Displaying 20 results from an estimated 50 matches for "ads_sasl_spnego_gensec_bind".
2016 Jun 16
0
wbinfo -g stops after some hours
...:
[2016/06/14 19:15:02.239460, 0] ../source3/librpc/crypto/gse.c:341(gse_get_client_auth_token)
gss_init_sec_context failed with [ Miscellaneous failure (see text): Message stream modified]
[2016/06/14 19:15:02.239604, 0] ../source3/libads/sasl.c:764(ads_sasl_spnego_bind)
kinit succeeded but ads_sasl_spnego_gensec_bind(KRB5) failed: An internal error occurred.
[2016/06/14 19:25:01.370737, 0] ../source3/librpc/crypto/gse.c:341(gse_get_client_auth_token)
gss_init_sec_context failed with [ Miscellaneous failure (see text): Message stream modified]
[2016/06/14 19:25:04.498488, 0] ../source3/libads/sasl.c:764(ads_...
2016 Oct 19
3
auth problems with samba 4.4.6 (winbind) *(suppected bug)
...terminate (is_parent=0)
[2016/10/19 01:39:57.249786, 0] ../source3/librpc/crypto/gse.c:341(gse_get_client_auth_token)
gss_init_sec_context failed with [ The context has expired: Success]
[2016/10/19 01:39:57.255431, 0] ../source3/libads/sasl.c:785(ads_sasl_spnego_bind)
kinit succeeded but ads_sasl_spnego_gensec_bind(KRB5) failed: An internal error occurred.
[2016/10/19 01:44:56.909360, 0] ../source3/librpc/crypto/gse.c:341(gse_get_client_auth_token)
gss_init_sec_context failed with [ The context has expired: Success]
Before ( samba 4.4.5 ) log.wb-NTDOM
gss_init_sec_context failed with [ The context...
2019 Apr 12
1
Joining Ubuntu Server to Domain - "kinit succeeded but ads_sasl_spnego_gensec_bind failed"
...rom "net ads join:"
<-----------------------
root at samba:/etc/samba# net ads join -U administrator
Enter administrator's password:
gse_get_client_auth_token: gss_init_sec_context failed with [ Miscellaneous
failure (see text): Message stream modified](______)
kinit succeeded but ads_sasl_spnego_gensec_bind(KRB5) failed for ldap/dc0
with user[administrator] realm[CORP.COMPANY.INTERNAL]: The attempted logon
is invalid. This is either due to a bad username or authentication
information.
Failed to join domain: failed to connect to AD: The attempted logon is
invalid. This is either due to a bad username o...
2020 May 17
2
Upgrade from 4.11.6 to 4.12.2 created authentication issues
...s
Remote Desktop Users Group
Domain Admins
If run as root I get this.
root at osticket:~# net ads user info administrator -U administrator
Enter administrator's password:
gss_init_sec_context failed with [ Miscellaneous failure (see text):
encryption type 3 not supported]
kinit succeeded but ads_sasl_spnego_gensec_bind(KRB5) failed: An
internal error occurred.
gss_init_sec_context failed with [ Miscellaneous failure (see text):
encryption type 3 not supported]
gss_init_sec_context failed with [ Miscellaneous failure (see text):
encryption type 3 not supported]
kinit succeeded but ads_sasl_spnego_gensec_bind(KR...
2019 Oct 07
2
Domain Member Join Problems
...ADC and a Debian bust
domain member.? I've got a windows machine that has joined the domain
and I can login to it.
The Debian domain member is throwing a DNS error when I do net ads join
-Uadministrator:
net ads join -Uadministrator
Enter administrator's password:
kinit succeeded but ads_sasl_spnego_gensec_bind(KRB5) failed for
ldap/athena.edm-inc.com with user[administrator] realm[EDM-INC.COM]:
Strong(er) authentication required
Using short domain name -- EDM
Joined 'SNAPS2' to dns domain 'edm-inc.com'
DNS Update for snaps2.edm-inc.com failed: ERROR_DNS_UPDATE_FAILED
DNS update failed:...
