Web lists-archives.com

Re: [Samba] after DCs migration to 4.7, two things




Hi,

On 11/07/2017 09:51 PM, Rowland Penny wrote:
And anyone on my second issue, on
[2017/11/07 18:23:25.114429,
1] ../source4/auth/gensec/gensec_gssapi.c:790(gensec_gssapi_update_internal)
GSS server Update(krb5)(1) Update failed:  Miscellaneous failure
(see text): Failed to findDC4$@SAMBA.COMPANY.COM(kvno 1) in keytab
FILE:/var/lib/samba/private/secrets.keytab  (arcfour-hmac-md5)
[2017/11/07 18:23:25.114456,
1] ../auth/gensec/spnego.c:411(gensec_spnego_parse_negTokenInit)
SPNEGO(gssapi_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
That one worries me a bit more than the DNS thing...

It seems that something is looking for 'key version number 1' (kvno 1)
but the klist you posted shows kvno 2

For the archives: the errors above have disappeared automatically.

Perhaps they were caused by the fact that I had replaced all three old 4.5 DCs with three new 4.7 DCs, but using the same dns name and ip.

Perhaps some clients noticed the later than others or so.

MJ

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba