thr3ads.net - samba - [Samba] Login to AD Member Fail [Jun 2018]

If this information is useful, please help other people find it:
Share via:

basti

2018-Jun-27 12:50 UTC

[Samba] Login to AD Member Fail

On 27.06.2018 14:12, Rowland Penny via samba wrote:
> Can I also point that if you can only connect by IP, then you probably
> have a DNS issue.
> 
> Rowland
> 
I dont think so.

root at kes-srv-007:/var/log/samba# getent hosts kes-srv-007.kes
192.168.30.19   kes-srv-007.kes
root at kes-srv-007:/var/log/samba# smbclient -U 'KES\user'
\\\\kes-srv-007.kes\\websrv
Enter KES\users's password:
krb5_init_context failed (Invalid argument)
smb_krb5_context_init_basic failed (Invalid argument)
Domain=[KES] OS=[Windows 6.1] Server=[Samba 4.5.12-Debian]
smb: \>

tcpdump before windows error message is shown

root at kes-srv-007:/var/log/samba# tcpdump -ni eth0 port 445 and host
192.168.30.49
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 262144 bytes
14:49:09.561480 IP 192.168.30.49.65405 > 192.168.30.19.445: Flags [SEW],
seq 3407254319, win 8192, options [mss 1460,nop,wscale
8,nop,nop,sackOK], length 0
14:49:09.561542 IP 192.168.30.19.445 > 192.168.30.49.65405: Flags [S.],
seq 1513924791, ack 3407254320, win 29200, options [mss
1460,nop,nop,sackOK,nop,wscale 7], length 0
14:49:09.561799 IP 192.168.30.49.65405 > 192.168.30.19.445: Flags [.],
ack 1, win 513, length 0
14:49:09.561949 IP 192.168.30.49.65405 > 192.168.30.19.445: Flags [P.],
seq 1:160, ack 1, win 513, length 159 SMB PACKET: SMBnegprot (REQUEST)

14:49:09.561985 IP 192.168.30.19.445 > 192.168.30.49.65405: Flags [.],
ack 160, win 237, length 0
14:49:09.668500 IP 192.168.30.19.445 > 192.168.30.49.65405: Flags [P.],
seq 1:229, ack 160, win 237, length 228 SMB-over-TCP packet:(raw data or
continuation?)

14:49:09.668861 IP 192.168.30.49.65405 > 192.168.30.19.445: Flags [P.],
seq 160:272, ack 229, win 512, length 112 SMB-over-TCP packet:(raw data
or continuation?)

14:49:09.668953 IP 192.168.30.19.445 > 192.168.30.49.65405: Flags [.],
ack 272, win 237, length 0
14:49:09.761300 IP 192.168.30.19.445 > 192.168.30.49.65405: Flags [P.],
seq 229:457, ack 272, win 237, length 228 SMB-over-TCP packet:(raw data
or continuation?)

14:49:09.762906 IP 192.168.30.49.65405 > 192.168.30.19.445: Flags [P.],
seq 272:2077, ack 457, win 511, length 1805 SMB-over-TCP packet:(raw
data or continuation?)

14:49:09.762978 IP 192.168.30.19.445 > 192.168.30.49.65405: Flags [.],
ack 2077, win 265, length 0
14:49:09.878633 IP 192.168.30.19.445 > 192.168.30.49.65405: Flags [P.],
seq 457:534, ack 2077, win 265, length 77 SMB-over-TCP packet:(raw data
or continuation?)