2020 May 17
4
Upgrade from 4.11.6 to 4.12.2 created authentication issues
...root I get this.
>>
>> root at osticket:~# net ads user info administrator -U administrator
>> Enter administrator's password:
>> gss_init_sec_context failed with [ Miscellaneous failure (see text):
>> encryption type 3 not supported]
>> kinit succeeded but ads_sasl_spnego_gensec_bind(KRB5) failed: An
>> internal error occurred.
>> gss_init_sec_context failed with [ Miscellaneous failure (see text):
>> encryption type 3 not supported]
>> gss_init_sec_context failed with [ Miscellaneous failure (see text):
>> encryption type 3 not supported]
>&...
2016 Oct 19
0
auth problems with samba 4.4.6 (winbind) *(suppected bug)
...39:57.249786, 0]
> ../source3/librpc/crypto/gse.c:341(gse_get_client_auth_token)
>
> gss_init_sec_context failed with [ The context has expired: Success]
>
> [2016/10/19 01:39:57.255431, 0]
> ../source3/libads/sasl.c:785(ads_sasl_spnego_bind)
>
> kinit succeeded but ads_sasl_spnego_gensec_bind(KRB5) failed: An
> internal error occurred.
>
> [2016/10/19 01:44:56.909360, 0]
> ../source3/librpc/crypto/gse.c:341(gse_get_client_auth_token)
>
> gss_init_sec_context failed with [ The context has expired: Success]
>
>
>
> Before ( samba 4.4.5 ) log.wb-NTDOM...
2016 Nov 14
2
Member server does not show users from trusted domain
I have a samba classic domain, called it "DomainA." All domain
controllers and servers are running 3.6.25 on Solaris 11.
The PDC and BDC use an LDAP backend for unix, samba and idmap
data. Member servers use LDAP backend for unix accounts, so the
underlying unix and group accounts are consistent.
There is a trust relationship with Windows 2008 AD domain
2016 Jul 11
2
Testing a forest trusts in Samba 4.4.5 AD environment
...7/11 13:48:25.449458, 0]
../source3/librpc/crypto/gse.c:341(gse_get_client_auth_token)
gss_init_sec_context failed with [ Miscellaneous failure (see text):
Key version is not available]
[2016/07/11 13:48:25.449700, 0]
../source3/libads/sasl.c:773(ads_sasl_spnego_bind)
kinit succeeded but ads_sasl_spnego_gensec_bind(KRB5) failed: An
internal error occurred.
[2016/07/11 13:48:26.015483, 0]
../source3/librpc/crypto/gse.c:341(gse_get_client_auth_token)
gss_init_sec_context failed with [ Miscellaneous failure (see text):
Key version is not available]
[2016/07/11 13:48:26.444479, 0]
../source3/librpc/crypt...
2016 Nov 17
0
wbinfo show users from trusted domain
...ads_sasl_spnego_bind: got OID=1.2.840.113554.1.2.2.3
[2016/11/17 16:24:44.946655, 3]
../source3/libads/sasl.c:733(ads_sasl_spnego_bind)
ads_sasl_spnego_bind: got OID=1.3.6.1.4.1.311.2.2.10
[2016/11/17 16:24:45.250387, 0]
../source3/libads/sasl.c:336(ads_sasl_spnego_gensec_bind)
ads_setup_sasl_wrapping() failed: The request is not supported.
[2016/11/17 16:24:45.256988, 0]
../source3/libads/sasl.c:779(ads_sasl_spnego_bind)
kinit succeeded but ads_sasl_spnego_gensec_bind(KRB5) failed:
The request is not supported.
[201...
