Complete
Details
Details
Assignee
Andrew Walker
Andrew WalkerReporter
Bug Clerk
Bug ClerkFix versions
Priority
More fields
More fields
Katalon Platform
Katalon Platform
Created July 31, 2020 at 6:49 PM
Updated February 14, 2024 at 7:16 PM
Resolved August 11, 2020 at 5:13 PM
PR: https://github.com/freenas/freenas/pull/5333
Issue discovered during abusive testing of domain joins / leaves.
In some cases samba will try to authenticate with stale AD secrets
in secrets.tdb rather than use the kerberos ticket specified in the
`net ads testjoin` command. This results in a pre-authentication
failure being returned by the underlying kerberos library. Expand
the list of "testjoin" error responses that trigger a domain rejoin
to include this particular one as well.