After migrating from 3.0.26a to 3.0.30 I cannot join my AD member server
to the domain anymore:
I get a DCERPC_FAULT_INVALID_TAG.
As I didn't change my Windows 2000 SBS Server, this looks like a new
feature in Samba 3.0.30.
Do I have to also migrate my Heimdal - if so, which version is required?
Kind regards,
Jens
P.S: Is there a way to find out the code changes in Samba 3.0.30?
I didn't find a 3.0.30 tag in the tags nor in the branches.
The latest tag is 3.0.26a. This makes it somewhat difficult to figure
out, what could be different.
Or am I looking in the wrong places in the repository?
Updating http://www.samba.org/samba/subversion.html would be nice,
as the "major current branches" indicated there do not exist.
P.P.S: Log and Configuration:
-------------------------------------------------------------------------
Log on level 10 looks like this:
net ads join -d 10 -w $WORKGROUP -U$Administrator$password -s
"/etc/config/smb.conf"
-------------------------------------------------------------------------
[2008/06/04 15:16:13, 10] lib/util.c:dump_data(2264)
[000] 00 05 00 03 03 10 00 00 00 20 00 00 00 0B 00 00 ........ . ......
[010] 00 00 00 00 00 00 00 00 00 06 00 00 1C 00 00 00 ........ ........
[020] 00 .
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_debug(84)
000000 smb_io_rpc_hdr rpc_hdr
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint8(616)
0000 major : 05
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint8(616)
0001 minor : 00
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint8(616)
0002 pkt_type : 03
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint8(616)
0003 flags : 03
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint8(616)
0004 pack_type0: 10
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint8(616)
0005 pack_type1: 00
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint8(616)
0006 pack_type2: 00
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint8(616)
0007 pack_type3: 00
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint16(681)
0008 frag_len : 0020
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint16(681)
000a auth_len : 0000
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint32(710)
000c call_id : 0000000b
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_debug(84)
000010 smb_io_rpc_hdr_resp rpc_hdr_resp
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint32(710)
0010 alloc_hint: 00000000
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint16(681)
0014 context_id: 0000
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint8(616)
0016 cancel_ct : 00
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint8(616)
0017 reserved : 00
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_debug(84)
000018 smb_io_rpc_hdr_fault fault
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_dcerpc_status(799)
0018 status : DCERPC_FAULT_INVALID_TAG
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint32(710)
001c reserved: 00000000
[2008/06/04 15:16:13, 1]
rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(625)
cli_pipe_validate_current_pdu: RPC fault code
DCERPC_FAULT_INVALID_TAG received from remote machine sbs2000.domain.
test pipe \samr fnum 0x4005!
[2008/06/04 15:16:13, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843)
rpc_api_pipe: got PDU len of 32 at offset 0
[2008/06/04 15:16:13, 10] intl/lang_tdb.c:lang_tdb_init(138)
lang_tdb_init: /lib/de_DE.msg: No such file or directory
Failed to set password for machine account (NT code 0x1c000006)
[2008/06/04 15:16:13, 6] libsmb/clientgen.c:write_socket(152)
write_socket(7,45)
[2008/06/04 15:16:13, 6] libsmb/clientgen.c:write_socket(155)
write_socket(7,45) wrote 45
[2008/06/04 15:16:13, 10]
lib/util_sock.c:read_smb_length_return_keepalive(623)
got smb length of 35
[2008/06/04 15:16:13, 5] lib/util.c:show_msg(484)
[2008/06/04 15:16:13, 5] lib/util.c:show_msg(494)
size=35
smb_com=0x4
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=18439
smb_pid=6300
smb_uid=32770
smb_mid=18
smt_wct=0
smb_bcc=0
[2008/06/04 15:16:13, 10] libsmb/clientgen.c:cli_rpc_pipe_close(394)
cli_rpc_pipe_close: closed pipe \samr to machine sbs2000.domain.test
[2008/06/04 15:16:13, 6] libsmb/clientgen.c:write_socket(152)
write_socket(7,39)
[2008/06/04 15:16:13, 6] libsmb/clientgen.c:write_socket(155)
write_socket(7,39) wrote 39
[2008/06/04 15:16:13, 10]
lib/util_sock.c:read_smb_length_return_keepalive(623)
got smb length of 35
[2008/06/04 15:16:13, 5] lib/util.c:show_msg(484)
[2008/06/04 15:16:13, 5] lib/util.c:show_msg(494)
size=35
smb_com=0x71
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=18439
smb_pid=6300
smb_uid=32770
smb_mid=19
smt_wct=0
smb_bcc=0
[2008/06/04 15:16:13, 1] utils/net_ads.c:net_ads_join(1548)
call of net_join_domain failed: NT code 0x1c000006
[2008/06/04 15:16:13, 2] utils/net.c:main(1066)
return code = -1
Failed to join domain: NT code 0x1c000006
-------------------------------------------------------------------------
This is my smb.conf
-------------------------------------------------------------------------
[global]
dos charset = ISO-8859-1
unix charset = ISO-8859-1
display charset = ISO-8859-1
workgroup = DOMAIN
realm = DOMAIN.TEST
server string = NASdrive
interfaces = ixp0
security = ADS
allow trusted domains = No
password server = sbs2000.domain.test
private dir = /var/lib/adsamba/private
passdb backend = tdbsam
guest account = samba
log level = 10
log file = smblog.ad
max log size = 0
name resolve order = wins bcast host
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE
SO_RCVBUF=8192 SO_SNDBUF=8192
load printers = No
show add printer wizard = No
preferred master = No
local master = No
domain master = No
wins server = 192.168.1.4
idmap uid = 1000-60000
idmap gid = 1000-60000
winbind enum users = Yes
winbind enum groups = Yes
winbind offline logon = Yes
admin users = DOMAIN\\Administrator
ea support = Yes
Guenther Deschner
2008-Jun-04 17:49 UTC
[Samba] Can't join AD anymore after migration to 3.0.30
Jens Nissen wrote:> After migrating from 3.0.26a to 3.0.30 I cannot join my AD member server > to the domain anymore: > I get a DCERPC_FAULT_INVALID_TAG. > As I didn't change my Windows 2000 SBS Server, this looks like a new > feature in Samba 3.0.30.You're probably not running the latest SP on the SBS server. I could only reproduce your problem with Windows 2000 GA version (no SPs installed at all). We'll add fallback code for the next release, but you should really consider upgrading to the lastest SP. Guenther -- G?nther Deschner GPG-ID: 8EE11688 Red Hat gdeschner@redhat.com Samba Team gd@samba.org
Clayton Hill
2008-Jun-04 23:06 UTC
[Samba] Can't join windows 2008 AD with 3.0.30 "Failed to join domain: Improperly formed account name"
Hi folks,
My first post here after trolling for a while.
Here is the issue:
I can't join a Windows 2008 Server Active Directory with 3.0.30.
"Failed to join domain: Improperly formed account name"
Judging from the release notes from 3.0.29 etc this was fixed...
Am I incorrect in this assumption? Perhaps I have missed a new
configuration parameter?
Are the fixes being implemented incrementally -- and if so, what should
I be looking for in future release notes that tells me this is
completely finished and I can join my 2008 domain?
Regards,
-Clayton H.
