Received: by 10.66.88.231 with SMTP id bj7mr4457057pab.45.1351018803416;
        Tue, 23 Oct 2012 12:00:03 -0700 (PDT)
Path: 6ni18753pbd.1!nntp.google.com!border1.nntp.dca.giganews.com!nntp.giganews.com!npeer01.iad.highwinds-media.com!feed-me.highwinds-media.com!cyclone01.ams2.highwinds-media.com!news.highwinds-media.com!voer-me.highwinds-media.com!news.unit0.net!weretis.net!feeder4.news.weretis.net!news.mixmin.net!newsfeed.x-privat.org!bofh.it!news.nic.it!robomod
From: Bart Janssens <biajanss...@gmail.com>
Newsgroups: linux.samba
Subject: Re: [Samba] Old,  reliable samba 3.5 and Active directory suddenly not reliable
Date: Tue, 23 Oct 2012 21:00:02 +0200
Message-ID: <jXRRM-2fK-15@gated-at.bofh.it>
References: <jXsgH-4uF-29@gated-at.bofh.it> <jXsqn-4DK-23@gated-at.bofh.it> <jXvex-85I-7@gated-at.bofh.it> <jXxzI-2Cq-21@gated-at.bofh.it> <jXOhb-6uk-11@gated-at.bofh.it>
X-Original-To: r.mar...@csuohio.edu
Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
	h=message-id:date:from:user-agent:mime-version:to:cc:subject
	:references:in-reply-to:content-type;
	bh=I59cLkllgkP3thh1Ae1Pv8s36gsIM7O+Z1FdnOr3dFs=;
	b=vgC29vl4xNOlUTO1J91o8EBBqzuB2B337lt8cyoa/iyoDzTu5ptfVODNRtFXRCRY9Q
	DbFkyJBx6EzFpW3BV4CZSbjoDUbAbML/vzmozXiMbOlNJJKgquzQ0Uh791ILKwOKhDh0
	QPz2QLK/J29aij+X1O2qtrMILxoYrJJ130yQPEp5l+tmtKXdt8QX0FzqUlrpx2Hqc+XW
	27dxrlCrVBn3Iym0NubxN81DMyhP/kPZPv3qy13i6z+u3fRJ8bso9EoIN0J9r71hQdz4
	IYltz4Uj5+PtyEOahcl6I5Kuxeuce5sQRFm8COWT8Fo4gePL98PefRXxsxGXPznbuv0Q
	gvpw==
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7;
	rv:16.0) Gecko/20121010 Thunderbird/16.0.1
MIME-Version: 1.0
X-Content-Filtered-By: Mailman/MimeDel 2.1.13
List-ID: General questions regarding Samba <samba.lists.samba.org>
List-Archive: <http://lists.samba.org/pipermail/samba>
Sender: robo...@news.nic.it
Approved: robo...@news.nic.it
Lines: 67
Organization: linux.* mail to news gateway
X-Original-Cc: sa...@lists.samba.org, Andrew Bartlett <abart...@samba.org>
X-Original-Date: Tue, 23 Oct 2012 20:57:30 +0200
X-Original-Message-ID: <5086E89A.6090...@gmail.com>
X-Original-References: <50856658.7010...@csuohio.edu> <50856ACF.9020...@csuohio.edu>
	<508595A8.8000...@csuohio.edu> <1350940237.21630.64.camel@jesse>
	<5086B452.2050...@csuohio.edu>
X-Original-Sender: samba-boun...@lists.samba.org
X-Received-Bytes: 4470
Bytes: 4545
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"

Hi Robert,

You may want to consider installing the Solaris 10 Samba patches:
119757-25 (sparc)
119758-25 (x86)

-25 updates the Solaris 10 Samba package to 3.6.7

Regards,

-Bart


On 23/10/12 17:14, Robert M. Martel - CSU wrote:
>
>
> On 10/22/2012 05:10 PM, Andrew Bartlett wrote:
>> On Mon, 2012-10-22 at 14:51 -0400, Robert M. Martel - CSU wrote:
>
>>> [2012/10/22 14:23:07.353280,  0] 
>>> libads/kerberos.c:333(ads_kinit_password)
>>>     kerberos_kinit_password WEBDEV...@CSUNET.CSUOHIO.EDU failed: 
>>> Clients
>>> credentials have been revoked
>>> Join to domain is not valid: Access denied
>>>
>>>
>>> The Active Directory admins are still saying that they have not changed
>>> anything on their side.
>>
>> It seems unlikely if you just re-joined, but in case we are talking
>> about multiple machines, could the password have been expired?
>
> The problem existed for multiple machines.
>
> After Brian Campbell's note I double-checked the clock-sync on the 
> servers and found it to be okay.
>
> The Active Directory (AD) admins that "did not change anything" 
> finally reported having some vague problem with their domain server 
> replication that only seem to affect *my* Samba servers (I may be the 
> only person on campus running Samba servers that are members of the 
> university's Active Directory system.)
>
> There was some more hand waving, reports of trying to get some support 
> out of Microsoft, and finally a mention that *someone* had been making 
> some changes to AD config in preparation of moving from Lotus Notes 
> Email to MS Exchange.
>
> The AD admins then "did something else" and now the problem no longer 
> exists.  I am still trying to get some real information as to what 
> happened.
>
> If I (ever) find out I will note it here.  I always hate seeing 
> problem reports in Email archives that never talk about resolution.
>
> Thank you!
>
> At least I got my Samba versions less out of date.  Have to see if 
> building 3.6 is as much of a pain on Solaris as 3.5 has been.
>
>
>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba