[Samba] Help with sudden wierd ticket error.

[2008/06/11 12:07:03, 3] smbd/sesssetup.c:reply_spnego_negotiate(525)
Got OID 1 2 840 113554 1 2 2
[2008/06/11 12:07:03, 3] smbd/sesssetup.c:reply_spnego_negotiate(525)
Got OID 1 3 6 1 4 1 311 2 2 10
[2008/06/11 12:07:03, 3] smbd/sesssetup.c:reply_spnego_negotiate(528)
Got secblob of size 1205
[2008/06/11 12:07:03, 3]
libads/kerberos_verify.c:ads_secrets_verify_ticket(249)
ads_secrets_verify_ticket: enc type [23] failed to decrypt with error
Ticket not yet valid
[2008/06/11 12:07:03, 3] libads/kerberos_verify.c:ads_verify_ticket(378)
ads_verify_ticket: krb5_rd_req with auth failed (Success)
[2008/06/11 12:07:03, 1] smbd/sesssetup.c:reply_spnego_kerberos(197)
Failed to verify incoming ticket!
[2008/06/11 12:07:03, 3] smbd/error.c:error_packet(146)
error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE
[2008/06/11 12:07:03, 3] smbd/process.c:timeout_processing(1447)
timeout_processing: End of file from client (client has disconnected).
[2008/06/11 12:07:03, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2008/06/11 12:07:03, 2] smbd/server.c:exit_server(614)
Closing connections
[2008/06/11 12:07:03, 3] smbd/connection.c:yield_connection(69)
Yielding connection to
[2008/06/11 12:07:03, 3] smbd/server.c:exit_server(655)




Folks I'm in a tight spot with users seeing intermittent access to a
critical samba server on my network. Above seems to illustrate the error
best. This line, maybe the most? Suggestions? Any help welcome.

ads_secrets_verify_ticket: enc type [23] failed to decrypt with error
Ticket not yet valid



--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba

On Thu, 2008-06-12 at 10:03 -0600, Daniel Baughman wrote:

>
> Folks I'm in a tight spot with users seeing intermittent access to a
> critical samba server on my network. Above seems to illustrate the error
> best. This line, maybe the most? Suggestions? Any help welcome.
>
> ads_secrets_verify_ticket: enc type [23] failed to decrypt with error
> Ticket not yet valid

You have time synchronization issues.

Simo.

--
Simo Sorce
Samba Team GPL Compliance Officer <simo@samba.org>
Senior Software Engineer at Red Hat Inc. <ssorce@redhat.com>

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba

Right you are, and here are some key words that might help others stumble on
this particular thread if ever faced with the same error:

When attempting to rejoin the domain you get a bunch of notices about the
clocks being too far out of synch.

Setting the clock on the samba manually and rejoining the ADS domain did the
trick.

Thanks for your help,

Dan

-----Original Message-----
From: simo [mailto:idra@samba.org]
Sent: Thursday, June 12, 2008 10:55 AM
To: Daniel Baughman
Cc: samba@lists.samba.org
Subject: Re: [Samba] Help with sudden wierd ticket error.


On Thu, 2008-06-12 at 10:03 -0600, Daniel Baughman wrote:

>
> Folks I'm in a tight spot with users seeing intermittent access to a
> critical samba server on my network. Above seems to illustrate the error
> best. This line, maybe the most? Suggestions? Any help welcome.
>
> ads_secrets_verify_ticket: enc type [23] failed to decrypt with error
> Ticket not yet valid

You have time synchronization issues.

Simo.

--
Simo Sorce
Samba Team GPL Compliance Officer <simo@samba.org>
Senior Software Engineer at Red Hat Inc. <ssorce@redhat.com>

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba