thr3ads.net - samba - [Samba] ADS WKGUID error [May 2005]

If this information is useful, please help other people find it:
Share via:

Michael Andrewjeski

2005-May-31 22:00 UTC

[Samba] ADS WKGUID error

Hi List,

I'm wondering if someone can help me get past these errors Joining  an
ADS Domain, using samba 3.0.14a & kerberos 1.3.5.

When I look at the debug output from the join attempt, it almost seems
as though The join is looking for an cn or something from the AD that
doesn't exist. I'm not an 
Windows person and the AD admins are not around to help peep this out.

Can anyone take a look at the debug output below and point me in the
right direction?

I've included the compile strings for the samba, the klist output and
the net join Output from debug level 10.

Thanks in advance for your help.


compiled thusly:

./configure --prefix=/usr/pkg/samba-3.0.14a --with-ads  --with-smbmount
--with-krb5=base=/usr/pkg/kerberos

klist output:

/usr/pkg/kerberos/bin/klist -5 -f
Default principal: svcSAMBA@AD.HOSTNAME.COM

Valid starting     Expires            Service principal
05/27/05 09:53:21  05/27/05 19:53:27
krbtgt/AD.HOSTNAME.COM@AD.HOSTNAME.COM
        renew until 06/03/05 09:53:21, Flags: RI
05/27/05 10:25:42  05/27/05 19:53:27  sfinfra1$@AD.HOSTNAME.COM
        renew until 06/03/05 09:53:21, Flags: RO


The net join command:

root@itibm:/root# /usr/pkg/samba/bin/net ads join -U'svcSAMBA%XXXXXX'
-d10 [2005/05/27 10:27:09, 5] lib/debug.c:debug_dump_status(366)
  INFO: Current debug levels:
    all: True/10
    tdb: False/0
    printdrivers: False/0
    lanman: False/0
    smb: False/0
    rpc_parse: False/0
    rpc_srv: False/0
    rpc_cli: False/0
    passdb: False/0
    sam: False/0
    auth: False/0
    winbind: False/0
    vfs: False/0
    idmap: False/0
    quota: False/0
    acls: False/0
[2005/05/27 10:27:09, 3] param/loadparm.c:lp_load(3907)
  lp_load: refreshing parameters
[2005/05/27 10:27:09, 3] param/loadparm.c:init_globals(1321)
  Initialising global parameters
[2005/05/27 10:27:09, 3] param/params.c:pm_process(573)
  params.c:pm_process() - Processing configuration file
"/usr/pkg/samba-3.0.14a/lib/smb.conf"
[2005/05/27 10:27:09, 3] param/loadparm.c:do_section(3409)
  Processing section "[global]"
  doing parameter workgroup = AD
  doing parameter realm = AD.HOSTNAME.COM
  doing parameter security = ADS
  doing parameter map to guest = Bad User
  doing parameter password server = 209.87.220.50
  doing parameter realm = AD.HOSTNAME.COM
  doing parameter encrypt passwords = true
  doing parameter winbind uid = 10000-65000
  doing parameter winbind gid = 10000-65000
  doing parameter winbind cache time = 5
  doing parameter netbios name = itibm
[2005/05/27 10:27:09, 4] param/loadparm.c:handle_netbios_name(2754)
  handle_netbios_name: set global_myname to: ITIBM
  doing parameter workgroup = AD
  doing parameter server string = ITIBM
  doing parameter log file = /var/log/samba/log.%m
  doing parameter security = ADS
  doing parameter socket options = TCP_NODELAY SO_RCVBUF=8192
SO_SNDBUF=8192
  doing parameter local master = no
  doing parameter os level = 3
  doing parameter domain master = no
  doing parameter preferred master = no
  doing parameter name resolve order = wins lmhosts hosts bcast
  doing parameter wins server = 209.87.220.51
[2005/05/27 10:27:09, 4] param/loadparm.c:lp_load(3938)
  pm_process() returned Yes
[2005/05/27 10:27:09, 7] param/loadparm.c:lp_servicenumber(4048)
  lp_servicenumber: couldn't find homes
[2005/05/27 10:27:09, 10] param/loadparm.c:set_server_role(3856)
  set_server_role: role = ROLE_DOMAIN_MEMBER
[2005/05/27 10:27:09, 5] lib/iconv.c:smb_register_charset(103)
  Attempting to register new charset UCS-2LE
[2005/05/27 10:27:09, 5] lib/iconv.c:smb_register_charset(111)
  Registered charset UCS-2LE
[2005/05/27 10:27:09, 5] lib/iconv.c:smb_register_charset(103)
  Attempting to register new charset UTF-16LE
[2005/05/27 10:27:09, 5] lib/iconv.c:smb_register_charset(111)
  Registered charset UTF-16LE
[2005/05/27 10:27:09, 5] lib/iconv.c:smb_register_charset(103)
  Attempting to register new charset UCS-2BE
[2005/05/27 10:27:09, 5] lib/iconv.c:smb_register_charset(111)
  Registered charset UCS-2BE
[2005/05/27 10:27:09, 5] lib/iconv.c:smb_register_charset(103)
  Attempting to register new charset UTF-16BE
[2005/05/27 10:27:09, 5] lib/iconv.c:smb_register_charset(111)
  Registered charset UTF-16BE
[2005/05/27 10:27:09, 5] lib/iconv.c:smb_register_charset(103)
  Attempting to register new charset UTF8
[2005/05/27 10:27:09, 5] lib/iconv.c:smb_register_charset(111)
  Registered charset UTF8
[2005/05/27 10:27:09, 5] lib/iconv.c:smb_register_charset(103)
  Attempting to register new charset UTF-8
[2005/05/27 10:27:09, 5] lib/iconv.c:smb_register_charset(111)
  Registered charset UTF-8
[2005/05/27 10:27:09, 5] lib/iconv.c:smb_register_charset(103)
  Attempting to register new charset ASCII
[2005/05/27 10:27:09, 5] lib/iconv.c:smb_register_charset(111)
  Registered charset ASCII
[2005/05/27 10:27:09, 5] lib/iconv.c:smb_register_charset(103)
  Attempting to register new charset 646
[2005/05/27 10:27:09, 5] lib/iconv.c:smb_register_charset(111)
  Registered charset 646
[2005/05/27 10:27:09, 5] lib/iconv.c:smb_register_charset(103)
  Attempting to register new charset ISO-8859-1
[2005/05/27 10:27:09, 5] lib/iconv.c:smb_register_charset(111)
  Registered charset ISO-8859-1
[2005/05/27 10:27:09, 5] lib/iconv.c:smb_register_charset(103)
  Attempting to register new charset UCS2-HEX
[2005/05/27 10:27:09, 5] lib/iconv.c:smb_register_charset(111)
  Registered charset UCS2-HEX
[2005/05/27 10:27:09, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/05/27 10:27:09, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/05/27 10:27:09, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/05/27 10:27:09, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/05/27 10:27:09, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/05/27 10:27:09, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/05/27 10:27:09, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/05/27 10:27:09, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/05/27 10:27:09, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/05/27 10:27:09, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/05/27 10:27:09, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/05/27 10:27:09, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/05/27 10:27:09, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/05/27 10:27:09, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/05/27 10:27:09, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/05/27 10:27:09, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/05/27 10:27:09, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/05/27 10:27:09, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/05/27 10:27:09, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/05/27 10:27:09, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/05/27 10:27:09, 5] lib/util.c:init_names(256)
  Netbios name list:-
  my_netbios_names[0]="ITIBM"
[2005/05/27 10:27:09, 2] lib/interface.c:add_interface(81)
  added interface ip=172.16.211.151 bcast=172.16.211.255
nmask=255.255.255.0 [2005/05/27 10:27:09, 6]
libads/ldap.c:ads_find_dc(214)
  ads_find_dc: looking for realm 'AD.HOSTNAME.COM'
[2005/05/27 10:27:09, 8] libsmb/namequery.c:get_sorted_dc_list(1433)
  get_sorted_dc_list: attempting lookup using [ads]
[2005/05/27 10:27:09, 10]
libsmb/namequery.c:remove_duplicate_addrs2(320)
  remove_duplicate_addrs2: looking for duplicate address/port pairs
[2005/05/27 10:27:09, 4] libsmb/namequery.c:get_dc_list(1406)
  get_dc_list: returning 1 ip addresses in an ordered list [2005/05/27
10:27:09, 4] libsmb/namequery.c:get_dc_list(1407)
  get_dc_list: 209.87.220.50:389
[2005/05/27 10:27:09, 5] libads/ldap.c:ads_try_connect(123)
  ads_try_connect: trying ldap server '209.87.220.50' port 389
[2005/05/27 10:27:09, 3] libads/ldap.c:ads_connect(285)
  Connected to LDAP server 209.87.220.50
[2005/05/27 10:27:09, 3] libads/ldap.c:ads_server_info(2469)
  got ldap server name sfinfra1@AD.HOSTNAME.COM, using bind path:
dc=AD,dc=HOSTNAME,dc=COM [2005/05/27 10:27:09, 4]
libads/ldap.c:ads_server_info(2475)
  time offset is 0 seconds
[2005/05/27 10:27:09, 4] libads/sasl.c:ads_sasl_bind(447)
  Found SASL mechanism GSS-SPNEGO
[2005/05/27 10:27:09, 3] libads/sasl.c:ads_sasl_spnego_bind(204)
  ads_sasl_spnego_bind: got OID=1 2 840 48018 1 2 2
[2005/05/27 10:27:09, 3] libads/sasl.c:ads_sasl_spnego_bind(204)
  ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2 [2005/05/27
10:27:09, 3] libads/sasl.c:ads_sasl_spnego_bind(204)
  ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2 3 [2005/05/27
10:27:09, 3] libads/sasl.c:ads_sasl_spnego_bind(204)
  ads_sasl_spnego_bind: got OID=1 3 6 1 4 1 311 2 2 10 [2005/05/27
10:27:09, 3] libads/sasl.c:ads_sasl_spnego_bind(211)
  ads_sasl_spnego_bind: got server principal name
=sfinfra1$@AD.HOSTNAME.COM [2005/05/27 10:27:09, 3]
libsmb/clikrb5.c:ads_krb5_mk_req(381)
  ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache
found) [2005/05/27 10:27:09, 3]
libsmb/clikrb5.c:ads_cleanup_expired_creds(318)
  Ticket in ccache[MEMORY:net_ads] expiration Fri, 27 May 2005 20:27:09
GMT [2005/05/27 10:27:09, 10] libsmb/clikrb5.c:ads_krb5_mk_req(408)
  ads_krb5_mk_req: Ticket (sfinfra1$@AD.HOSTNAME.COM) in ccache
(MEMORY:net_ads) is valid until: (Fri, 27 May 2005 20:27:09 GMT -
1117250829) [2005/05/27 10:27:09, 10]
libsmb/clikrb5.c:get_krb5_smb_session_key(509)
  Got KRB5 session key of length 16
[2005/05/27 10:27:09, 1] libads/ldap.c:ads_default_ou_string(1085)
  Failed while searching for:
<WKGUID=AA312825768811D1ADED00C04FD8D5CD,dc=AD,dc=HOSTNAME,dc=COM>
[2005/05/27 10:27:09, 10] intl/lang_tdb.c:lang_tdb_init(135)
  lang_tdb_init: /usr/pkg/samba-3.0.14a/lib/en_US.UTF-8.msg: No such
file or directory
ads_join_realm: Operations error
[2005/05/27 10:27:09, 2] utils/net.c:main(897)
  return code = -1
root@itibm:/root#
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