Also, here is my debug level 10 output from a domain join:
================================================================================================================A3-A1000007:/etc/samba
# net ads join -U administrator%password -d 10
[2008/06/04 15:44:53, 5] lib/debug.c:debug_dump_status(391)
INFO: Current debug levels:
all: True/10
tdb: False/0
printdrivers: False/0
lanman: False/0
smb: False/0
rpc_parse: False/0
rpc_srv: False/0
rpc_cli: False/0
passdb: False/0
sam: False/0
auth: False/0
winbind: False/0
vfs: False/0
idmap: False/0
quota: False/0
acls: False/0
locking: False/0
msdfs: False/0
dmapi: False/0
[2008/06/04 15:44:53, 3] param/loadparm.c:lp_load(5064)
lp_load: refreshing parameters
[2008/06/04 15:44:53, 3] param/loadparm.c:init_globals(1446)
Initialising global parameters
[2008/06/04 15:44:53, 3] param/params.c:pm_process(572)
params.c:pm_process() - Processing configuration file
"/etc/samba/smb.conf"
[2008/06/04 15:44:53, 3] param/loadparm.c:do_section(3803)
Processing section "[global]"
doing parameter workgroup = qa2008
doing parameter server string = A3-A1000007 192.168.168.33
doing parameter os level = 24
doing parameter domain master = no
doing parameter local master = no
doing parameter preferred master = yes
doing parameter encrypt passwords = yes
doing parameter level2 oplocks = yes
doing parameter security = ads
doing parameter password server = *
doing parameter wins server doing parameter inherit acls = yes
doing parameter map acl inherit = yes
doing parameter log file = /var/log/samba/log%m
doing parameter dos filemode = yes
doing parameter printing = BSD
doing parameter printcap name = /dev/null
doing parameter admin users = webadmin
doing parameter username map = /etc/samba/smbusers
doing parameter winbind enum users = no
doing parameter winbind enum groups = no
doing parameter map to guest = bad user
doing parameter include = /etc/samba/smb.conf.idmap_domains
[2008/06/04 15:44:53, 2] param/loadparm.c:handle_include(3215)
Can't find include file /etc/samba/smb.conf.idmap_domains
doing parameter include = /etc/samba/smb.conf.idmap_config
[2008/06/04 15:44:53, 2] param/loadparm.c:handle_include(3215)
Can't find include file /etc/samba/smb.conf.idmap_config
doing parameter include = /etc/samba/smb.conf.ads
[2008/06/04 15:44:53, 3] param/params.c:pm_process(572)
params.c:pm_process() - Processing configuration file
"/etc/samba/smb.conf.ads"
doing parameter realm = QA2008.EDU
doing parameter include = /etc/samba/smb.conf.global
[2008/06/04 15:44:53, 3] param/params.c:pm_process(572)
params.c:pm_process() - Processing configuration file
"/etc/samba/smb.conf.global"
doing parameter include = /etc/samba/shares.conf
[2008/06/04 15:44:53, 3] param/params.c:pm_process(572)
params.c:pm_process() - Processing configuration file
"/etc/samba/shares.conf"
[2008/06/04 15:44:53, 4] param/loadparm.c:lp_load(5095)
pm_process() returned Yes
[2008/06/04 15:44:53, 7] param/loadparm.c:lp_servicenumber(5233)
lp_servicenumber: couldn't find homes
[2008/06/04 15:44:53, 10] param/loadparm.c:set_server_role(4339)
set_server_role: role = ROLE_DOMAIN_MEMBER
[2008/06/04 15:44:53, 5] lib/iconv.c:smb_register_charset(105)
Attempting to register new charset UCS-2LE
[2008/06/04 15:44:53, 5] lib/iconv.c:smb_register_charset(113)
Registered charset UCS-2LE
[2008/06/04 15:44:53, 5] lib/iconv.c:smb_register_charset(105)
Attempting to register new charset UTF-16LE
[2008/06/04 15:44:53, 5] lib/iconv.c:smb_register_charset(113)
Registered charset UTF-16LE
[2008/06/04 15:44:53, 5] lib/iconv.c:smb_register_charset(105)
Attempting to register new charset UCS-2BE
[2008/06/04 15:44:53, 5] lib/iconv.c:smb_register_charset(113)
Registered charset UCS-2BE
[2008/06/04 15:44:53, 5] lib/iconv.c:smb_register_charset(105)
Attempting to register new charset UTF-16BE
[2008/06/04 15:44:53, 5] lib/iconv.c:smb_register_charset(113)
Registered charset UTF-16BE
[2008/06/04 15:44:53, 5] lib/iconv.c:smb_register_charset(105)
Attempting to register new charset UTF8
[2008/06/04 15:44:53, 5] lib/iconv.c:smb_register_charset(113)
Registered charset UTF8
[2008/06/04 15:44:53, 5] lib/iconv.c:smb_register_charset(105)
Attempting to register new charset UTF-8
[2008/06/04 15:44:53, 5] lib/iconv.c:smb_register_charset(113)
Registered charset UTF-8
[2008/06/04 15:44:53, 5] lib/iconv.c:smb_register_charset(105)
Attempting to register new charset ASCII
[2008/06/04 15:44:53, 5] lib/iconv.c:smb_register_charset(113)
Registered charset ASCII
[2008/06/04 15:44:53, 5] lib/iconv.c:smb_register_charset(105)
Attempting to register new charset 646
[2008/06/04 15:44:53, 5] lib/iconv.c:smb_register_charset(113)
Registered charset 646
[2008/06/04 15:44:53, 5] lib/iconv.c:smb_register_charset(105)
Attempting to register new charset ISO-8859-1
[2008/06/04 15:44:53, 5] lib/iconv.c:smb_register_charset(113)
Registered charset ISO-8859-1
[2008/06/04 15:44:53, 5] lib/iconv.c:smb_register_charset(105)
Attempting to register new charset UCS2-HEX
[2008/06/04 15:44:53, 5] lib/iconv.c:smb_register_charset(113)
Registered charset UCS2-HEX
[2008/06/04 15:44:53, 5] lib/charcnv.c:charset_name(82)
Substituting charset 'UTF-8' for LOCALE
[2008/06/04 15:44:53, 5] lib/charcnv.c:charset_name(82)
Substituting charset 'UTF-8' for LOCALE
[2008/06/04 15:44:53, 5] lib/charcnv.c:charset_name(82)
Substituting charset 'UTF-8' for LOCALE
[2008/06/04 15:44:53, 5] lib/charcnv.c:charset_name(82)
Substituting charset 'UTF-8' for LOCALE
[2008/06/04 15:44:53, 5] lib/charcnv.c:charset_name(82)
Substituting charset 'UTF-8' for LOCALE
[2008/06/04 15:44:53, 5] lib/charcnv.c:charset_name(82)
Substituting charset 'UTF-8' for LOCALE
[2008/06/04 15:44:53, 5] lib/charcnv.c:charset_name(82)
Substituting charset 'UTF-8' for LOCALE
[2008/06/04 15:44:53, 5] lib/charcnv.c:charset_name(82)
Substituting charset 'UTF-8' for LOCALE
[2008/06/04 15:44:53, 5] lib/charcnv.c:charset_name(82)
Substituting charset 'UTF-8' for LOCALE
[2008/06/04 15:44:53, 5] lib/charcnv.c:charset_name(82)
Substituting charset 'UTF-8' for LOCALE
[2008/06/04 15:44:53, 5] lib/charcnv.c:charset_name(82)
Substituting charset 'UTF-8' for LOCALE
[2008/06/04 15:44:53, 5] lib/charcnv.c:charset_name(82)
Substituting charset 'UTF-8' for LOCALE
[2008/06/04 15:44:53, 5] lib/charcnv.c:charset_name(82)
