<html>
  <head>
    <meta content="text/html; charset=utf-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">On 08/01/15 05:09, Ashish Yadav wrote:<br>
    </div>
    <blockquote
cite="mid:CAPm7S=728_w9esR+MAuTyo-_nxXQaet+=tqshvbrraKgXwRkeA@mail.gmail.com"
      type="cite">
      <div dir="ltr">Hi,<br>
        <div class="gmail_extra"><br>
          <div class="gmail_quote">
            <blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><span
                class="">
                <br>
              </span>What happens if you call<br>
              <br>
              kinit <a moz-do-not-send="true"
                href="mailto:sambauser@INTRA.EXAMPLE.COM">sambauser@INTRA.EXAMPLE.COM</a></blockquote>
            <div><br>
            </div>
            <div>It asks for password and current password is working
              for getting kerberos ticket and not asking me to reset the
              password.</div>
            <div> </div>
            <blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><br>
              <br>
              on the Linux command line. Are you asekd you for new
              password here? If<br>
              not Samba might not return the right error code to
              indicate that the<br>
              password is expired. </blockquote>
            <div><br>
            </div>
            <div>I posted this query in samba mailing list also but they
              told me that if Windows 7 client is working fine then
              Samba is working fine.<br>
            </div>
          </div>
        </div>
      </div>
    </blockquote>
    <br>
    No you weren't, you were told that you might have a better chance of
    getting it fixed on the sssd list because it worked from a windows
    client, so this meant it was *probably* a sssd problem, it may in
    the end turn out to be a samba problem, but sssd needs ruling out
    first and as I pointed out to you on the samba list, sssd is not
    part of samba.<br>
    <br>
    Rowland<br>
    <br>
    <blockquote
cite="mid:CAPm7S=728_w9esR+MAuTyo-_nxXQaet+=tqshvbrraKgXwRkeA@mail.gmail.com"
      type="cite">
      <div dir="ltr">
        <div class="gmail_extra">
          <div class="gmail_quote">
            <div> </div>
            <blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">In
              this case it would be nice if you can send the<br>
              output of<br>
              <br>
              KRB5_TRACE=/dev/stdout  kinit <a moz-do-not-send="true"
                href="mailto:sambauser@INTRA.EXAMPLE.COM">sambauser@INTRA.EXAMPLE.COM</a><br>
              <br>
            </blockquote>
            <div><br>
            </div>
            <div>Here is the output of the above command,</div>
            <div><br>
            </div>
            <div> # KRB5_TRACE=/dev/stdout  kinit test</div>
            <div>[2507] 1420693228.971649: Getting initial credentials
              for <a moz-do-not-send="true"
                href="mailto:test@INTRA.EXAMPLE.COM">test@INTRA.EXAMPLE.COM</a></div>
            <div>[2507] 1420693228.974468: Sending request (210 bytes)
              to <a moz-do-not-send="true"
                href="http://INTRA.EXAMPLE.COM">INTRA.EXAMPLE.COM</a></div>
            <div>[2507] 1420693228.976230: Sending initial UDP request
              to dgram <a moz-do-not-send="true"
                href="http://172.16.0.170:8880">172.16.0.170:8880</a></div>
            <div>[2507] 1420693228.981059: Received answer from dgram <a
                moz-do-not-send="true" href="http://172.16.0.170:8880">172.16.0.170:8880</a></div>
            <div>[2507] 1420693228.981167: Response was not from master
              KDC</div>
            <div>[2507] 1420693228.981252: Received error from KDC:
              -1765328359/Additional pre-authentication required</div>
            <div>[2507] 1420693228.981413: Processing preauth types: 16,
              15, 2, 138, 136, 11, 19</div>
            <div>[2507] 1420693228.981477: Selected etype info: etype
              rc4-hmac, salt "INTRA.EXAMPLE.COMtest", params ""</div>
            <div>[2507] 1420693228.981532: Selected etype info: etype
              rc4-hmac, salt "INTRA.EXAMPLE.COMtest", params ""</div>
            <div>Password for <a moz-do-not-send="true"
                href="mailto:test@INTRA.EXAMPLE.COM">test@INTRA.EXAMPLE.COM</a>: </div>
            <div>[2507] 1420693231.111979: AS key obtained for encrypted
              timestamp: rc4-hmac/3CC1</div>
            <div>[2507] 1420693231.112235: Encrypted timestamp (for
              1420693231.112064): plain
