[Freeipa-users] Freeipa Samba problem: ticket is likely out of date

[fujisan]

I'm having trouble accessing a samba share from windows.

In the log file, it says "ticket is likely out of date", it is looking for
kvno 3 and the output of kvno is 4.

How can I update the ticket?

Thanks
Fuji

Server log:
[2022/05/13 12:05:35.353907,  1, pid=252383]
../../source3/librpc/crypto/gse.c:665(gse_get_server_auth_token)
  gss_accept_sec_context failed with [Unspecified GSS failure.  Minor code
may provide more information: Request ticket server
cifs/myserver.mydomain.local(a)MYDOMAIN.LOCAL kvno 3 not found in keytab;
ticket is likely out of date]

# kvno cifs/myserver.mydomain.local(a)MYDOMAIN.LOCAL
cifs/myserver.mydomain.local(a)MYDOMAIN.LOCAL: kvno = 4

# net conf list
[global]
create krb5 conf = no
workgroup = MYDOMAIN.LOCAL
netbios name = MYSERVER
realm = MYDOMAIN..LOCAL
dedicated keytab file = FILE:/etc/samba/samba.keytab
kerberos method = dedicated keytab
server role = IPA PRIMARY DOMAIN CONTROLLER
security = user
domain master = yes
domain logons = yes
log level = 2
max log size = 100000
log file = /var/log/samba/log.%m
rpc_server:epmapper = external
rpc_server:lsarpc = external
rpc_server:lsass = external
rpc_server:lsasd = external
rpc_server:samr = external
rpc_server:netlogon = external
rpc_server:tcpip = yes
rpc_daemon:epmd = fork
rpc_daemon:lsasd = fork
idmap config * : backend = tdb
idmap config * : range = 0 - 0
idmap config MYDOMAIN : backend = sss
idmap config MYDOMAIN : range = 1000 - 201000
max smbd processes = 1000
passdb backend = ipasam:ldapi://%2fvar%2frun%2fslapd-MYDOMAIN.-LOCAL.socket
ldapsam:trusted = yes
ldap group suffix = cn=groups,cn=accounts
ldap machine suffix = cn=computers,cn=accounts
ldap ssl = off
ldap suffix = dc=mydomain,dc=local
ldap user suffix = cn=users,cn=accounts
disable spoolss = yes

[myshare]
path = /data/myshare
read only = no
browseable = yes
guest ok = no
create mask = 0644


The pacquages installed are:
samba-4.14.12-0.fc34.x86_64
freeipa-client-common-4.9.6-4.fc34.noarch
freeipa-selinux-4.9.6-4.fc34.noarch
freeipa-common-4.9.6-4.fc34.noarch
freeipa-server-common-4.9.6-4.fc34.noarch
freeipa-healthcheck-core-0.10-1.fc34.noarch
freeipa-client-4.9.6-4.fc34.x86_64
freeipa-server-4.9.6-4.fc34.x86_64
freeipa-server-dns-4.9.6-4.fc34.noarch
freeipa-server-trust-ad-4.9.6-4.fc34.x86_64
freeipa-python-compat-4.9.6-4.fc34.noarch