thr3ads.net - samba - [Samba] kerberos_kinit_password: Decrypt integrity check failed [Aug 2005]

If this information is useful, please help other people find it:
Share via:

P V

2005-Aug-16 21:43 UTC

[Samba] kerberos_kinit_password: Decrypt integrity check failed

Please, somebody can help me?

   When I start samba I get this error en log.smbd:
----------------------------------------------------
[2005/08/16 16:30:01, 0] smbd/server.c:main(802)
  smbd version 3.0.20rc1 started.
  Copyright Andrew Tridgell and the Samba Team
1992-2004
[2005/08/16 16:30:01, 0]
libads/kerberos.c:ads_kinit_password(146)
  kerberos_kinit_password host/HOST@DOMAIN.COM.MX
failed: Decrypt integrity che
ck failed
-----------------------------------------------------

   In log.wb-WORKGROUP
-----------------------------------------------------
[2005/08/16 16:30:09, 0]
libsmb/cliconnect.c:cli_session_setup_spnego(762)
  Kinit failed: Client not found in Kerberos database
[2005/08/16 16:30:09, 1]
nsswitch/winbindd_cm.c:cm_prepare_connection(331)
  failed tcon_X with NT_STATUS_ACCESS_DENIED
[2005/08/16 16:30:09, 0] lib/fault.c:fault_report(36)
=====================================================[2005/08/16 16:30:09, 0]
lib/fault.c:fault_report(37)
  INTERNAL ERROR: Signal 11 in pid 699 (3.0.20rc1)
  Please read the appendix Bugs of the Samba HOWTO
collection
[2005/08/16 16:30:09, 0] lib/fault.c:fault_report(39)
======================================================[2005/08/16
16:30:09, 0] lib/util.c:smb_panic2(1548)
  PANIC: internal error
[2005/08/16 16:30:12, 0] libsmb/cliconnect.c:
-----------------------------------------------------

   My smb.conf:
-----------------------------------------------------
    workgroup = WORKGROUP
    netbios name = HOST

    idmap uid = 10000-20000
    idmap gid = 10000-20000
    winbind enum users = yes
    winbind enum groups = yes
    template homedir = /home/%D/%U
    template shell = /bin/bash

    security = ads
    encrypt passwords = yes
    realm = DOMAIN.COM.MX
-----------------------------------------------------

    Any idea will be appreciated.


		
____________________________________________________
Start your day with Yahoo! - make it your home page 
http://www.yahoo.com/r/hs

P V

2005-Aug-16 22:33 UTC

head link

[Samba] kerberos_kinit_password: Decrypt integrity check failed

Thank you Ken. 
   I ran kinit with users in DOMAIN, and something
like host/HOST@DOMAIN.COM.MX and all worked fine, not
errors.
   This is my krb5.conf file. Would you help me?
   Thank you very much.

--------------------------------------------------
[libdefaults]
        ticket_lifetime = 24000
        default_realm = DOMAIN.COM.MX
        default_tgs_enctypes = des-cbc-crc des-cbc-md5
        default_tkt_enctypes = des-cbc-crc des-cbc-md5
        forwardable = true
        proxiable = true
        dns_lookup_realm = true
        dns_lookup_kdc = true

[realms]
       DOMAIN.COM.MX = {
                kdc = hostdc.domain.com.mx:88
                kdc = hostdc2.domain.com.mx:88
                admin_server = hostdc.domain.com.mx
                default_domain = domain.com.mx
        }

[domain_realm]
        .domain.com.mx = DOMAIN.COM.MX
        domain.com.mx = DOMAIN.COM.MX
        .netbiosdomain_name = DOMAIN.COM.MX
        netbiosdomain_name = DOMAIN.COM.MX
        host  = host.domain.com.mx
        HOST  = host.domain.com.mx

[logging]
        default = FILE:/var/krb5/kdc.log
        kdc = FILE:/var/krb5/kdc.log
        admin_server = FILE:/var/krb5/kdc.log
        kdc_rotate = {
                period = 1d
                versions = 10
        }

[kdc]
        profile = /var/kerberos/krb5kdc/kdc.conf

[appdefaults]
        pam = {
                debug = false
                ticket_lifetime = 36000
                renew_lifetime = 36000
                forwardable = true
                krb4_convert = false
        }

