Kerberos Help Needed

Greg Julius fromRHIL at outtacyte.com
Sun Aug 28 02:00:15 UTC 2005


 
Y     Y    A      H     H    OOOO       OOOO     !!
 Y   Y    A A     H     H  O      O   O      O   !!
  Y Y    A   A    H     H O        O O        O  !!
   Y    AAAAAAA   HHHHHHH O        O O        O  !!
   Y   A       A  H     H O        O O        O  !!
   Y  A         A H     H  O      O   O      O
   Y A           AH     H    OOOO       OOOO     !!

IT WORKS

More on the solution later - write-up forthcoming.

I think the biggest problem was (is?) a disconnect between
the left and right ear!

-g
# sometimes you really can't see the forrest due to the trees



-----Original Message-----
From: redhat-install-list-bounces at redhat.com
[mailto:redhat-install-list-bounces at redhat.com] On Behalf Of Greg Julius
Sent: Friday, August 26, 2005 7:27 PM
To: redhat-install-list at redhat.com
Subject: RE: Kerberos Help Needed

>> OK, what's next?
>
>You could try the layout I've given above.  It works for us, but I
>really am concerned about that crash from the kerberos libraries.
>Have you checked bugzilla about such behaviour?

Yes, see here: 
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=164353
Unfortunately no resolution yet.  Not even work arounds.  Found this last
night.

Upon re-reading it, the MALLOC_CHECK_=0 looked promising to give a try.
If I can keep it from failing, then perhaps I'll be able to see what
the real error is.

I did an "export MALLOC_CHECK_=0" from my terminal and tried the 'net join'
No abend.

Modified the /etc/rc.d/init.d/smb script to add an "export MALLOC_CHECK_=0"
to the script in the start section.

I tried to figure out where I could put this export that would effect the
system as a whole, but that's probably not a good idea anyway.

When I restarted and re-created my net join (no abend) and then went to the 
windows system and browsed the guardian machine I was able to see the
shares.
When I accessed the share, I got the password box.

I am logged on to windows as the windows user who has access to the share.
I should not be getting the dialog box as I should already have authority.
Right?  I am in the list for 'admin users', 'valid users', and 'write list'.
I think I should be able to access this share.  Please let me know if
I should check something else as I don't have a real good grip of how the
users get their permissions on samba shares in the winbind world.

Accessing the share has, in the past, been sufficient to trigger the abend.
This time I get this (four times)
  [2005/08/26 00:09:00, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)
    Failed to verify incoming ticket!

Answering the prompt only generates more of the above errors, but no abends.
The winbind log has no information, just the start header.

So, What does this message mean?  I've googled and I see that the question
has been asked, but I didn't find an answer so I don't know where to poke
around now.

And I've got to go to bed.  The thinker part is thunked out...

-g

_______________________________________________
Redhat-install-list mailing list
Redhat-install-list at redhat.com
https://www.redhat.com/mailman/listinfo/redhat-install-list
To Unsubscribe Go To ABOVE URL or send a message to:
redhat-install-list-request at redhat.com
Subject: unsubscribe




More information about the Redhat-install-list mailing list