On 9 March 2017 at 12:06, John Beranek <john(a)redux.org.uk> wrote:
On 9 March 2017 at 10:29, John Beranek <john(a)redux.org.uk>
wrote:
> So, an update on this - I left the server for a day, and Samba has
> stopped authenticating. Samba log says:
>
[snip]
>
> So, adcli updated the keytab, but Samba auth still stopped working?
It seems a bit worse than this though, as sssd itself is upset too:
Mar 9 12:05:19 server [sssd[krb5_child[32221]]]: Key version number
for principal in key table is incorrect
Mar 9 12:05:19 server [sssd[krb5_child[32221]]]: Key version number
for principal in key table is incorrect
I'm going to try to clear the SSSD databases to see if that helps.
Cleared all SSSD databases, and re-ran "adcli join" and SSSD was happy again.
Disconnected the SMB share on my Windows workstation and
re-established (with a Username/Password prompt??) and SMB access is
working again: confusing.
John
--
John Beranek To generalise is to be an idiot.
http://redux.org.uk/ -- William Blake