I'm having a problem with my Samba installation. I want it to authenticate against a Windows 2000 Active Directory.
Using kinit, I can request a ticket-granting ticket from the Windows 2000 server.
Using that tgt, I can request a win2000$ machine ticket, which allows smbclient -k to connect to shares on the Windows 2000 machine.
Using the tgt, I can also request a sambaserver$ machine ticket, but when I try to use that with smbclient -k -L localhost I get an NT_STATUS_LOGON_FAILURE.
My log.smbd shows following lines:
[2005/02/28 16:45:18, 1] libads/kerberos_verify.c:ads_secrets_verify_ticket(155)
ads_secrets_verify_ticket: failed to fetch machine password
[2005/02/28 16:45:18, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)
Failed to verify incoming ticket!
I am obviously missing something. Samba is not setting up a session. What machine password does it want, and where do I put it? Any help would be much appreciated!