2016 Nov 18
2
Wbinfo does show users from trusted domain / RPC error
...d: got OID=1.2.840.113554.1.2.2.3
> [2016/11/17 16:24:44.946655, 3]
> ../source3/libads/sasl.c:733(ads_sasl_spnego_bind)
> ads_sasl_spnego_bind: got OID=1.3.6.1.4.1.311.2.2.10
> [2016/11/17 16:24:45.250387, 0]
> ../source3/libads/sasl.c:336(ads_sasl_spnego_gensec_bind)
> ads_setup_sasl_wrapping() failed: The request is not supported.
> [2016/11/17 16:24:45.256988, 0]
> ../source3/libads/sasl.c:779(ads_sasl_spnego_bind)
> kinit succeeded but ads_sasl_spnego_gensec_bind(KRB5)
> failed: The request is not...
2016 Oct 15
0
Bug 12369 - Downgrade to 4.4.5?
...o the sernet-samba-4.5.0-4 packages on
3 CentOS 6.8 and 1 CentOS 7.2-1511 Samba 4 AD clients. I notice in the
client samba logs that I am seeing numerous errors as described in bug
12369:
[2016/10/15 10:20:01.911168, 0]
../source3/libads/sasl.c:785(ads_sasl_spnego_bind)
kinit succeeded but ads_sasl_spnego_gensec_bind(KRB5) failed: An
internal error occurred.
[2016/10/15 10:20:01.942716, 0]
../source3/librpc/crypto/gse.c:341(gse_get_client_auth_token)
gss_init_sec_context failed with [ The context has expired: Success]
[2016/10/15 10:20:01.942846, 0]
../source3/libads/sasl.c:785(ads_sasl_spnego_bind)...
2020 May 17
0
Upgrade from 4.11.6 to 4.12.2 created authentication issues
...nf ?
>
> If run as root I get this.
>
> root at osticket:~# net ads user info administrator -U administrator
> Enter administrator's password:
> gss_init_sec_context failed with [ Miscellaneous failure (see text):
> encryption type 3 not supported]
> kinit succeeded but ads_sasl_spnego_gensec_bind(KRB5) failed: An
> internal error occurred.
> gss_init_sec_context failed with [ Miscellaneous failure (see text):
> encryption type 3 not supported]
> gss_init_sec_context failed with [ Miscellaneous failure (see text):
> encryption type 3 not supported]
> kinit succeeded but...
2016 Nov 22
0
Samba 4 "Classic PDC" trusts fail with Win 2012 domain but succeed Win 2008
...13554.1.2.2.3
>> [2016/11/17 16:24:44.946655, 3]
>> ../source3/libads/sasl.c:733(ads_sasl_spnego_bind)
>> ads_sasl_spnego_bind: got OID=1.3.6.1.4.1.311.2.2.10
>> [2016/11/17 16:24:45.250387, 0]
>> ../source3/libads/sasl.c:336(ads_sasl_spnego_gensec_bind)
>> ads_setup_sasl_wrapping() failed: The request is not supported.
>> [2016/11/17 16:24:45.256988, 0]
>> ../source3/libads/sasl.c:779(ads_sasl_spnego_bind)
>> kinit succeeded but ads_sasl_spnego_gensec_bind(KRB5)
>> failed:...
2016 Jul 11
0
Testing a forest trusts in Samba 4.4.5 AD environment
...> ../source3/librpc/crypto/gse.c:341(gse_get_client_auth_token)
> gss_init_sec_context failed with [ Miscellaneous failure (see text):
> Key version is not available]
> [2016/07/11 13:48:25.449700, 0]
> ../source3/libads/sasl.c:773(ads_sasl_spnego_bind)
> kinit succeeded but ads_sasl_spnego_gensec_bind(KRB5) failed: An
> internal error occurred.
> [2016/07/11 13:48:26.015483, 0]
> ../source3/librpc/crypto/gse.c:341(gse_get_client_auth_token)
> gss_init_sec_context failed with [ Miscellaneous failure (see text):
> Key version is not available]
> [2016/07/11 13:48:26.444479, 0...