Substituting charset 'UTF-8' for LOCALE
[2008/06/04 15:44:53, 5] lib/charcnv.c:charset_name(82)
Substituting charset 'UTF-8' for LOCALE
[2008/06/04 15:44:53, 5] lib/charcnv.c:charset_name(82)
Substituting charset 'UTF-8' for LOCALE
[2008/06/04 15:44:53, 5] lib/charcnv.c:charset_name(82)
Substituting charset 'UTF-8' for LOCALE
[2008/06/04 15:44:53, 5] lib/charcnv.c:charset_name(82)
Substituting charset 'UTF-8' for LOCALE
[2008/06/04 15:44:53, 5] lib/charcnv.c:charset_name(82)
Substituting charset 'UTF-8' for LOCALE
[2008/06/04 15:44:53, 5] lib/charcnv.c:charset_name(82)
Substituting charset 'UTF-8' for LOCALE
[2008/06/04 15:44:53, 5] lib/charcnv.c:charset_name(82)
Substituting charset 'UTF-8' for LOCALE
[2008/06/04 15:44:53, 5] lib/charcnv.c:charset_name(82)
Substituting charset 'UTF-8' for LOCALE
[2008/06/04 15:44:53, 5] lib/charcnv.c:charset_name(82)
Substituting charset 'UTF-8' for LOCALE
[2008/06/04 15:44:53, 5] lib/charcnv.c:charset_name(82)
Substituting charset 'UTF-8' for LOCALE
[2008/06/04 15:44:53, 5] lib/charcnv.c:charset_name(82)
Substituting charset 'UTF-8' for LOCALE
[2008/06/04 15:44:53, 5] lib/util.c:init_names(287)
Netbios name list:-
my_netbios_names[0]="A3-A1000007"
[2008/06/04 15:44:53, 2] lib/interface.c:add_interface(81)
added interface ip=192.168.168.33 bcast=192.168.168.255
nmask=255.255.255.0
[2008/06/04 15:44:53, 2] lib/interface.c:add_interface(81)
added interface ip=10.10.10.10 bcast=10.10.10.255 nmask=255.255.255.0
[2008/06/04 15:44:53, 5] lib/gencache.c:gencache_init(61)
Opening cache file at /var/lib/samba/gencache.tdb
[2008/06/04 15:44:53, 10] lib/gencache.c:gencache_get(226)
Returning valid cache entry: key = AD_SITENAME/DOMAIN/QA2008.EDU,
value = Default-First-Site-Name, timeout = Sat Feb 6 22:28:15 2106
[2008/06/04 15:44:53, 5] libads/dns.c:sitename_fetch(709)
sitename_fetch: Returning sitename for QA2008.EDU:
"Default-First-Site-Name"
[2008/06/04 15:44:53, 4] libsmb/namequery_dc.c:ads_dc_name(73)
ads_dc_name: domain=QA2008
[2008/06/04 15:44:53, 10] lib/gencache.c:gencache_get(226)
Returning valid cache entry: key = AD_SITENAME/DOMAIN/QA2008.EDU,
value = Default-First-Site-Name, timeout = Sat Feb 6 22:28:15 2106
[2008/06/04 15:44:53, 5] libads/dns.c:sitename_fetch(709)
sitename_fetch: Returning sitename for QA2008.EDU:
"Default-First-Site-Name"
[2008/06/04 15:44:53, 6] libads/ldap.c:ads_find_dc(309)
ads_find_dc: looking for realm 'QA2008.EDU'
[2008/06/04 15:44:53, 8] libsmb/namequery.c:get_sorted_dc_list(1626)
get_sorted_dc_list: attempting lookup for name QA2008.EDU (sitename
Default-First-Site-Name) using [ads]
[2008/06/04 15:44:53, 10] lib/gencache.c:gencache_get(226)
Returning valid cache entry: key = SAF/DOMAIN/QA2008.EDU, value
192.168.168.80, timeout = Wed Jun 4 15:59:31 2008
[2008/06/04 15:44:53, 5] libsmb/namequery.c:saf_fetch(136)
saf_fetch: Returning "192.168.168.80" for "QA2008.EDU"
domain
[2008/06/04 15:44:53, 3] libsmb/namequery.c:get_dc_list(1489)
get_dc_list: preferred server list: "192.168.168.80, *"
[2008/06/04 15:44:53, 10] libsmb/namequery.c:internal_resolve_name(1166)
internal_resolve_name: looking up QA2008.EDU#1c (sitename
Default-First-Site-Name)
[2008/06/04 15:44:53, 10] lib/gencache.c:gencache_get(226)
Returning valid cache entry: key = NBT/QA2008.EDU#1C, value
192.168.168.80:389, timeout = Wed Jun 4 15:55:31 2008
[2008/06/04 15:44:53, 5] libsmb/namecache.c:namecache_fetch(214)
name QA2008.EDU#1C found.
[2008/06/04 15:44:53, 8] libsmb/namequery.c:get_dc_list(1505)
Adding 1 DC's from auto lookup
[2008/06/04 15:44:53, 10] lib/gencache.c:gencache_get(226)
Returning valid cache entry: key = AD_SITENAME/DOMAIN/QA2008.EDU,
value = Default-First-Site-Name, timeout = Sat Feb 6 22:28:15 2106
[2008/06/04 15:44:53, 5] libads/dns.c:sitename_fetch(709)
sitename_fetch: Returning sitename for QA2008.EDU:
"Default-First-Site-Name"
[2008/06/04 15:44:53, 10]
libsmb/namequery.c:remove_duplicate_addrs2(435)
remove_duplicate_addrs2: looking for duplicate address/port pairs
[2008/06/04 15:44:53, 4] libsmb/namequery.c:get_dc_list(1599)
get_dc_list: returning 1 ip addresses in an ordered list
[2008/06/04 15:44:53, 4] libsmb/namequery.c:get_dc_list(1600)
get_dc_list: 192.168.168.80:389
[2008/06/04 15:44:53, 5] libads/ldap.c:ads_try_connect(195)
ads_try_connect: sending CLDAP request to 192.168.168.80 (realm:
QA2008.EDU)
[2008/06/04 15:44:53, 10] libads/dns.c:sitename_store(670)
sitename_store: realm = [QA2008.EDU], sitename [Default-First-Site-Name],
expire = [4294967295]
[2008/06/04 15:44:53, 10] lib/gencache.c:gencache_set(140)
Adding cache entry with key = AD_SITENAME/DOMAIN/QA2008.EDU; value
Default-First-Site-Name and timeout = (null) (-1212619494 seconds ahead)
[2008/06/04 15:44:53, 3] libads/ldap.c:ads_connect(420)
Connected to LDAP server 192.168.168.80
[2008/06/04 15:44:53, 10] lib/gencache.c:gencache_get(226)
Returning valid cache entry: key = AD_SITENAME/DOMAIN/QA2008.EDU,
value = Default-First-Site-Name, timeout = Sat Feb 6 22:28:15 2106
[2008/06/04 15:44:53, 5] libads/dns.c:sitename_fetch(709)
sitename_fetch: Returning sitename for QA2008.EDU:
"Default-First-Site-Name"
[2008/06/04 15:44:53, 10] libads/ldap.c:ads_closest_dc(164)
ads_closest_dc: ADS_CLOSEST flag set
[2008/06/04 15:44:53, 10]
libads/kerberos.c:create_local_private_krb5_conf_for_domain(669)
create_local_private_krb5_conf_for_domain: fname
/var/lib/samba/smb_krb5/krb5.conf.QA2008, realm = QA2008.EDU, domain QA2008
[2008/06/04 15:44:53, 10] lib/gencache.c:gencache_get(226)
Returning valid cache entry: key = SAF/DOMAIN/QA2008.EDU, value
192.168.168.80, timeout = Wed Jun 4 15:59:31 2008
[2008/06/04 15:44:53, 5] libsmb/namequery.c:saf_fetch(136)
saf_fetch: Returning "192.168.168.80" for "QA2008.EDU"
domain
[2008/06/04 15:44:53, 3] libsmb/namequery.c:get_dc_list(1489)
get_dc_list: preferred server list: "192.168.168.80, *"
[2008/06/04 15:44:53, 10] libsmb/namequery.c:internal_resolve_name(1166)
internal_resolve_name: looking up QA2008.EDU#1c (sitename
Default-First-Site-Name)
[2008/06/04 15:44:53, 10] lib/gencache.c:gencache_get(226)
Returning valid cache entry: key = NBT/QA2008.EDU#1C, value
192.168.168.80:389, timeout = Wed Jun 4 15:55:31 2008
[2008/06/04 15:44:53, 5] libsmb/namecache.c:namecache_fetch(214)
name QA2008.EDU#1C found.
[2008/06/04 15:44:53, 8] libsmb/namequery.c:get_dc_list(1505)
Adding 1 DC's from auto lookup
[2008/06/04 15:44:53, 10] lib/gencache.c:gencache_get(226)
Returning valid cache entry: key = AD_SITENAME/DOMAIN/QA2008.EDU,
value = Default-First-Site-Name, timeout = Sat Feb 6 22:28:15 2106
[2008/06/04 15:44:53, 5] libads/dns.c:sitename_fetch(709)
sitename_fetch: Returning sitename for QA2008.EDU:
"Default-First-Site-Name"
[2008/06/04 15:44:53, 10]
libsmb/namequery.c:remove_duplicate_addrs2(435)
remove_duplicate_addrs2: looking for duplicate address/port pairs
[2008/06/04 15:44:53, 4] libsmb/namequery.c:get_dc_list(1599)
get_dc_list: returning 1 ip addresses in an ordered list
[2008/06/04 15:44:53, 4] libsmb/namequery.c:get_dc_list(1600)
get_dc_list: 192.168.168.80:389
[2008/06/04 15:44:53, 10] lib/gencache.c:gencache_get(226)
Returning valid cache entry: key = SAF/DOMAIN/QA2008.EDU, value
192.168.168.80, timeout = Wed Jun 4 15:59:31 2008
[2008/06/04 15:44:53, 5] libsmb/namequery.c:saf_fetch(136)
saf_fetch: Returning "192.168.168.80" for "QA2008.EDU"
domain
[2008/06/04 15:44:53, 3] libsmb/namequery.c:get_dc_list(1489)
get_dc_list: preferred server list: "192.168.168.80, *"
[2008/06/04 15:44:53, 10] libsmb/namequery.c:internal_resolve_name(1166)
internal_resolve_name: looking up QA2008.EDU#1c (sitename (null))
[2008/06/04 15:44:53, 10] lib/gencache.c:gencache_get(226)
Returning valid cache entry: key = NBT/QA2008.EDU#1C, value
192.168.168.80:389, timeout = Wed Jun 4 15:55:31 2008
[2008/06/04 15:44:53, 5] libsmb/namecache.c:namecache_fetch(214)
name QA2008.EDU#1C found.
[2008/06/04 15:44:53, 8] libsmb/namequery.c:get_dc_list(1505)
Adding 1 DC's from auto lookup
[2008/06/04 15:44:53, 10] lib/gencache.c:gencache_get(226)
Returning valid cache entry: key = AD_SITENAME/DOMAIN/QA2008.EDU,
value = Default-First-Site-Name, timeout = Sat Feb 6 22:28:15 2106
[2008/06/04 15:44:53, 5] libads/dns.c:sitename_fetch(709)
sitename_fetch: Returning sitename for QA2008.EDU:
"Default-First-Site-Name"
[2008/06/04 15:44:53, 10]
libsmb/namequery.c:remove_duplicate_addrs2(435)
remove_duplicate_addrs2: looking for duplicate address/port pairs
[2008/06/04 15:44:53, 4] libsmb/namequery.c:get_dc_list(1599)
get_dc_list: returning 1 ip addresses in an ordered list
[2008/06/04 15:44:53, 4] libsmb/namequery.c:get_dc_list(1600)
get_dc_list: 192.168.168.80:389
[2008/06/04 15:44:53, 10] libads/kerberos.c:get_kdc_ip_string(620)
get_kdc_ip_string: Returning kdc = 192.168.168.80
[2008/06/04 15:44:53, 5]
libads/kerberos.c:create_local_private_krb5_conf_for_domain(742)
create_local_private_krb5_conf_for_domain: wrote file
/var/lib/samba/smb_krb5/krb5.conf.QA2008 with realm QA2008.EDU KDC
192.168.168.80
[2008/06/04 15:44:53, 4] libsmb/namequery_dc.c:ads_dc_name(139)
ads_dc_name: using server='WIN2K8DATACENTER.QA2008.EDU'
IP=192.168.168.80
[2008/06/04 15:44:53, 10] lib/gencache.c:gencache_get(226)
Returning valid cache entry: key = AD_SITENAME/DOMAIN/QA2008.EDU,
value = Default-First-Site-Name, timeout = Sat Feb 6 22:28:15 2106
[2008/06/04 15:44:53, 5] libads/dns.c:sitename_fetch(709)
sitename_fetch: Returning sitename for QA2008.EDU:
"Default-First-Site-Name"
[2008/06/04 15:44:53, 6] libads/ldap.c:ads_find_dc(309)
ads_find_dc: looking for realm 'QA2008.EDU'
[2008/06/04 15:44:53, 8] libsmb/namequery.c:get_sorted_dc_list(1626)
get_sorted_dc_list: attempting lookup for name QA2008.EDU (sitename
Default-First-Site-Name) using [ads]
[2008/06/04 15:44:53, 10] lib/gencache.c:gencache_get(226)
Returning valid cache entry: key = SAF/DOMAIN/QA2008.EDU, value
192.168.168.80, timeout = Wed Jun 4 15:59:31 2008
[2008/06/04 15:44:53, 5] libsmb/namequery.c:saf_fetch(136)
saf_fetch: Returning "192.168.168.80" for "QA2008.EDU"
domain
[2008/06/04 15:44:53, 3] libsmb/namequery.c:get_dc_list(1489)
get_dc_list: preferred server list: "192.168.168.80, *"
[2008/06/04 15:44:53, 10] libsmb/namequery.c:internal_resolve_name(1166)
internal_resolve_name: looking up QA2008.EDU#1c (sitename
Default-First-Site-Name)
[2008/06/04 15:44:53, 10] lib/gencache.c:gencache_get(226)
Returning valid cache entry: key = NBT/QA2008.EDU#1C, value
192.168.168.80:389, timeout = Wed Jun 4 15:55:31 2008
[2008/06/04 15:44:53, 5] libsmb/namecache.c:namecache_fetch(214)
name QA2008.EDU#1C found.