              301AA011180F32303135303130383035303033315AA105020301B5C0,
              encrypted
F92A0E3BEF336E51C24C4CB9E8EB1ACE49ECA2BE32C9ABD207062898FD593268EEA31CF0185BE2B2B05F3A4A47328E9B1149AFA0</div>
            <div>[2507] 1420693231.112272: Preauth module
              encrypted_timestamp (2) (flags=1) returned: 0/Success</div>
            <div>[2507] 1420693231.112292: Produced preauth for next
              request: 2</div>
            <div>[2507] 1420693231.112341: Sending request (286 bytes)
              to <a moz-do-not-send="true"
                href="http://INTRA.EXAMPLE.COM">INTRA.EXAMPLE.COM</a></div>
            <div>[2507] 1420693231.112611: Sending initial UDP request
              to dgram <a moz-do-not-send="true"
                href="http://172.16.0.170:8880">172.16.0.170:8880</a></div>
            <div>[2507] 1420693231.116296: Received answer from dgram <a
                moz-do-not-send="true" href="http://172.16.0.170:8880">172.16.0.170:8880</a></div>
            <div>[2507] 1420693231.116448: Response was not from master
              KDC</div>
            <div>[2507] 1420693231.116573: Processing preauth types: 3</div>
            <div>[2507] 1420693231.116586: Received salt "��" via padata
              type 3</div>
            <div>[2507] 1420693231.116597: Produced preauth for next
              request: (empty)</div>
            <div>[2507] 1420693231.116616: AS key determined by preauth:
              rc4-hmac/3CC1</div>
            <div>[2507] 1420693231.116694: Decrypted AS reply; session
              key is: rc4-hmac/4D55</div>
            <div>[2507] 1420693231.116724: FAST negotiation: available</div>
            <div>[2507] 1420693231.116729: Initializing
              <a class="moz-txt-link-freetext" href="FILE:/tmp/krb5cc_0">FILE:/tmp/krb5cc_0</a> with default princ <a
                moz-do-not-send="true"
                href="mailto:test@INTRA.EXAMPLE.COM">test@INTRA.EXAMPLE.COM</a></div>
            <div>[2507] 1420693231.117523: Removing <a
                moz-do-not-send="true"
                href="mailto:test@INTRA.EXAMPLE.COM">test@INTRA.EXAMPLE.COM</a>
              -&gt; krbtgt/<a moz-do-not-send="true"
                href="mailto:INTRA.EXAMPLE.COM@INTRA.EXAMPLE.COM">INTRA.EXAMPLE.COM@INTRA.EXAMPLE.COM</a>
              from <a class="moz-txt-link-freetext" href="FILE:/tmp/krb5cc_0">FILE:/tmp/krb5cc_0</a></div>
            <div>[2507] 1420693231.117542: Storing <a
                moz-do-not-send="true"
                href="mailto:test@INTRA.EXAMPLE.COM">test@INTRA.EXAMPLE.COM</a>
              -&gt; krbtgt/<a moz-do-not-send="true"
                href="mailto:INTRA.EXAMPLE.COM@INTRA.EXAMPLE.COM">INTRA.EXAMPLE.COM@INTRA.EXAMPLE.COM</a>
              in <a class="moz-txt-link-freetext" href="FILE:/tmp/krb5cc_0">FILE:/tmp/krb5cc_0</a></div>
            <div>[2507] 1420693231.117710: Storing config in
              <a class="moz-txt-link-freetext" href="FILE:/tmp/krb5cc_0">FILE:/tmp/krb5cc_0</a> for krbtgt/<a moz-do-not-send="true"
                href="mailto:INTRA.EXAMPLE.COM@INTRA.EXAMPLE.COM">INTRA.EXAMPLE.COM@INTRA.EXAMPLE.COM</a>:
              fast_avail: yes</div>
            <div>[2507] 1420693231.117903: Removing <a
                moz-do-not-send="true"
                href="mailto:test@INTRA.EXAMPLE.COM">test@INTRA.EXAMPLE.COM</a>
              -&gt; krb5_ccache_conf_data/fast_avail/krbtgt\/<a
                moz-do-not-send="true" href="http://INTRA.EXAMPLE.COM">INTRA.EXAMPLE.COM</a>\@INTRA.EXAMPLE.COM@X-CACHECONF:
              from <a class="moz-txt-link-freetext" href="FILE:/tmp/krb5cc_0">FILE:/tmp/krb5cc_0</a></div>
            <div>[2507] 1420693231.117920: Storing <a
                moz-do-not-send="true"
                href="mailto:test@INTRA.EXAMPLE.COM">test@INTRA.EXAMPLE.COM</a>
              -&gt; krb5_ccache_conf_data/fast_avail/krbtgt\/<a
                moz-do-not-send="true" href="http://INTRA.EXAMPLE.COM">INTRA.EXAMPLE.COM</a>\@INTRA.EXAMPLE.COM@X-CACHECONF:
              in <a class="moz-txt-link-freetext" href="FILE:/tmp/krb5cc_0">FILE:/tmp/krb5cc_0</a></div>
            <div><br>
            </div>
            <span style="font-family:arial"><br class="">
              --Regards</span><br style="font-family:arial">
            <div><span style="font-family:arial">Ashishkumar S. Yadav</span> </div>
          </div>
          <br>
        </div>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
sssd-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a>
<a class="moz-txt-link-freetext" href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a>
</pre>
    </blockquote>
    <br>
  </body>
</html>