2019 Mar 01
8
(no subject)
...e following:
* LANG=C LOGNAME=root /usr/bin/net -s
/var/cache/realmd/realmd-smb-conf.3D2AXZ -U Administrator ads join
ad.example.com
gss_init_sec_context failed with [ Miscellaneous failure (see
text): Server (ldap/samba-dc.ad.example.com at AD.EXAMPLE.COM)
unknown]
kinit succeeded but ads_sasl_spnego_gensec_bind(KRB5) failed: for
ldap/samba-dc.ad.example.com user[Administrator]
realm[AD.EXAMPLE.COM]: An internal error occurred.
At this point, I'm stumped. This is on a very fresh install, so it
should be very easy to reproduce.
Is what I'm attempting to do a valid operation? Or is it weird that
re...
2016 May 02
3
[Announce] Samba 4.4.3 Available for Download
...y validate MIC if "map to guest" is not being used.
* BUG 11849: auth/ntlmssp: Add ntlmssp_{client,server}:force_old_spnego
option for testing.
* BUG 11850: NetAPP SMB servers don't negotiate NTLMSSP_SIGN.
* BUG 11858: Allow anonymous smb connections.
* BUG 11870: Fix ads_sasl_spnego_gensec_bind(KRB5).
* BUG 11872: Fix 'wbinfo -u' and 'net ads search'.
o Tom Mortensen <tomm at lime-technology.com>
* BUG 11875: nss_wins: Fix the hostent setup.
o Garming Sam <garming at catalyst.net.nz>
* BUG 11789: build: Mark explicit dependencies on pytalloc-util....
2016 May 02
3
[Announce] Samba 4.4.3 Available for Download
...y validate MIC if "map to guest" is not being used.
* BUG 11849: auth/ntlmssp: Add ntlmssp_{client,server}:force_old_spnego
option for testing.
* BUG 11850: NetAPP SMB servers don't negotiate NTLMSSP_SIGN.
* BUG 11858: Allow anonymous smb connections.
* BUG 11870: Fix ads_sasl_spnego_gensec_bind(KRB5).
* BUG 11872: Fix 'wbinfo -u' and 'net ads search'.
o Tom Mortensen <tomm at lime-technology.com>
* BUG 11875: nss_wins: Fix the hostent setup.
o Garming Sam <garming at catalyst.net.nz>
* BUG 11789: build: Mark explicit dependencies on pytalloc-util....
2016 Jul 12
2
Testing a forest trusts in Samba 4.4.5 AD environment
...rypto/gse.c:341(gse_get_client_auth_token)
> > gss_init_sec_context failed with [ Miscellaneous failure (see text):
> > Key version is not available]
> > [2016/07/11 13:48:25.449700, 0]
> > ../source3/libads/sasl.c:773(ads_sasl_spnego_bind)
> > kinit succeeded but ads_sasl_spnego_gensec_bind(KRB5) failed: An
> > internal error occurred.
> > [2016/07/11 13:48:26.015483, 0]
> > ../source3/librpc/crypto/gse.c:341(gse_get_client_auth_token)
> > gss_init_sec_context failed with [ Miscellaneous failure (see text):
> > Key version is not available]
> > [...
2017 Mar 01
2
[Announce] Samba 4.4.10 Available for Download
...nherit" = yes.
o Stefan Metzmacher <metze at samba.org>
* BUG 11830: Domain member cannot resolve trusted domains' users.
* BUG 12262: Domain join broken under certain circumstances after winbindd
changed the trust password.
* BUG 12480: 'kinit' succeeded, but ads_sasl_spnego_gensec_bind(KRB5) failed: An
internal error occurred (with MIT krb5).
* BUG 12540: s3:smbd: allow "server min protocol = SMB3_00" to go via "SMB
2.???" negprot.
* BUG 12581: 'smbclient' fails on bad endianess when listing shares from
Solaris kernel SMB server on...