[2008/06/04 15:44:53, 8] libsmb/namequery.c:get_dc_list(1505)
Adding 1 DC's from auto lookup
[2008/06/04 15:44:53, 10] lib/gencache.c:gencache_get(226)
Returning valid cache entry: key = AD_SITENAME/DOMAIN/QA2008.EDU,
value = Default-First-Site-Name, timeout = Sat Feb 6 22:28:15 2106
[2008/06/04 15:44:53, 5] libads/dns.c:sitename_fetch(709)
sitename_fetch: Returning sitename for QA2008.EDU:
"Default-First-Site-Name"
[2008/06/04 15:44:53, 10]
libsmb/namequery.c:remove_duplicate_addrs2(435)
remove_duplicate_addrs2: looking for duplicate address/port pairs
[2008/06/04 15:44:53, 4] libsmb/namequery.c:get_dc_list(1599)
get_dc_list: returning 1 ip addresses in an ordered list
[2008/06/04 15:44:53, 4] libsmb/namequery.c:get_dc_list(1600)
get_dc_list: 192.168.168.80:389
[2008/06/04 15:44:53, 5] libads/ldap.c:ads_try_connect(195)
ads_try_connect: sending CLDAP request to 192.168.168.80 (realm:
QA2008.EDU)
[2008/06/04 15:44:53, 10] libads/dns.c:sitename_store(670)
sitename_store: realm = [QA2008.EDU], sitename [Default-First-Site-Name],
expire = [4294967295]
[2008/06/04 15:44:53, 10] lib/gencache.c:gencache_set(140)
Adding cache entry with key = AD_SITENAME/DOMAIN/QA2008.EDU; value
Default-First-Site-Name and timeout = (null) (-1212619494 seconds ahead)
[2008/06/04 15:44:53, 3] libads/ldap.c:ads_connect(420)
Connected to LDAP server 192.168.168.80
[2008/06/04 15:44:53, 10] libads/ldap.c:ads_closest_dc(164)
ads_closest_dc: ADS_CLOSEST flag set
[2008/06/04 15:44:53, 10] libsmb/namequery.c:saf_store(74)
saf_store: domain = [QA2008], server = [192.168.168.80], expire [1212620393]
[2008/06/04 15:44:53, 10] lib/gencache.c:gencache_set(140)
Adding cache entry with key = SAF/DOMAIN/QA2008; value 192.168.168.80 and
timeout = Wed Jun 4 15:59:53 2008
(900 seconds ahead)
[2008/06/04 15:44:53, 10] libsmb/namequery.c:saf_store(74)
saf_store: domain = [QA2008.EDU], server = [192.168.168.80], expire
[1212620393]
[2008/06/04 15:44:53, 10] lib/gencache.c:gencache_set(140)
Adding cache entry with key = SAF/DOMAIN/QA2008.EDU; value 192.168.168.80 and
timeout = Wed Jun 4 15:59:53 2008
(900 seconds ahead)
[2008/06/04 15:44:53, 4] libads/ldap.c:ads_current_time(2469)
time offset is 0 seconds
[2008/06/04 15:44:53, 4] libads/sasl.c:ads_sasl_bind(608)
Found SASL mechanism GSS-SPNEGO
[2008/06/04 15:44:53, 3] libads/sasl.c:ads_sasl_spnego_bind(291)
ads_sasl_spnego_bind: got OID=1 2 840 48018 1 2 2
[2008/06/04 15:44:53, 3] libads/sasl.c:ads_sasl_spnego_bind(291)
ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2
[2008/06/04 15:44:53, 3] libads/sasl.c:ads_sasl_spnego_bind(291)
ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2 3
[2008/06/04 15:44:53, 3] libads/sasl.c:ads_sasl_spnego_bind(291)
ads_sasl_spnego_bind: got OID=1 3 6 1 4 1 311 2 2 10
[2008/06/04 15:44:53, 3] libads/sasl.c:ads_sasl_spnego_bind(300)
ads_sasl_spnego_bind: got server principal name
not_defined_in_RFC4178@please_ignore
[2008/06/04 15:44:53, 3] libsmb/clikrb5.c:ads_krb5_mk_req(593)
ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache
found)
[2008/06/04 15:44:53, 10] libads/sasl.c:ads_sasl_spnego_bind(321)
ads_sasl_spnego_krb5_bind failed with: No credentials cache found,
calling kinit
[2008/06/04 15:44:53, 10]
libads/kerberos.c:kerberos_kinit_password_ext(91)
kerberos_kinit_password: using [MEMORY:net_ads] as ccache and config
[/var/lib/samba/smb_krb5/krb5.conf.QA2008]
[2008/06/04 15:44:53, 3] libsmb/clikrb5.c:ads_cleanup_expired_creds(528)
ads_cleanup_expired_creds: Ticket in ccache[MEMORY:net_ads] expiration
Thu, 05 Jun 2008 01:44:53 PDT
[2008/06/04 15:44:53, 10] libsmb/clikrb5.c:ads_krb5_mk_req(624)
ads_krb5_mk_req: Ticket (ldap/win2k8datacenter.qa2008.edu@QA2008.EDU)
in ccache (MEMORY:net_ads) is valid until: (Thu, 05 Jun 2008 01:44:53
PDT - 1212655493)
[2008/06/04 15:44:53, 10] libsmb/clikrb5.c:get_krb5_smb_session_key(735)
Got KRB5 session key of length 16
[2008/06/04 15:44:53, 10] lib/gencache.c:gencache_del(173)
Deleting cache entry (key = NBT/QA2008.EDU#1C)
[2008/06/04 15:44:53, 10] lib/gencache.c:gencache_del(173)
Deleting cache entry (key = NBT/QA2008#1C)
[2008/06/04 15:44:53, 10] lib/gencache.c:gencache_get(226)
Returning valid cache entry: key = AD_SITENAME/DOMAIN/QA2008.EDU,
value = Default-First-Site-Name, timeout = Sat Feb 6 22:28:15 2106
[2008/06/04 15:44:53, 5] libads/dns.c:sitename_fetch(709)
sitename_fetch: Returning sitename for QA2008.EDU:
"Default-First-Site-Name"
[2008/06/04 15:44:53, 6] libads/ldap.c:ads_find_dc(309)
ads_find_dc: looking for realm 'QA2008.EDU'
[2008/06/04 15:44:53, 8] libsmb/namequery.c:get_sorted_dc_list(1626)
get_sorted_dc_list: attempting lookup for name QA2008.EDU (sitename
Default-First-Site-Name) using [ads]
[2008/06/04 15:44:53, 10] lib/gencache.c:gencache_get(226)
Returning valid cache entry: key = SAF/DOMAIN/QA2008.EDU, value
192.168.168.80, timeout = Wed Jun 4 15:59:53 2008
[2008/06/04 15:44:53, 5] libsmb/namequery.c:saf_fetch(136)
saf_fetch: Returning "192.168.168.80" for "QA2008.EDU"
domain
[2008/06/04 15:44:53, 3] libsmb/namequery.c:get_dc_list(1489)
get_dc_list: preferred server list: "192.168.168.80, *"
[2008/06/04 15:44:53, 10] libsmb/namequery.c:internal_resolve_name(1166)
internal_resolve_name: looking up QA2008.EDU#1c (sitename
Default-First-Site-Name)
[2008/06/04 15:44:53, 10] lib/gencache.c:gencache_get(212)
Cache entry with key = NBT/QA2008.EDU#1C couldn't be found
[2008/06/04 15:44:53, 5] libsmb/namecache.c:namecache_fetch(210)
no entry for QA2008.EDU#1C found.
[2008/06/04 15:44:53, 5] libsmb/namequery.c:resolve_ads(1066)
resolve_ads: Attempting to resolve DC's for QA2008.EDU using DNS
[2008/06/04 15:44:53, 4] libads/dns.c:ads_dns_lookup_srv(380)
ads_dns_lookup_srv: 1 records returned in the answer section.
