Event ID 40960 LSASRV SPNEGO

I have recently installed a Linux box running Samba to act as file storage
for my Win2K3 network (2 DCs, one other member server). From a user point of
view everything is working fine, they can connect to the shares on the samba
box and as far they are concerned it is just another drive.
In the event log on one of the DCs is an error
Event ID: 40960
Source: LSASRV
Category: SPNEGO

The security system detected an authentication error for the server
cifs/samba. The failure code from the authentication protocol Kerberos was
"{Operation Failed}
The requested operation was unsuccessful
(0xc0000001)"

Can anyone point me in the right direction here?

SB пишет:
> I have recently installed a Linux box running Samba to act as file storage
> for my Win2K3 network (2 DCs, one other member server). From a user point of
> view everything is working fine, they can connect to the shares on the samba
> box and as far they are concerned it is just another drive.
> In the event log on one of the DCs is an error
> Event ID: 40960
> Source: LSASRV
> Category: SPNEGO
>
> The security system detected an authentication error for the server
> cifs/samba. The failure code from the authentication protocol Kerberos was
> "{Operation Failed}
> The requested operation was unsuccessful
> (0xc0000001)"
>
> Can anyone point me in the right direction here?

SMB protocol has a number of authentication methods to use. Most modern
method - SPNEGO, wich use Kerberos authentication. As I can see you
didn't configure Kerberos support in your Samba server, so Kerberos
authentication constantly fails... Then Samba rollback to more older
methods such NTLM and LM. If you want to get rid of this problem you
should properly configure Samba Kerberos principal.


--
With best regards
Nickolay Domukhovsky, MCSA