search for: ads_keytab_add_entry

...e principals (the 'host' primary specifically) to its keytab. I've searched, but I haven't seen this particular issue addressed. I get the same results when doing 'net ads join' and 'net ads keytab create/add/flush' (which makes sense because they all end up calling ads_keytab_add_entry anyway). Here's my output: # net ads join SanJose/KW/Computers -d 3 [2004/10/25 12:56:30, 3] param/loadparm.c:lp_load(3920) lp_load: refreshing parameters [2004/10/25 12:56:30, 3] param/loadparm.c:init_globals(1324) Initialising global parameters [2004/10/25 12:56:30, 3] param/params.c:pm_...

...keytab create ; echo $? Gives [..snip..] ads_get_kvno: Error Determining KVNO! [2007/03/20 11:45:43, 3] libads/ldap.c:ads_get_kvno(1348) ads_get_kvno: Windows 2000 does not support KVNO's, so this may be normal. [2007/03/20 11:45:43, 3] libads/kerberos_keytab.c:smb_krb5_kt_add_entry(184) ads_keytab_add_entry: adding keytab entry for (host/host.nhm.ac.uk@NHM.AC.UK) with encryption type (1) and version (0) [2007/03/20 11:45:43, 1] libads/kerberos_keytab.c:smb_krb5_kt_add_entry(189) ads_keytab_add_entry: adding entry to keytab failed (Cannot write to specified key table) [2007/03/20 11:45:43, 1] libads/...

First thing - I'd like to say a big "THANK YOU" to the developers. I just upgraded to samba-3.0.23 and I've noticed an alarming issue with respect to my configuration. I've been using the built-in keytab management and it looks like the updated code no longer creates the userPrincipal in Active Directory. Whether this is an issue for others or not, it would be nice to have

...HOST -> HOST.domain.com [2009/05/11 20:13:20, 3] libads/ldap.c:(2471) ads_domain_func_level: 2 [2009/05/11 20:13:20, 3] libads/kerberos.c:(337) kerberos_secrets_store_des_salt: Storing salt "host/host.domain.com@DOMAIN.COM" [2009/05/11 20:13:21, 2] libads/kerberos_keytab.c:(260) ads_keytab_add_entry: Using default system keytab: FILE:/etc/krb5/krb5.keytab [2009/05/11 20:13:21, 5] libads/ldap.c:(1422) ads_get_kvno: Searching for host HOST [2009/05/11 20:13:21, 5] libads/ldap.c:(1440) ads_get_kvno: Using: CN=HOST,CN=Computers,DC=domain,DC=com [2009/05/11 20:13:21, 5] libads/ldap.c:(1459) a...

...ncipals (the 'host' primary specifically) to its keytab. > I've searched, but I haven't seen this particular issue addressed. I get the same results when doing 'net ads join' and 'net ads keytab create/add/flush' (which makes sense because they all end up calling ads_keytab_add_entry anyway). Here's my output: > > ads_keytab_add_entry: adding entry to keytab failed (Cannot write to specified key table) > [2004/10/25 12:56:41, 1] libads/kerberos_keytab.c:ads_keytab_create_default(418) > ads_keytab_create_default: ads_keytab_add_entry failed while adding '...

...prefix "FILE:" or "WRFILE:". Is this the correct logic? It appears that the loop while (next_token_talloc(mem_ctx, &tmp, &kt_str, ",")) { Should have the test if (tmp[0] == '/') found_valid_name = True; Glenn kerberos_keytab.c ads_keytab_add_entry() ret = smb_krb5_open_keytab(context, NULL, True, &keytab); if (ret) { DEBUG(1,("ads_keytab_add_entry: smb_krb5_open_keytab failed (%s)\n", error_message(ret))); goto out; } libsmb/clikrb5.c smb_krb5_open_keytab(krb5_context context,...

...re . root at storage-ZRMEIN:/usr/local/samba/bin# ./net ads keytab add nfs -U nfsuser Enter nfsuser's password: [2011/05/13 02:14:11.121581, 0] libads/ldap.c:3333(ads_get_dnshostname) ads_get_dnshostname: No dNSHostName attribute! [2011/05/13 02:14:11.122782, 0] libads/kerberos_keytab.c:286(ads_keytab_add_entry) ads_keytab_add_entry: unable to determine machine account's dns name in AD! root at storage-ZRMEIN:/usr/local/samba/bin# Following are the set up details: We are using Samba Version 3.5.6. Linux Kernel is 2.6.30. Please note the AD and the host time is proper and reverse lookup is also...

Hi All, I am getting Kerberos "enc type" problem that I can't explain: [2005/06/11 11:41:29, 1, pid=29355] libads/kerberos_verify.c:ads_keytab_verify_ticket(61) ads_keytab_verify_ticket: krb5_kt_start_seq_get failed (No such file or directory) [2005/06/11 11:41:29, 3, pid=29355] libads/kerberos_verify.c:ads_secrets_verify_ticket(193) ads_secrets_verify_ticket: enc type [16]

Hai Mourik-Jan, This looks all good. Only one thing in the config, you can remove : winbind nss info = rfc2307 Since your alread set ( for 4.6.x) : idmap config INTECH:unix_nss_info = yes Can you check the content of the keytab? klist -ke /etc/krb5.keytab post ( if needed anonymized ) the content you see. run : net ads keytab list -UAdministrator And did you by accident run : net ads

...processing:~# However no keytab is generated during join, despite having in the domain member smb.conf: > dedicated keytab file = /etc/krb5.keytab > kerberos method = secrets and keytab And the reason why it's not generated: > smb_krb5_kt_open failed (Key table name malformed) > ads_keytab_add_entry failed while adding 'HOST/PROCESSING' principal. > libnet_Join: > libnet_JoinCtx: struct libnet_JoinCtx > out: struct libnet_JoinCtx > account_name : NULL > netbios_domain_name : 'WRKGRP' > dns_domain...

...clikrb5.c:(624) ads_krb5_mk_req: Ticket (joey$@PSUL.PSU.EDU) in ccache (FILE:/tmp/krb5cc_0) is valid until: (Wed, 05 Dec 2007 06:22:31 CET - 1196832151) [2007/12/04 21:40:10, 10] libsmb/clikrb5.c:(735) Got KRB5 session key of length 16 [2007/12/04 21:40:10, 2] libads/kerberos_keytab.c:(260) ads_keytab_add_entry: Using default system keytab: FILE:/etc/krb5/krb5.keytab [2007/12/04 21:40:10, 1] libads/kerberos_keytab.c:(263) ads_keytab_add_entry: krb5_kt_resolve failed (No such file or directory) [2007/12/04 21:40:10, 2] utils/net.c:(1036) return code = 2 -- Mark Campbell Systems Analyst Digital Libr...

...rberos_secrets_store_des_salt: Storing salt "host/processing.SAMBA.COMPANY.COM at SAMBA.COMPANY.COM" > check lock order 1 for /var/lib/samba/private/secrets.tdb > release lock order 1 for /var/lib/samba/private/secrets.tdb > smb_krb5_kt_open failed (Key table name malformed) > ads_keytab_add_entry failed while adding 'HOST/PROCESSING' principal. > libnet_Join: > libnet_JoinCtx: struct libnet_JoinCtx > out: struct libnet_JoinCtx > account_name : NULL > netbios_domain_name : 'WRKGRP' > dns_domain...