off to another DC. A packet trace should be your first task to confirm nothing is being sent on the any DC. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Ca...

...>>> version 4.9.4. Is there any stuff I can test? Or can you give me an >>> entry point to the code? Thanks. >> >> Have a look in source4/kdc/kdc-heimdal.c and source4/kdc/kdc-process.c >> for how it gets the error HDB_NOT_FOUND_HERE and turns that into >> KDC_PROXY_REQUEST, which triggers sending it off to another DC. >> >> A packet trace should be your first task to confirm nothing is being >> sent on the any DC. >> >> Andrew Bartlett >> > > > Well, my fault. The client isn't trying Kerberos, it's trying LDAP &...

...there any stuff I can test? Or can you give me an > > > > entry point to the code? Thanks. > > > > > > Have a look in source4/kdc/kdc-heimdal.c and source4/kdc/kdc-process.c > > > for how it gets the error HDB_NOT_FOUND_HERE and turns that into > > > KDC_PROXY_REQUEST, which triggers sending it off to another DC. > > > > > > A packet trace should be your first task to confirm nothing is being > > > sent on the any DC. > > > > > > Andrew Bartlett > > > > > > > Well, my fault. The client isn'...