Edson Tadeu Almeida da Silveira
2016-Oct-05 11:38 UTC
[Samba] Winbind Preauthentication failed
Hi guys! I started to have the problem above last October, 2th. I don´t know why and how, because it was saturday. So, my file server stoped to authenticate against the Samba4 AD. Today, all shares was stopped and then i restarted my Samba4 AD and the file server. All became to work again. But it im afraid because the problem started by itself. Thanks! # MY CRONTAB 17 * * * * root cd / && run-parts --report /etc/cron.hourly Oct 1 23:17:01 fs1 CRON[22440]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Oct 1 23:59:01 fs1 CRON[22623]: (root) CMD (/usr/sbin/ntpdate domain.local) Oct 1 23:59:01 fs1 CRON[22622]: (CRON) info (No MTA installed, discarding output) Oct 2 00:17:01 fs1 CRON[22699]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Oct 2 01:17:01 fs1 CRON[23014]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Oct 2 02:17:01 fs1 CRON[23230]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Oct 2 03:17:01 fs1 CRON[23434]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Oct 2 04:17:01 fs1 CRON[23640]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Oct 2 05:17:01 fs1 CRON[23847]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Oct 2 06:17:01 fs1 CRON[24055]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Oct 2 06:17:01 fs1 winbindd[31235]: [2016/10/02 06:17:01.425284, 0] ../source3/libads/kerberos_util.c:74(ads_kinit_password) Oct 2 06:17:01 fs1 winbindd[31235]: kerberos_kinit_password FS1$@DOMAIN.LOCAL failed: Preauthentication failed Oct 2 06:17:01 fs1 winbindd[31235]: [2016/10/02 06:17:01.549878, 0] ../source3/libads/kerberos_util.c:74(ads_kinit_password) Oct 2 06:17:01 fs1 winbindd[31235]: kerberos_kinit_password FS1$@DOMAIN.LOCAL failed: Preauthentication failed Oct 2 06:41:51 fs1 nmbd[31270]: [2016/10/02 06:41:51.317132, 0] ../source3/nmbd/nmbd.c:169(nmbd_sig_hup_handler) Oct 2 06:41:51 fs1 nmbd[31270]: Got SIGHUP dumping debug info. Oct 2 06:41:51 fs1 nmbd[31270]: [2016/10/02 06:41:51.317232, 0] ../source3/nmbd/nmbd_workgroupdb.c:276(dump_workgroups) Oct 2 06:41:51 fs1 nmbd[31270]: dump_workgroups() Oct 2 06:41:51 fs1 nmbd[31270]: dump workgroup on subnet 10.40.11.12: netmask= 255.255.255.0: Oct 2 06:41:51 fs1 nmbd[31270]: #011DOMAIN(1) current master browser UNKNOWN Oct 2 06:41:51 fs1 nmbd[31270]: #011#011FS1 40809b03 (Samba 4.3.9-Ubuntu) Oct 2 06:41:51 fs1 winbindd[31235]: [2016/10/02 06:41:51.501186, 0] ../source3/libads/kerberos_util.c:74(ads_kinit_password) Oct 2 06:41:51 fs1 winbindd[31235]: kerberos_kinit_password FS1$@DOMAIN.LOCAL failed: Preauthentication failed Oct 2 06:41:51 fs1 winbindd[31235]: [2016/10/02 06:41:51.624959, 0] ../source3/libads/kerberos_util.c:74(ads_kinit_password) Oct 2 06:41:51 fs1 winbindd[31235]: kerberos_kinit_password FS1$@DOMAIN.LOCAL failed: Preauthentication failed Oct 2 06:41:51 fs1 winbindd[31264]: [2016/10/02 06:41:51.745676, 0] ../source3/libads/kerberos_util.c:74(ads_kinit_password) Oct 2 06:41:51 fs1 winbindd[31264]: kerberos_kinit_password FS1$@DOMAIN.LOCAL failed: Preauthentication failed Oct 2 06:41:51 fs1 winbindd[31264]: [2016/10/02 06:41:51.863067, 0] ../source3/libads/kerberos_util.c:74(ads_kinit_password) Oct 2 06:41:51 fs1 winbindd[31264]: kerberos_kinit_password FS1$@DOMAIN.LOCAL failed: Preauthentication failed Oct 2 06:41:51 fs1 winbindd[31235]: [2016/10/02 06:41:51.991249, 0] ../source3/libads/kerberos_util.c:74(ads_kinit_password) Oct 2 06:41:51 fs1 winbindd[31235]: kerberos_kinit_password FS1$@DOMAIN.LOCAL failed: Preauthentication failed [2016/10/02 06:17:01.425284, 0] ../source3/libads/kerberos_uti l.c:74(ads_kinit_password) kerberos_kinit_password FS1$@DOMAIN.LOCAL failed: Preauthentication failed [2016/10/02 06:17:01.425484, 1] ../source3/winbindd/winbindd_a ds.c:136(ads_cached_connection_connect) ads_connect for domain DOMAIN failed: Preauthentication failed [2016/10/02 06:17:01.549878, 0] ../source3/libads/kerberos_uti l.c:74(ads_kinit_password) kerberos_kinit_password FS1$@DOMAIN.LOCAL failed: Preauthentication failed [2016/10/02 06:17:01.549948, 1] ../source3/winbindd/winbindd_a ds.c:136(ads_cached_connection_connect) ads_connect for domain DOMAIN failed: Preauthentication failed [2016/10/02 06:17:47.007517, 1] ../source3/winbindd/winbindd_u til.c:351(trustdom_list_done) Could not receive trustdoms [2016/10/02 06:22:47.012506, 1] ../source3/winbindd/winbindd_u til.c:351(trustdom_list_done) Could not receive trustdoms [2016/10/02 06:25:01.967159, 0] ../source3/libads/kerberos_uti l.c:74(ads_kinit_password) kerberos_kinit_password FS1$@DOMAIN.LOCAL failed: Preauthentication failed [2016/10/02 06:25:01.967236, 1] ../source3/winbindd/winbindd_a ds.c:136(ads_cached_connection_connect) ads_connect for domain DOMAIN failed: Preauthentication failed [2016/10/02 06:25:02.113909, 0] ../source3/libads/kerberos_uti l.c:74(ads_kinit_password) kerberos_kinit_password FS1$@DOMAIN.LOCAL failed: Preauthentication failed [2016/10/02 06:25:02.113979, 1] ../source3/winbindd/winbindd_a ds.c:136(ads_cached_connection_connect) ads_connect for domain DOMAIN failed: Preauthentication failed [2016/10/02 06:27:47.013260, 1] ../source3/winbindd/winbindd_u til.c:351(trustdom_list_done) Could not receive trustdoms [2016/10/02 06:32:47.017598, 1] ../source3/winbindd/winbindd_u til.c:351(trustdom_list_done) Could not receive trustdoms [2016/10/02 06:37:47.022024, 1] ../source3/winbindd/winbindd_u til.c:351(trustdom_list_done) Could not receive trustdoms [2016/10/02 06:41:51.337537, 1] ../source3/winbindd/winbindd.c :387(winbindd_sig_hup_handler) Reloading services after SIGHUP [2016/10/02 06:41:51.368532, 2] ../source3/param/loadparm.c:32 0(max_open_files) rlimit_max: increasing rlimit_max (270) to minimum Windows limit (16384) [2016/10/02 06:41:51.369268, 2] ../source3/lib/interface.c:341 (add_interface) added interface em1 ip=10.40.11.12 bcast=10.40.11.255 netmask=255.255.255.0 [2016/10/02 06:41:51.501186, 0] ../source3/libads/kerberos_uti l.c:74(ads_kinit_password) kerberos_kinit_password FS1$@DOMAIN.LOCAL failed: Preauthentication failed [2016/10/02 06:41:51.501271, 1] ../source3/winbindd/winbindd_a ds.c:136(ads_cached_connection_connect) ads_connect for domain