Comment # 1 on bug 1206996 from
Removing KRB5RCACHETYPE="none" from /etc/sysconfig/named let to errors but no
core dump of named when the windows PC start.

Here is the error messages found in  journalctl

Jan 11 08:51:51 rasp.samdom.pce23.net named[18841]: client @0xffff8b850f68
192.168.2.100#57600: update 'samdom.pce23.net/IN' denied
Jan 11 08:51:52 rasp.samdom.pce23.net named[18841]: samba_dlz: GSS server
Update(krb5)(1) Update failed: Unspecified GSS failure.  Minor code may provide
more information: Request is a replay
Jan 11 08:51:52 rasp.samdom.pce23.net named[18841]: samba_dlz:
gensec_spnego_server_negTokenInit_step: gssapi_krb5: parsing NEG_TOKEN_INIT
content failed (next[(null)]): NT_STATUS_LOGON_FAILURE
Jan 11 08:51:52 rasp.samdom.pce23.net named[18841]: samba_dlz: spnego update
failed

Note that in the mailing list of samba I found that the error "Request is a
replay" should be solved when setting KRB5RCACHETYPE="none" in
/etc/sysconfig/named

See R���f: https://lists.samba.org/archive/samba/2017-December/212948.html
and also https://bugzilla.samba.org/show_bug.cgi?id=13066

Regards
Philippe


You are receiving this mail because: