krb5 and ADS error using 10.04, not 9.04

Asked by jean-yves chateaux

The installed distributions use kerberos and likewise to identify the user to an Active Directory Server.

Using 9.04 to auth with kerberos/likewise works fine: tickets ok, everything is done login in one time only.

Using 10.04 to auth the same way leads to an error and forbids the access: user login ok but the access to other ressources is forbidden, returning: KRB Error: KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN.

The kerberos/likewise-open5 versions used are the same on both distributions.

Is there anybody experiencing the same problems ?
How can i fix this ?
thanx

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
KaTaToHuK (katatohuk) said :
#1

Hmmm,i`m using 9.10 and likewise. Works just fine.
Going to update to 10.04 in 10 days ...you scared me ))))
Unfortunately have no opportunity to test now.

Revision history for this message
jean-yves chateaux (jean-yves-chateaux) said :
#2

In addition to the previous post :

This error occurs sometimes on 10.04:

The client sends a TGS_REQ, containing the "Encryption type: rc4-hmac (23)", to the server.
The server answers "KRB5KDC_ERR_ETYPE_NOSUPP (14)"

There's no such error using ubuntu-9.04.

Revision history for this message
KaTaToHuK (katatohuk) said :
#3

Maybe you should send bug report ?

Revision history for this message
actionparsnip (andrew-woodhead666) said :
#4

Log a bug, 10.04 is still in beta so WILL have lots of issues and glitches.

Can you help with this problem?

Provide an answer of your own, or ask jean-yves chateaux for more information if necessary.

To post a message you must log in.