DOMAIN failed: Preauthentication failed # LOG SMB ------------------------------------------------------------ ------------------------------------------------------------------- [2016/10/02 06:10:34.884360, 1] ../source3/librpc/crypto/gse.c :497(gse_get_server_auth_token) gss_accept_sec_context failed with [ Miscellaneous failure (see text): Failed to find cifs/fs1.domain.local at DOMAIN.LOCAL(kvno 2) in keytab MEMORY:cifs_srv_keytab (arcfour-hmac-md5)] [2016/10/02 06:10:34.884404, 1] ../auth/gensec/spnego.c:541(ge nsec_spnego_parse_negTokenInit) SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE [2016/10/02 06:10:34.884433, 2] ../auth/gensec/spnego.c:716(ge nsec_spnego_server_negTokenTarg) SPNEGO login failed: NT_STATUS_LOGON_FAILURE [2016/10/02 06:13:07.177316, 2] ../source3/smbd/server.c:467(r emove_child_pid) Could not find child 24041 -- ignoring [2016/10/02 06:28:07.281158, 2] ../source3/smbd/server.c:467(r emove_child_pid) Could not find child 24136 -- ignoring [2016/10/02 06:38:29.795041, 1] ../source3/librpc/crypto/gse.c :497(gse_get_server_auth_token) gss_accept_sec_context failed with [ Miscellaneous failure (see text): Failed to find cifs/fs1.domain.local at DOMAIN.LOCAL(kvno 2) in keytab MEMORY:cifs_srv_keytab (arcfour-hmac-md5)] [2016/10/02 06:38:29.795089, 1] ../auth/gensec/spnego.c:541(ge nsec_spnego_parse_negTokenInit) SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE [2016/10/02 06:38:29.795193, 2] ../auth/gensec/spnego.c:716(ge nsec_spnego_server_negTokenTarg) SPNEGO login failed: NT_STATUS_LOGON_FAILURE [2016/10/02 06:38:29.894021, 1] ../source3/librpc/crypto/gse.c :497(gse_get_server_auth_token) gss_accept_sec_context failed with [ Miscellaneous failure (see text): Failed to find cifs/fs1.domain.local at DOMAIN.LOCAL(kvno 2) in keytab MEMORY:cifs_srv_keytab (arcfour-hmac-md5)] [2016/10/02 06:38:29.894060, 1] ../auth/gensec/spnego.c:541(ge nsec_spnego_parse_negTokenInit) SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE [2016/10/02 06:38:29.894088, 2] ../auth/gensec/spnego.c:716(ge nsec_spnego_server_negTokenTarg) SPNEGO login failed: NT_STATUS_LOGON_FAILURE [2016/10/02 06:38:29.990723, 1] ../source3/librpc/crypto/gse.c :497(gse_get_server_auth_token) gss_accept_sec_context failed with [ Miscellaneous failure (see text): Failed to find cifs/fs1.domain.local at DOMAIN.LOCAL(kvno 2) in keytab MEMORY:cifs_srv_keytab (arcfour-hmac-md5)] [2016/10/02 06:38:29.990761, 1] ../auth/gensec/spnego.c:541(ge nsec_spnego_parse_negTokenInit) SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE [2016/10/02 06:38:29.990788, 2] ../auth/gensec/spnego.c:716(ge nsec_spnego_server_negTokenTarg) SPNEGO login failed: NT_STATUS_LOGON_FAILURE [2016/10/02 06:38:30.087736, 1] ../source3/librpc/crypto/gse.c :497(gse_get_server_auth_token) gss_accept_sec_context failed with [ Miscellaneous failure (see text): Failed to find cifs/fs1.domain.local at DOMAIN.LOCAL(kvno 2) in keytab MEMORY:cifs_srv_keytab (arcfour-hmac-md5)] [2016/10/02 06:38:30.087775, 1] ../auth/gensec/spnego.c:541(ge nsec_spnego_parse_negTokenInit) SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE [2016/10/02 06:38:30.087802, 2] ../auth/gensec/spnego.c:716(ge nsec_spnego_server_negTokenTarg) SPNEGO login failed: NT_STATUS_LOGON_FAILURE [2016/10/02 06:38:30.183315, 1] ../source3/librpc/crypto/gse.c :497(gse_get_server_auth_token) gss_accept_sec_context failed with [ Miscellaneous failure (see text): Failed to find cifs/fs1.domain.local at DOMAIN.LOCAL(kvno 2) in keytab MEMORY:cifs_srv_keytab (arcfour-hmac-md5)] [2016/10/02 06:38:30.183353, 1] ../auth/gensec/spnego.c:541(ge nsec_spnego_parse_negTokenInit) SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE [2016/10/02 06:38:30.183380, 2] ../auth/gensec/spnego.c:716(ge nsec_spnego_server_negTokenTarg) SPNEGO login failed: NT_STATUS_LOGON_FAILURE [2016/10/02 06:38:30.279186, 1] ../source3/librpc/crypto/gse.c :497(gse_get_server_auth_token) gss_accept_sec_context failed with [ Miscellaneous failure (see text): Failed to find cifs/fs1.domain.local at DOMAIN.LOCAL(kvno 2) in keytab MEMORY:cifs_srv_keytab (arcfour-hmac-md5)] [2016/10/02 06:38:30.279223, 1] ../auth/gensec/spnego.c:541(ge nsec_spnego_parse_negTokenInit) SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE [2016/10/02 06:38:30.279248, 2] ../auth/gensec/spnego.c:716(ge nsec_spnego_server_negTokenTarg) SPNEGO login failed: NT_STATUS_LOGON_FAILURE [2016/10/02 06:38:30.382392, 1] ../source3/librpc/crypto/gse.c :497(gse_get_server_auth_token) gss_accept_sec_context failed with [ Miscellaneous failure (see text): Failed to find cifs/fs1.domain.local at DOMAIN.LOCAL(kvno 2) in keytab MEMORY:cifs_srv_keytab (arcfour-hmac-md5)] [2016/10/02 06:38:30.382430, 1] ../auth/gensec/spnego.c:541(ge nsec_spnego_parse_negTokenInit) SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE [2016/10/02 06:38:30.382457, 2] ../auth/gensec/spnego.c:716(ge nsec_spnego_server_negTokenTarg) SPNEGO login failed: NT_STATUS_LOGON_FAILURE [2016/10/02 06:38:57.125086, 1] ../source3/librpc/crypto/gse.c :497(gse_get_server_auth_token) gss_accept_sec_context failed with [ Miscellaneous failure (see text): Failed to find cifs/fs1.domain.local at DOMAIN.LOCAL(kvno 2) in keytab MEMORY:cifs_srv_keytab (arcfour-hmac-md5)] [2016/10/02 06:38:57.125127, 1] ../auth/gensec/spnego.c:541(ge nsec_spnego_parse_negTokenInit) SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE [2016/10/02 06:38:57.125154, 2] ../auth/gensec/spnego.c:716(ge nsec_spnego_server_negTokenTarg) SPNEGO login failed: NT_STATUS_LOGON_FAILURE [2016/10/02 06:41:51.248421, 1] ../source3/smbd/server.c:1065( smbd_parent_sig_hup_handler) parent: Reloading services after SIGHUP -- ------------------------------------------- Edson Tadeu Almeida Silveira http://sites.google.com/site/edsontadeu/ -------------------------------------------
Possibly Parallel Threads
- Fwd: Winbind Preauthentication failed
- samba AD member does not renew kerberos ticket [kerberos_kinit_password BONN$@DOMAIN.DE failed: Preauthentication failed]
- samba AD member does not renew kerberos ticket [kerberos_kinit_password BONN$@DOMAIN.DE failed: Preauthentication failed]
- AD authentication issue in Samba (kerberos errors)
- Samba SSSD Integration