#       kinit = {
#               renewable = true
#               forwardable= true
#       }

--- Ken Nakamura <knakamur@tripwire.com> wrote:
> sounds like you need kerberos 5 installed and
> configured properly.  check
> your /etc/krb5.conf, or post it.
> 
> also, here is a great howto:
>
http://gentoo-wiki.com/HOWTO_Adding_a_Samba_Server_into_an_existing_AD_Domai> n
> 
> hope this helps,
> -k
> 
> 
> On 8/16/05 2:42 PM, "P V"
> <ditirambo_farfulla@yahoo.com> wrote:
> 
> >    Please, somebody can help me?
> > 
> >    When I start samba I get this error en
> log.smbd:
> >
> ----------------------------------------------------
> > [2005/08/16 16:30:01, 0] smbd/server.c:main(802)
> >   smbd version 3.0.20rc1 started.
> >   Copyright Andrew Tridgell and the Samba Team
> > 1992-2004
> > [2005/08/16 16:30:01, 0]
> > libads/kerberos.c:ads_kinit_password(146)
> >   kerberos_kinit_password host/HOST@DOMAIN.COM.MX
> > failed: Decrypt integrity che
> > ck failed
> >
>
-----------------------------------------------------> > 
> >    In log.wb-WORKGROUP
> >
>
-----------------------------------------------------> > [2005/08/16 16:30:09, 0]
> > libsmb/cliconnect.c:cli_session_setup_spnego(762)
> >   Kinit failed: Client not found in Kerberos
> database
> > [2005/08/16 16:30:09, 1]
> > nsswitch/winbindd_cm.c:cm_prepare_connection(331)
> >   failed tcon_X with NT_STATUS_ACCESS_DENIED
> > [2005/08/16 16:30:09, 0]
> lib/fault.c:fault_report(36)
> >
>=====================================================> > [2005/08/16
16:30:09, 0]> lib/fault.c:fault_report(37)
> >   INTERNAL ERROR: Signal 11 in pid 699 (3.0.20rc1)
> >   Please read the appendix Bugs of the Samba HOWTO
> > collection
> > [2005/08/16 16:30:09, 0]
> lib/fault.c:fault_report(39)
> >
>
======================================================[2005/08/16> > 16:30:09, 0] lib/util.c:smb_panic2(1548)
> >   PANIC: internal error
> > [2005/08/16 16:30:12, 0] libsmb/cliconnect.c:
> >
>
-----------------------------------------------------> > 
> >    My smb.conf:
> >
>
-----------------------------------------------------> >     workgroup = WORKGROUP
> >     netbios name = HOST
> > 
> >     idmap uid = 10000-20000
> >     idmap gid = 10000-20000
> >     winbind enum users = yes
> >     winbind enum groups = yes
> >     template homedir = /home/%D/%U
> >     template shell = /bin/bash
> > 
> >     security = ads
> >     encrypt passwords = yes
> >     realm = DOMAIN.COM.MX
> >
>
-----------------------------------------------------> > 
> >     Any idea will be appreciated.
> > 
> > 
> > 
> >
> ____________________________________________________
> > Start your day with Yahoo! - make it your home
> page
> > http://www.yahoo.com/r/hs
> >  
> 
> 
> 

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com

Gerald (Jerry) Carter

2005-Aug-17 03:19 UTC

head link

[Samba] kerberos_kinit_password: Decrypt integrity check failed

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

P V wrote:> -----------------------------------------------------
> [2005/08/16 16:30:09, 0]
> libsmb/cliconnect.c:cli_session_setup_spnego(762)
>   Kinit failed: Client not found in Kerberos database
> [2005/08/16 16:30:09, 1]
> nsswitch/winbindd_cm.c:cm_prepare_connection(331)
>   failed tcon_X with NT_STATUS_ACCESS_DENIED
> [2005/08/16 16:30:09, 0] lib/fault.c:fault_report(36)
> =====================================================> [2005/08/16
16:30:09, 0] lib/fault.c:fault_report(37)
>   INTERNAL ERROR: Signal 11 in pid 699 (3.0.20rc1)
>   Please read the appendix Bugs of the Samba HOWTO
> collection
> [2005/08/16 16:30:09, 0] lib/fault.c:fault_report(39)
> ======================================================[2005/08/16
> 16:30:09, 0] lib/util.c:smb_panic2(1548)
>   PANIC: internal error
> [2005/08/16 16:30:12, 0] libsmb/cliconnect.c:
> -----------------------------------------------------
You've got kerberos problems for one thing?  Are you on Fedora
Core 4 by chance?  There's been some problems reported with
the krb5-1.4.1 rpms in that distro (actually its in e2fsprogs
apparently but the crash looks like it is in the krb5 libs).





cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDAqxrIR7qMdg1EfYRAsVJAJ4twwWLY4zJ8poKZaUGVz8SBoSvfACeO9zr
h8HpEKwawjq6hIMGH0hPgoM=P+f2
-----END PGP SIGNATURE-----

Reasonably Related Threads

Search for more apparently analagous threads

samba - Aug 2005 - kerberos_kinit_password: Decrypt integrity check failed

[Samba] kerberos_kinit_password: Decrypt integrity check failed

[Samba] kerberos_kinit_password: Decrypt integrity check failed

[Samba] kerberos_kinit_password: Decrypt integrity check failed

Reasonably Related Threads