Actions
Bug #8687
open
Update smbns_ads.c to add aditional help
Status:
New
Priority:
Normal
Assignee:
-
Category:
cifs - CIFS server and client
Start date:
2017-09-27
Due date:
% Done:
0%
Estimated time:
Difficulty:
Bite-size
Tags:
needs-triage
Gerrit CR:
Description
Submitted as https://github.com/illumos/illumos-gate/pull/24 - this is a simple and helpful fix. From the PR:
removed typo
added additional help to check local system time.
This was the issue the last few hours with my setup.
So I think this hint might be helpful.
Updated by Dan McDonald almost 5 years ago
From ba625be691ef46d487175d8dfb683fd54dce6429 Mon Sep 17 00:00:00 2001
From: schenklklopfer <wolff@wsg-film.de>
Date: Wed, 27 Sep 2017 13:00:02 +0200
Subject: [PATCH] Update smbns_ads.c
removed typo
added additional help
---
usr/src/lib/smbsrv/libsmbns/common/smbns_ads.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/usr/src/lib/smbsrv/libsmbns/common/smbns_ads.c b/usr/src/lib/smbsrv/libsmbns/common/smbns_ads.c
index 4c574786d5a..13c4f4bbe27 100644
--- a/usr/src/lib/smbsrv/libsmbns/common/smbns_ads.c
+++ b/usr/src/lib/smbsrv/libsmbns/common/smbns_ads.c
@@ -1862,7 +1862,7 @@ adjoin_table[] = {
{ SMB_ADS_KRB5_PARSE_PRINCIPAL,
"Failed parsing the user principal name." },
{ SMB_ADS_KRB5_GET_INIT_CREDS_PW,
- "Failed getting initial credentials. (Wrong password?)" },
+ "Failed getting initial credentials. (Check your local system time. Wrong password?)" },
{ SMB_ADS_KRB5_CC_INITIALIZE,
"Failed initializing the credential cache." },
{ SMB_ADS_KRB5_CC_STORE_CRED,
Updated by Gordon Ross almost 5 years ago
The kerberos library can tell us when "clock skew" is the reason we fail authentication.
It would be better to propagate that error up so we can accurately report the failure.
There's some work in that direction in illumos-nexenta. See:
https://github.com/Nexenta/illumos-nexenta/blob/release-5.0.3/usr/src/lib/gss_mechs/mech_krb5/krb5/krb/get_in_tkt.c
and related commits there and in libsmb_ns.
Actions