[2008/06/04 15:44:53, 10] libads/dns.c:ads_dns_parse_rr_srv(205)
ads_dns_parse_rr_srv: Parsed win2k8datacenter.qa2008.edu [0, 100, 389]
[2008/06/04 15:44:53, 10]
libsmb/namequery.c:remove_duplicate_addrs2(435)
remove_duplicate_addrs2: looking for duplicate address/port pairs
[2008/06/04 15:44:53, 5] libsmb/namecache.c:namecache_store(135)
namecache_store: storing 1 address for QA2008.EDU#1c:
192.168.168.80:389
[2008/06/04 15:44:53, 10] lib/gencache.c:gencache_set(140)
Adding cache entry with key = NBT/QA2008.EDU#1C; value 192.168.168.80:389 and
timeout = Wed Jun 4 15:55:53 2008
(660 seconds ahead)
[2008/06/04 15:44:53, 10] libsmb/namequery.c:internal_resolve_name(1293)
internal_resolve_name: returning 1 addresses: 192.168.168.80:389
[2008/06/04 15:44:53, 8] libsmb/namequery.c:get_dc_list(1505)
Adding 1 DC's from auto lookup
[2008/06/04 15:44:53, 10] lib/gencache.c:gencache_get(226)
Returning valid cache entry: key = AD_SITENAME/DOMAIN/QA2008.EDU,
value = Default-First-Site-Name, timeout = Sat Feb 6 22:28:15 2106
[2008/06/04 15:44:53, 5] libads/dns.c:sitename_fetch(709)
sitename_fetch: Returning sitename for QA2008.EDU:
"Default-First-Site-Name"
[2008/06/04 15:44:53, 10]
libsmb/namequery.c:remove_duplicate_addrs2(435)
remove_duplicate_addrs2: looking for duplicate address/port pairs
[2008/06/04 15:44:53, 4] libsmb/namequery.c:get_dc_list(1599)
get_dc_list: returning 1 ip addresses in an ordered list
[2008/06/04 15:44:53, 4] libsmb/namequery.c:get_dc_list(1600)
get_dc_list: 192.168.168.80:389
[2008/06/04 15:44:53, 5] libads/ldap.c:ads_try_connect(195)
ads_try_connect: sending CLDAP request to 192.168.168.80 (realm:
QA2008.EDU)
[2008/06/04 15:44:53, 10] libads/dns.c:sitename_store(670)
sitename_store: realm = [QA2008.EDU], sitename [Default-First-Site-Name],
expire = [4294967295]
[2008/06/04 15:44:53, 10] lib/gencache.c:gencache_set(140)
Adding cache entry with key = AD_SITENAME/DOMAIN/QA2008.EDU; value
Default-First-Site-Name and timeout = (null) (-1212619494 seconds ahead)
[2008/06/04 15:44:53, 3] libads/ldap.c:ads_connect(420)
Connected to LDAP server 192.168.168.80
[2008/06/04 15:44:53, 10] libads/ldap.c:ads_closest_dc(164)
ads_closest_dc: ADS_CLOSEST flag set
[2008/06/04 15:44:53, 10] libsmb/namequery.c:saf_store(74)
saf_store: domain = [QA2008], server = [192.168.168.80], expire [1212620393]
[2008/06/04 15:44:53, 10] lib/gencache.c:gencache_set(140)
Adding cache entry with key = SAF/DOMAIN/QA2008; value 192.168.168.80 and
timeout = Wed Jun 4 15:59:53 2008
(900 seconds ahead)
[2008/06/04 15:44:53, 10] libsmb/namequery.c:saf_store(74)
saf_store: domain = [QA2008.EDU], server = [192.168.168.80], expire
[1212620393]
[2008/06/04 15:44:53, 10] lib/gencache.c:gencache_set(140)
Adding cache entry with key = SAF/DOMAIN/QA2008.EDU; value 192.168.168.80 and
timeout = Wed Jun 4 15:59:53 2008
(900 seconds ahead)
[2008/06/04 15:44:53, 4] libads/ldap.c:ads_current_time(2469)
time offset is 0 seconds
[2008/06/04 15:44:53, 4] libads/sasl.c:ads_sasl_bind(608)
Found SASL mechanism GSS-SPNEGO
[2008/06/04 15:44:53, 3] libads/sasl.c:ads_sasl_spnego_bind(291)
ads_sasl_spnego_bind: got OID=1 2 840 48018 1 2 2
[2008/06/04 15:44:53, 3] libads/sasl.c:ads_sasl_spnego_bind(291)
ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2
[2008/06/04 15:44:53, 3] libads/sasl.c:ads_sasl_spnego_bind(291)
ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2 3
[2008/06/04 15:44:53, 3] libads/sasl.c:ads_sasl_spnego_bind(291)
ads_sasl_spnego_bind: got OID=1 3 6 1 4 1 311 2 2 10
[2008/06/04 15:44:53, 3] libads/sasl.c:ads_sasl_spnego_bind(300)
ads_sasl_spnego_bind: got server principal name
not_defined_in_RFC4178@please_ignore
[2008/06/04 15:44:53, 3] libsmb/clikrb5.c:ads_cleanup_expired_creds(528)
ads_cleanup_expired_creds: Ticket in ccache[MEMORY:net_ads] expiration
Thu, 05 Jun 2008 01:44:53 PDT
[2008/06/04 15:44:53, 10] libsmb/clikrb5.c:ads_krb5_mk_req(624)
ads_krb5_mk_req: Ticket (ldap/win2k8datacenter.qa2008.edu@QA2008.EDU)
in ccache (MEMORY:net_ads) is valid until: (Thu, 05 Jun 2008 01:44:53
PDT - 1212655493)
[2008/06/04 15:44:53, 10] libsmb/clikrb5.c:get_krb5_smb_session_key(735)
Got KRB5 session key of length 16
[2008/06/04 15:44:53, 3] libsmb/cliconnect.c:cli_start_connection(1561)
Connecting to host=win2k8datacenter.QA2008.EDU
[2008/06/04 15:44:53, 3] lib/util_sock.c:open_socket_out(866)
Connecting to 192.168.168.80 at port 445
[2008/06/04 15:44:53, 5] lib/util_sock.c:print_socket_options(206)
socket option SO_KEEPALIVE = 0
[2008/06/04 15:44:53, 5] lib/util_sock.c:print_socket_options(206)
socket option SO_REUSEADDR = 0
[2008/06/04 15:44:53, 5] lib/util_sock.c:print_socket_options(206)
socket option SO_BROADCAST = 0
[2008/06/04 15:44:53, 5] lib/util_sock.c:print_socket_options(206)
socket option TCP_NODELAY = 1
[2008/06/04 15:44:53, 5] lib/util_sock.c:print_socket_options(206)
socket option TCP_KEEPCNT = 9
[2008/06/04 15:44:53, 5] lib/util_sock.c:print_socket_options(206)
socket option TCP_KEEPIDLE = 7200
[2008/06/04 15:44:53, 5] lib/util_sock.c:print_socket_options(206)
socket option TCP_KEEPINTVL = 75
[2008/06/04 15:44:53, 5] lib/util_sock.c:print_socket_options(206)
socket option IPTOS_LOWDELAY = 0
[2008/06/04 15:44:53, 5] lib/util_sock.c:print_socket_options(206)
socket option IPTOS_THROUGHPUT = 0
[2008/06/04 15:44:53, 5] lib/util_sock.c:print_socket_options(206)
socket option SO_SNDBUF = 16384
[2008/06/04 15:44:53, 5] lib/util_sock.c:print_socket_options(206)
socket option SO_RCVBUF = 87380
[2008/06/04 15:44:53, 5] lib/util_sock.c:print_socket_options(206)
socket option SO_SNDLOWAT = 1
[2008/06/04 15:44:53, 5] lib/util_sock.c:print_socket_options(206)
socket option SO_RCVLOWAT = 1
[2008/06/04 15:44:53, 5] lib/util_sock.c:print_socket_options(206)
socket option SO_SNDTIMEO = 0
[2008/06/04 15:44:53, 5] lib/util_sock.c:print_socket_options(206)
socket option SO_RCVTIMEO = 0
[2008/06/04 15:44:53, 6] libsmb/clientgen.c:write_socket(158)
write_socket(7,194)
[2008/06/04 15:44:53, 6] libsmb/clientgen.c:write_socket(161)
write_socket(7,194) wrote 194
[2008/06/04 15:44:53, 10]
lib/util_sock.c:read_smb_length_return_keepalive(623)
got smb length of 193
[2008/06/04 15:44:53, 5] lib/util.c:show_msg(484)
[2008/06/04 15:44:53, 5] lib/util.c:show_msg(494)
size=193
smb_com=0x72
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=0
smb_pid=24237
smb_uid=0
smb_mid=1
smt_wct=17
smb_vwv[ 0]= 9 (0x9)
smb_vwv[ 1]=12815 (0x320F)
smb_vwv[ 2]= 256 (0x100)
smb_vwv[ 3]= 1024 (0x400)
smb_vwv[ 4]= 65 (0x41)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 256 (0x100)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]=64768 (0xFD00)
smb_vwv[10]= 499 (0x1F3)
smb_vwv[11]=19584 (0x4C80)
smb_vwv[12]= 6642 (0x19F2)
smb_vwv[13]=38043 (0x949B)
smb_vwv[14]=51398 (0xC8C6)
smb_vwv[15]=41985 (0xA401)
smb_vwv[16]= 1 (0x1)
smb_bcc=124
[2008/06/04 15:44:53, 10] lib/util.c:dump_data(2264)
[000] 6E A8 A0 ED 48 84 43 47 B4 0A 3A 9C 6C 2D E4 C3 n...H.CG
..:.l-..
