search for: aa312825768811d1aded00c04fd8d5cd

Hello, Changing "CN=Computers" to another OU doesn't seem to work correctly in Samba 4.8.5. Running redircmp or changing the wellKnownObject AA312825768811D1ADED00C04FD8D5CD to another OU worked in Samba 4.4 but now the Windows clients don't seem to respect that entry. They instead try to create their computer object under "CN=Computers" which they no longer have access to resulting in an Access Denied message during domain join. In the samba log one can...

...AD account. 3. What I did for troubleshooting 3.1 debug log The debug level 5 log shows some detail information: """ ads_sasl_spnego_bind: got OID=1.3.6.1.4.1.311.2.2.10 Starting GENSEC mechanism spnego Starting GENSEC submechanism gse_krb5 Failed while searching for: <WKGUID=AA312825768811D1ADED00C04FD8D5CD,dc=PROD USA,dc=mycompany,dc=COM> libnet_DomainJoin: Failed to pre-create account in OU cn=Computers,dc=PROD-USA,dc=mycompany,dc=COM: Operations error signed SMB2 message """ It showed failed while searching a wellknownobject, and Samba source code shows: if (asprintf(&base...

On Sat, 2018-09-22 at 13:09 +0200, Kacper via samba wrote: > Hello, > > Changing "CN=Computers" to another OU doesn't seem to work correctly > in Samba 4.8.5. Running redircmp or changing the wellKnownObject > AA312825768811D1ADED00C04FD8D5CD to another OU worked in Samba 4.4 > but > now the Windows clients don't seem to respect that entry. They > instead > try to create their computer object under "CN=Computers" which they > no > longer have access to resulting in an Access Denied message during > dom...

...rtlet at samba.org> wrote: > On Sat, 2018-09-22 at 13:09 +0200, Kacper via samba wrote: > > Hello, > > > > Changing "CN=Computers" to another OU doesn't seem to work correctly > > in Samba 4.8.5. Running redircmp or changing the wellKnownObject > > AA312825768811D1ADED00C04FD8D5CD to another OU worked in Samba 4.4 > > but > > now the Windows clients don't seem to respect that entry. They > > instead > > try to create their computer object under "CN=Computers" which they > > no > > longer have access to resulting in an Access...

...ng > 3.1 debug log > The debug level 5 log shows some detail information: > > """ > ads_sasl_spnego_bind: got OID=1.3.6.1.4.1.311.2.2.10 > Starting GENSEC mechanism spnego > Starting GENSEC submechanism gse_krb5 > Failed while searching for: > <WKGUID=AA312825768811D1ADED00C04FD8D5CD,dc=PROD > USA,dc=mycompany,dc=COM> > > libnet_DomainJoin: Failed to pre-create account in OU > cn=Computers,dc=PROD-USA,dc=mycompany,dc=COM: Operations error > > signed SMB2 message > """ > > It showed failed while searching a wellknownobject, and Samba...

...rincipal failed (No credentials cache found) [2005/05/24 11:33:09, 3] libsmb/clikrb5.c:ads_cleanup_expired_creds(318) Ticket in ccache[MEMORY:net_ads] expiration Tue, 24 May 2005 21:33:09 GMT [2005/05/24 11:33:09, 1] libads/ldap.c:ads_default_ou_string(1085) Failed while searching for: <WKGUID=AA312825768811D1ADED00C04FD8D5CD,dc=AD,dc=CHECKPOINT,dc=COM> ads_join_realm: Operations error [2005/05/24 11:33:09, 2] utils/net.c:main(897) return code = -1 Any help greatly appreciated.. Mike Michael Andrewjeski Unix Administrator Zone Labs, A Check Point Company http://www.zonelabs.com Tel:? 415.633.4769 Fax:? 415.633.45...

...ache (MEMORY:net_ads) is valid until: (Fri, 27 May 2005 20:27:09 GMT - 1117250829) [2005/05/27 10:27:09, 10] libsmb/clikrb5.c:get_krb5_smb_session_key(509) Got KRB5 session key of length 16 [2005/05/27 10:27:09, 1] libads/ldap.c:ads_default_ou_string(1085) Failed while searching for: <WKGUID=AA312825768811D1ADED00C04FD8D5CD,dc=AD,dc=HOSTNAME,dc=COM> [2005/05/27 10:27:09, 10] intl/lang_tdb.c:lang_tdb_init(135) lang_tdb_init: /usr/pkg/samba-3.0.14a/lib/en_US.UTF-8.msg: No such file or directory ads_join_realm: Operations error [2005/05/27 10:27:09, 2] utils/net.c:main(897) return code = -1 root@itibm:/root#

...ache (MEMORY:net_ads) is valid until: (Fri, 27 May 2005 20:27:09 GMT - 1117250829) [2005/05/27 10:27:09, 10] libsmb/clikrb5.c:get_krb5_smb_session_key(509) Got KRB5 session key of length 16 [2005/05/27 10:27:09, 1] libads/ldap.c:ads_default_ou_string(1085) Failed while searching for: <WKGUID=AA312825768811D1ADED00C04FD8D5CD,dc=AD,dc=HOSTNAME,dc=COM> [2005/05/27 10:27:09, 10] intl/lang_tdb.c:lang_tdb_init(135) lang_tdb_init: /usr/pkg/samba-3.0.14a/lib/en_US.UTF-8.msg: No such file or directory ads_join_realm: Operations error [2005/05/27 10:27:09, 2] utils/net.c:main(897) return code = -1 root@itibm:/root# -- T...

...e (MEMORY:net_ads) is valid until: (Fri, 15 Jul 2005 08:34:21 GMT - 1121409261) [2005/07/14 22:34:22, 10] libsmb/clikrb5.c:get_krb5_smb_session_key(509) Got KRB5 session key of length 16 [2005/07/14 22:34:22, 1] libads/ldap.c:ads_default_ou_string(1085) Failed while searching for: <WKGUID=AA312825768811D1ADED00C04FD8D5CD,dc=VW,dc=VKW,dc=TU-DRESDEN,dc=DE> [2005/07/14 22:34:22, 10] intl/lang_tdb.c:lang_tdb_init(135) lang_tdb_init: /usr/share/samba/de_DE:de:en_GB:en.msg: No such file or directory [2005/07/14 22:34:22, 2] utils/net.c:main(897) return code = -1 -- Mit freundlichen Gruessen Steffen Kolbe And...

...ache (MEMORY:net_ads) is valid until: (Fri, 27 May 2005 20:27:09 GMT - 1117250829) [2005/05/27 10:27:09, 10] libsmb/clikrb5.c:get_krb5_smb_session_key(509) Got KRB5 session key of length 16 [2005/05/27 10:27:09, 1] libads/ldap.c:ads_default_ou_string(1085) Failed while searching for: <WKGUID=AA312825768811D1ADED00C04FD8D5CD,dc=AD,dc=HOSTNAME,dc=COM> [2005/05/27 10:27:09, 10] intl/lang_tdb.c:lang_tdb_init(135) lang_tdb_init: /usr/pkg/samba-3.0.14a/lib/en_US.UTF-8.msg: No such file or directory ads_join_realm: Operations error [2005/05/27 10:27:09, 2] utils/net.c:main(897) return code = -1 root@itibm:/root# -- T...