AD controller problems.
in [Samba]
|
From: Giovanni Cambria on 9 Dec 2008 13:10 What about the time syncronization of the RTC clock of every DCs? G. ----- Original Message ----- From: "Derek Harkness" <dharknes(a)umd.umich.edu> To: "Samba List" <samba(a)lists.samba.org> Sent: Monday, December 08, 2008 4:40 PM Subject: [Samba] AD controller problems. > In my AD setup I have 3 domain controllers (dc1, dc2, dc3) when samba/ > winbind are talking to dc1 everything is great when talking to dc2 or > dc3 I get this error "kinit succeeded but ads_sasl_spnego_krb5_bind > failed: Strong(er) authentication required" and nothing works. I > don't think its a samba config problem but my AD admins aren't real > helpful in getting samba working. > > Has anybody else seen this or maybe got a solution/work around? > > Thanks, > Derek > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/listinfo/samba > > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
From: Derek Harkness on 9 Dec 2008 17:10 I did check that by doing a time sync against both of the other DCs. Ntpdate adjusted the clock by a couple of milliseconds, not enough to through off kerberos. Thanks, Derek On Dec 9, 2008, at 12:29 PM, Giovanni Cambria wrote: > What about the time syncronization of the RTC clock of every DCs? > > G. > ----- Original Message ----- From: "Derek Harkness" <dharknes(a)umd.umich.edu > > > To: "Samba List" <samba(a)lists.samba.org> > Sent: Monday, December 08, 2008 4:40 PM > Subject: [Samba] AD controller problems. > > >> In my AD setup I have 3 domain controllers (dc1, dc2, dc3) when >> samba/ winbind are talking to dc1 everything is great when talking >> to dc2 or dc3 I get this error "kinit succeeded but >> ads_sasl_spnego_krb5_bind failed: Strong(er) authentication >> required" and nothing works. I don't think its a samba config >> problem but my AD admins aren't real helpful in getting samba >> working. >> Has anybody else seen this or maybe got a solution/work around? >> Thanks, >> Derek >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/listinfo/samba >> > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
From: Giovanni Cambria on 10 Dec 2008 10:30 Derek, spend a couple of minutes to see this link http://lists-archives.org/samba/36627-kinit-succeeded-but-ads_sasl_spnego_krb5_bind-failed.html someone seemed had the same problem, time ago ;-) G. ----- Original Message ----- From: "Derek Harkness" <dharknes(a)umd.umich.edu> To: "Samba List" <samba(a)lists.samba.org> Sent: Tuesday, December 09, 2008 11:06 PM Subject: Re: [Samba] AD controller problems. >I did check that by doing a time sync against both of the other DCs. >Ntpdate adjusted the clock by a couple of milliseconds, not enough to >through off kerberos. > > Thanks, > Derek > > On Dec 9, 2008, at 12:29 PM, Giovanni Cambria wrote: > >> What about the time syncronization of the RTC clock of every DCs? >> >> G. >> ----- Original Message ----- From: "Derek Harkness" >> <dharknes(a)umd.umich.edu >> > >> To: "Samba List" <samba(a)lists.samba.org> >> Sent: Monday, December 08, 2008 4:40 PM >> Subject: [Samba] AD controller problems. >> >> >>> In my AD setup I have 3 domain controllers (dc1, dc2, dc3) when samba/ >>> winbind are talking to dc1 everything is great when talking to dc2 or >>> dc3 I get this error "kinit succeeded but ads_sasl_spnego_krb5_bind >>> failed: Strong(er) authentication required" and nothing works. I >>> don't think its a samba config problem but my AD admins aren't real >>> helpful in getting samba working. >>> Has anybody else seen this or maybe got a solution/work around? >>> Thanks, >>> Derek >>> -- >>> To unsubscribe from this list go to the following URL and read the >>> instructions: https://lists.samba.org/mailman/listinfo/samba >>> >> > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/listinfo/samba > > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
|
Pages: 1 Prev: [Samba] AD controller problems. Next: [Samba] Inotify - too many open files |