[010] 60 6A 06 06 2B 06 01 05 05 02 A0 60 30 5E A0 30 `j..+...
...`0^.0
[020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H.
.......*
[030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H......
..*.H...
[040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+.
....7...
[050] A3 2A 30 28 A0 26 1B 24 6E 6F 74 5F 64 65 66 69 .*0(.&.$
not_defi
[060] 6E 65 64 5F 69 6E 5F 52 46 43 34 31 37 38 40 70 ned_in_R
FC4178@p
[070] 6C 65 61 73 65 5F 69 67 6E 6F 72 65 lease_ig nore
[2008/06/04 15:44:53, 5] lib/util.c:show_msg(484)
[2008/06/04 15:44:53, 5] lib/util.c:show_msg(494)
size=193
smb_com=0x72
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=0
smb_pid=24237
smb_uid=0
smb_mid=1
smt_wct=17
smb_vwv[ 0]= 9 (0x9)
smb_vwv[ 1]=12815 (0x320F)
smb_vwv[ 2]= 256 (0x100)
smb_vwv[ 3]= 1024 (0x400)
smb_vwv[ 4]= 65 (0x41)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 256 (0x100)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]=64768 (0xFD00)
smb_vwv[10]= 499 (0x1F3)
smb_vwv[11]=19584 (0x4C80)
smb_vwv[12]= 6642 (0x19F2)
smb_vwv[13]=38043 (0x949B)
smb_vwv[14]=51398 (0xC8C6)
smb_vwv[15]=41985 (0xA401)
smb_vwv[16]= 1 (0x1)
smb_bcc=124
[2008/06/04 15:44:53, 10] lib/util.c:dump_data(2264)
[000] 6E A8 A0 ED 48 84 43 47 B4 0A 3A 9C 6C 2D E4 C3 n...H.CG
..:.l-..
[010] 60 6A 06 06 2B 06 01 05 05 02 A0 60 30 5E A0 30 `j..+...
...`0^.0
[020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H.
.......*
[030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H......
..*.H...
[040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+.
....7...
[050] A3 2A 30 28 A0 26 1B 24 6E 6F 74 5F 64 65 66 69 .*0(.&.$
not_defi
[060] 6E 65 64 5F 69 6E 5F 52 46 43 34 31 37 38 40 70 ned_in_R
FC4178@p
[070] 6C 65 61 73 65 5F 69 67 6E 6F 72 65 lease_ig nore
[2008/06/04 15:44:53, 3]
libsmb/cliconnect.c:cli_session_setup_spnego(801)
Doing spnego session setup (blob length=124)
[2008/06/04 15:44:53, 3]
libsmb/cliconnect.c:cli_session_setup_spnego(826)
got OID=1 2 840 48018 1 2 2
[2008/06/04 15:44:53, 3]
libsmb/cliconnect.c:cli_session_setup_spnego(826)
got OID=1 2 840 113554 1 2 2
[2008/06/04 15:44:53, 3]
libsmb/cliconnect.c:cli_session_setup_spnego(826)
got OID=1 2 840 113554 1 2 2 3
[2008/06/04 15:44:53, 3]
libsmb/cliconnect.c:cli_session_setup_spnego(826)
got OID=1 3 6 1 4 1 311 2 2 10
[2008/06/04 15:44:53, 3]
libsmb/cliconnect.c:cli_session_setup_spnego(834)
got principal=not_defined_in_RFC4178@please_ignore
[2008/06/04 15:44:53, 10]
libads/kerberos.c:kerberos_kinit_password_ext(91)
kerberos_kinit_password: using [MEMORY:cliconnect] as ccache and
config [/var/lib/samba/smb_krb5/krb5.conf.QA2008]
[2008/06/04 15:44:53, 3]
libsmb/cliconnect.c:cli_session_setup_spnego(886)
cli_session_setup_spnego: got a bad server principal, trying to guess
...