14:49:09.879231 IP 192.168.30.49.65405 > 192.168.30.19.445: Flags [R.],
seq 2077, ack 534, win 0, length 0
14:49:09.881160 IP 192.168.30.49.65406 > 192.168.30.19.445: Flags [SEW],
seq 2221000953, win 8192, options [mss 1460,nop,wscale
8,nop,nop,sackOK], length 0
14:49:09.881205 IP 192.168.30.19.445 > 192.168.30.49.65406: Flags [S.],
seq 2677849087, ack 2221000954, win 29200, options [mss
1460,nop,nop,sackOK,nop,wscale 7], length 0
14:49:09.881401 IP 192.168.30.49.65406 > 192.168.30.19.445: Flags [.],
ack 1, win 513, length 0
14:49:09.881442 IP 192.168.30.49.65406 > 192.168.30.19.445: Flags [P.],
seq 1:113, ack 1, win 513, length 112 SMB-over-TCP packet:(raw data or
continuation?)

14:49:09.881453 IP 192.168.30.19.445 > 192.168.30.49.65406: Flags [.],
ack 113, win 229, length 0
14:49:10.056381 IP 192.168.30.19.445 > 192.168.30.49.65406: Flags [P.],
seq 1:229, ack 113, win 229, length 228 SMB-over-TCP packet:(raw data or
continuation?)

14:49:10.057573 IP 192.168.30.49.65406 > 192.168.30.19.445: Flags [P.],
seq 113:1918, ack 229, win 512, length 1805 SMB-over-TCP packet:(raw
data or continuation?)

14:49:10.057646 IP 192.168.30.19.445 > 192.168.30.49.65406: Flags [.],
ack 1918, win 257, length 0
14:49:10.163931 IP 192.168.30.19.445 > 192.168.30.49.65406: Flags [P.],
seq 229:306, ack 1918, win 257, length 77 SMB-over-TCP packet:(raw data
or continuation?)

14:49:10.164936 IP 192.168.30.49.65406 > 192.168.30.19.445: Flags [R.],
seq 1918, ack 306, win 0, length 0

Rowland Penny

2018-Jun-27 13:17 UTC

head link

[Samba] Login to AD Member Fail

On Wed, 27 Jun 2018 14:50:44 +0200
basti via samba <samba at lists.samba.org> wrote:
> I dont think so.
> 
> root at kes-srv-007:/var/log/samba# getent hosts kes-srv-007.kes
> 192.168.30.19   kes-srv-007.kes
> root at kes-srv-007:/var/log/samba# smbclient -U 'KES\user'
> \\\\kes-srv-007.kes\\websrv
> Enter KES\users's password:
> krb5_init_context failed (Invalid argument)
> smb_krb5_context_init_basic failed (Invalid argument)
> Domain=[KES] OS=[Windows 6.1] Server=[Samba 4.5.12-Debian]
> smb: \>
What is in /etc/krb5.conf ?

Rowland

basti

2018-Jun-27 13:27 UTC

head link

[Samba] Login to AD Member Fail

On 27.06.2018 15:17, Rowland Penny via samba wrote:
> What is in /etc/krb5.conf ?
> 
> Rowland
> I think there is a Problem with krb5.conf

Fileserver1

root at srv-031:~# cat /etc/krb5.conf
[libdefaults]
    default_realm = DOM.EXAMPLE.COM
    dns_lookup_realm = false
    dns_lookup_kdc = true
root at srv-031:~#


Fileserver with login Error


root at srv-007:/var/log/samba# cat /etc/krb5.conf
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log

[libdefaults]
    default_realm = DOM.EXAMPLE.COM
    dns_lookup_realm = false
    dns_lookup_kdc = true
    ticket_lifetime = 24h
    forwardable = yes

[realms]
 DOM.EXAMPLE.COM = {
  kdc = dc1.dom.example.com:88
  admin_server = dc1.dom.example.com:749
  default_domain = example.com
 }

[domain_realm]
 .EXAMPLE.COM = EXAMPLE.COM
 EXAMPLE.COM = EXAMPLE.COM
root at srv-007:/var/log/samba#

Apparently Analagous Threads

Search for more apparently analagous threads

samba - Jun 2018 - Login to AD Member Fail

[Samba] Login to AD Member Fail

[Samba] Login to AD Member Fail

[Samba] Login to AD Member Fail

Apparently Analagous Threads