M. D. Parker

2005-May-31 22:21 UTC

head link

[Samba] MultiHomed public/private Problem

I have a system that is multi-homed on one "private" network and one
"public" network.

My configuration file has the following commands:

.
.
.
bind interfaces only = yes
interfaces = eth0 eth1 lo		;; eth0=private - eth1=public
.
.
.
Our network has a single WINS server and records for the host BOTH the
private and public addresses.  For several hundred computers in our network
this seems to cause no problem, however has affected one computer which gets
the private (i.e. 192.168) address instead of the public address.  Changing
the interfaces order does NOT help.
Mapping via DNS works ok (i.e. \\fqd.sss.com\share).

Samba needs to work on the private interface as well as the public
interface.  One person in our tech group basically feels that the existence
of the private information on the WINS server is the real problem and is
basically demanding that the private IP address be removed (or not
communicated) to the WINS server. 

Any ideas if it is possible to inhibit the broadcast of the private IP
address but still have samba functional on the private network?  

Is this a bug in the samba code somehow for the one computer that is not
working the same as the others?

Thanks

=========================================
M. D. Parker
Systems Administrator
General Atomics / Electromagnetic Systems
+1 858 455 2877
mike.parker@ga.com

Possibly Parallel Threads

Search for more possibly parallel threads

samba - May 2005 - ADS WKGUID error

[Samba] ADS WKGUID error

[Samba] MultiHomed public/private Problem

Possibly Parallel Threads