[2008/06/04 15:44:53, 5]
libads/kerberos.c:kerberos_get_default_realm_from_ccache(384)
kerberos_get_default_realm_from_ccache: Trying to read krb5 cache:
MEMORY:cliconnect
[2008/06/04 15:44:53, 3]
libsmb/cliconnect.c:cli_session_setup_spnego(909)
cli_session_setup_spnego: guessed server
principal=win2k8datacenter$@QA2008.EDU
[2008/06/04 15:44:53, 2]
libsmb/cliconnect.c:cli_session_setup_kerberos(621)
Doing kerberos session setup
[2008/06/04 15:44:53, 1] libsmb/clikrb5.c:ads_krb5_mk_req(602)
ads_krb5_mk_req: krb5_get_credentials failed for
win2k8datacenter$@QA2008.EDU (Server not found in Kerberos database)
[2008/06/04 15:44:53, 1]
libsmb/cliconnect.c:cli_session_setup_kerberos(628)
cli_session_setup_kerberos: spnego_gen_negTokenTarg failed: Server not
found in Kerberos database
[2008/06/04 15:44:53, 3] libsmb/cliconnect.c:cli_session_setup(1014)
SPNEGO login failed: Server not found in Kerberos database
[2008/06/04 15:44:53, 1] libsmb/cliconnect.c:cli_full_connection(1658)
failed session setup with NT_STATUS_INVALID_ACCOUNT_NAME
[2008/06/04 15:44:53, 1] utils/net.c:connect_to_ipc_krb5(294)
Cannot connect to server using kerberos. Error was
NT_STATUS_INVALID_ACCOUNT_NAME
[2008/06/04 15:44:53, 1] utils/net_ads.c:net_ads_join(1548)
call of net_join_domain failed: Improperly formed account name
[2008/06/04 15:44:53, 10] intl/lang_tdb.c:lang_tdb_init(138)
lang_tdb_init: /usr/lib64/samba/POSIX.msg: No such file or directory
Failed to join domain: Improperly formed account name
[2008/06/04 15:44:53, 2] utils/net.c:main(1066)
return code = -1
Clayton Hill
2008-Jun-12 18:53 UTC
[Samba] Can't join windows 2008 AD with 3.0.30 "Failed tojoindomain: Improperly formed account"
(Agustin, the reply is shortened, because the list wouldn't let me post with another debug 10 output of the join , so don't reply to the last email I sent.) !! LIST MODERATOR: please disregard my last message since this is shortened significantly. Agustin, Thank you for your reply, I checked out what you said, and unfortunately it is not the case. For one thing, once you join a domain you cannot rename you computer, or else your join is lost. Assuming that is not what you meant, I renamed the server to "myserver" and ran the same test again. (debug 10 output below) I still didn't join, and I still got the improperly formed account name error as before. Also there is nothing in my ADS in the "Computers" container. I will try with SUSE 10.3 and samba 3.0.30 next. Any other ideas? Please help I really need this working with SUSE 10.1 Cheers, -Clayton Here is the output (shortened): myserver:~ # net ads join -U administrator -d 10 cli_session_setup_spnego: got a bad server principal, trying to guess ... [2008/06/12 11:10:34, 5] libads/kerberos.c:kerberos_get_default_realm_from_ccache(384) kerberos_get_default_realm_from_ccache: Trying to read krb5 cache: MEMORY:cliconnect [2008/06/12 11:10:34, 3] libsmb/cliconnect.c:cli_session_setup_spnego(909) cli_session_setup_spnego: guessed server principal=win2k8datacenter$@QA2008.EDU [2008/06/12 11:10:34, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(621) Doing kerberos session setup [2008/06/12 11:10:34, 1] libsmb/clikrb5.c:ads_krb5_mk_req(602) ads_krb5_mk_req: krb5_get_credentials failed for win2k8datacenter$@QA2008.EDU (Server not found in Kerberos database) [2008/06/12 11:10:34, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(628) cli_session_setup_kerberos: spnego_gen_negTokenTarg failed: Server not found in Kerberos database [2008/06/12 11:10:34, 3] libsmb/cliconnect.c:cli_session_setup(1014) SPNEGO login failed: Server not found in Kerberos database [2008/06/12 11:10:34, 1] libsmb/cliconnect.c:cli_full_connection(1658) failed session setup with NT_STATUS_INVALID_ACCOUNT_NAME [2008/06/12 11:10:34, 1] utils/net.c:connect_to_ipc_krb5(294) Cannot connect to server using kerberos. Error was NT_STATUS_INVALID_ACCOUNT_NAME [2008/06/12 11:10:34, 1] utils/net_ads.c:net_ads_join(1548) call of net_join_domain failed: Improperly formed account name [2008/06/12 11:10:34, 10] intl/lang_tdb.c:lang_tdb_init(138) lang_tdb_init: /usr/lib64/samba/POSIX.msg: No such file or directory Failed to join domain: Improperly formed account name [2008/06/12 11:10:34, 2] utils/net.c:main(1066) return code = -1 myserver:~ # ------------------------------------------------------------------------ --------------------------------------- I had the same problem. I suggest renaming your SUSE box, if you look in your ads under computers you will find your suse is already joined, you may have to reboot your ads machine is order to see it.> Subject: RE: [Samba] Can't join windows 2008 AD with 3.0.30 "Failed tojoindomain: Improperly formed account name"> Date: Wed, 11 Jun 2008 14:50:39 -0400 > From: chill@powerfile.com > To: samba@lists.samba.org > > Since I didn't get an answer, I am bumping this. > (sorry! I really need an answer for this...) > > > Also here is more relevant info: > OS: SUSE 10.1 x86_64 > > Samba: > samba-3.0.30-0.1.112.x86_64 > samba-client-3.0.30-0.1.112.x86_64 > samba-winbind-3.0.30-0.1.112.x86_64 > > Kerberos: > krb5-1.5.1-23.x86_64 > krb5-client-1.5.1-23.x86_64 > >------------------------------------------------------------------------> -------------------- > > > > > > Hi folks, > > My first post here after trolling for a while. > > Here is the issue: > I can't join a Windows 2008 Server Active Directory with 3.0.30. > "Failed to join domain: Improperly formed account name" > > > Judging from the release notes from 3.0.29 etc this was fixed... > Am I incorrect in this assumption? Perhaps I have missed a new > configuration parameter? > > Are the fixes being implemented incrementally -- and if so, whatshould> I be looking for in future release notes that tells me this is > completely finished and I can join my 2008 domain? > > Regards, > -Clayton H. > > > > > Also, here is my debug level 10 output from a domain join: ###(thishas been shortened too)> > >=======================================================================> =========================================> A3-A1000007:/etc/samba # net ads join -U administrator%password -d 10> [2008/06/04 15:44:53, 5] lib/debug.c:debug_dump_status(391) > > cli_session_setup_spnego: got a bad server principal, trying toguess> ... > [2008/06/04 15:44:53, 5] > libads/kerberos.c:kerberos_get_default_realm_from_ccache(384) > kerberos_get_default_realm_from_ccache: Trying to read krb5 cache: > MEMORY:cliconnect > [2008/06/04 15:44:53, 3] > libsmb/cliconnect.c:cli_session_setup_spnego(909) > cli_session_setup_spnego: guessed server > principal=win2k8datacenter$@QA2008.EDU > [2008/06/04 15:44:53, 2] > libsmb/cliconnect.c:cli_session_setup_kerberos(621) > Doing kerberos session setup > [2008/06/04 15:44:53, 1] libsmb/clikrb5.c:ads_krb5_mk_req(602) > ads_krb5_mk_req: krb5_get_credentials failed for > win2k8datacenter$@QA2008.EDU (Server not found in Kerberos database) > [2008/06/04 15:44:53, 1] > libsmb/cliconnect.c:cli_session_setup_kerberos(628) > cli_session_setup_kerberos: spnego_gen_negTokenTarg failed: Server not > found in Kerberos database > [2008/06/04 15:44:53, 3] libsmb/cliconnect.c:cli_session_setup(1014) > SPNEGO login failed: Server not found in Kerberos database > [2008/06/04 15:44:53, 1] libsmb/cliconnect.c:cli_full_connection(1658) > failed session setup with NT_STATUS_INVALID_ACCOUNT_NAME > [2008/06/04 15:44:53, 1] utils/net.c:connect_to_ipc_krb5(294) > Cannot connect to server using kerberos. Error was > NT_STATUS_INVALID_ACCOUNT_NAME > [2008/06/04 15:44:53, 1] utils/net_ads.c:net_ads_join(1548) > call of net_join_domain failed: Improperly formed account name > [2008/06/04 15:44:53, 10] intl/lang_tdb.c:lang_tdb_init(138) > lang_tdb_init: /usr/lib64/samba/POSIX.msg: No such file or directory > Failed to join domain: Improperly formed account name > [2008/06/04 15:44:53, 2] utils/net.c:main(1066) > return code = -1 > > > > > > > > > > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/listinfo/samba > > No virus found in this incoming message. > Checked by AVG. > Version: 8.0.100 / Virus Database: 269.24.6/1482 - Release Date: > 6/4/2008 7:10 AM > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/listinfo/samba________________________________ Now you can invite friends from Facebook and other groups to join you on Windows Live(tm) Messenger. Add them now! <https://www.invite2messenger.net/im/?source=TXT_EML_WLH_AddNow_Now> No virus found in this incoming message. Checked by AVG. Version: 8.0.100 / Virus Database: 270.3.0/1499 - Release Date: 6/12/2008 7:13 AM