Displaying 20 results from an estimated 52 matches for "authdata".
2014 Jan 02
0
[PATCH] libvirt-auth: Provide a friendlier wrapper around virConnectAuthPtrDefault (RHBZ#1044014).
...virConnectAuthPtrDefault->cbdata);
+}
+
static int
exists_libvirt_auth_event (guestfs_h *g)
{
@@ -165,31 +194,37 @@ guestfs___open_libvirt_connection (guestfs_h *g, const char *uri,
unsigned int flags)
{
virConnectAuth authdata;
- virConnectAuthPtr authdataptr;
virConnectPtr conn;
+ const char *authtype;
+
+ g->saved_libvirt_uri = uri;
+ g->wrapper_warning_done = false;
/* Did the caller register a GUESTFS_EVENT_LIBVIRT_AUTH event and
* call guestfs_set_libvirt_supported_credentials?
*/
if (g-...
2020 Sep 04
3
Incomplete attestation data for FIDO2 SKs?
...ing at verifying the attestation data
(ssh-sk-attest-v00) for a SK key, but I believe the data saved in this
structure is insufficient for completing verification of the attestation.
While the structure has enough information for U2F devices, FIDO2 devices
sign their attestation over a richer "authData" blob [1] (concatenated with
the challenge hash). The authData blob contains data not derivable from the
public/private key, such as a signature counter and the device's AAGUID. As
I understand it, the attestation structure should probably persist the
entire authData blob to enable validat...
2010 Jun 29
0
New user need help - AD/Krb/Smb
...]
comment = Network Share
path = /var/spool/samba/share01
valid users = "@Domain Users"
force group = Domain Users
read only = No
create mask = 0664
directory mask = 0775
guest ok = Yes
Samba Logs:
#less log.wb-GRANSAPORE
[2010/06/29 13:38:18, 1] libads/authdata.c:kerberos_return_pac(398)
kinit failed for 'thiago.ferreira at GRANSAPORE.CORP.DC' with:
Preauthentication failed (-1765328360)
[2010/06/29 13:38:34, 1]
libads/kerberos.c:smb_krb5_get_ntstatus_from_krb5_error_init_creds_opt(159)
no krb5_error
[2010/06/29 13:38:34, 1] libads/authdata....
2010 Dec 20
4
problem connecting DFS-share with winXP - successful with Vista & 7
...ssetup.c:reply_sesssetup_and_X_spnego(1210)
NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows
2002 5.1] PrimaryDomain=[]
[2010/12/20 10:30:17, 3] smbd/sesssetup.c:reply_spnego_negotiate(802)
reply_spnego_negotiate: Got secblob of size 1172
[2010/12/20 10:30:17, 3] libads/authdata.c:decode_pac_data(301)
Found account name from PAC: CLIENTXP$ []
[2010/12/20 10:30:17, 3] smbd/sesssetup.c:reply_spnego_kerberos(356)
Ticket name is [CLIENTXP$@DOMAIN.LOCAL]
[2010/12/20 10:30:17, 1] smbd/sesssetup.c:reply_spnego_kerberos(474)
Username DOMAIN00\CLIENTXP$ is invalid on t...
2005 Nov 21
1
Performance Problem / failed to verify PAC server signature
...and fixing it.
The log says:
-------------------------------------- 8< --------------------------------------
[2005/11/21 16:09:28, 3] libsmb/clikrb5.c:smb_krb5_verify_checksum(695)
smb_krb5_verify_checksum: krb5_c_verify_checksum() failed: Bad encryption type
[2005/11/21 16:09:28, 2] libads/authdata.c:check_pac_checksum(666)
check_pac_checksum: PAC Verification failed: Bad encryption type (-1765328196)
[2005/11/21 16:09:28, 0] libads/authdata.c:decode_pac_data(876)
decode_pac_data: failed to verify PAC server signature
[2005/11/21 16:09:28, 3] libads/kerberos_verify.c:ads_verify_ticket(416...
2004 Mar 30
1
FW: RID to SID Bug? Share ACL Access Denied
Hi,
Is this problem related to this bug?
Bugzilla Bug 1165
Samba ADS Kerberos login doesnt resolve correct groups when smbd is
su'ing to the uid
https://bugzilla.samba.org/show_bug.cgi?id=1165
Anyone? Please respond. I am desperate to get this working.
Thank you,
Steve
-----Original Message-----
From: Aden, Steve
Sent: Friday, March 26, 2004 3:24 PM
To: samba@lists.samba.org
2012 Oct 13
0
[PATCH] New APIs: Model libvirt authentication events through the API.
...FS_EVENT_LIBVIRT_AUTH) != 0)
+ return 1;
+
+ return 0;
+}
+
+/* Open a libvirt connection (called from other parts of the library). */
+virConnectPtr
+guestfs___open_libvirt_connection (guestfs_h *g, const char *uri,
+ unsigned int flags)
+{
+ virConnectAuth authdata;
+ virConnectAuthPtr authdataptr;
+ virConnectPtr conn;
+
+ /* Did the caller register a GUESTFS_EVENT_LIBVIRT_AUTH event and
+ * call guestfs_set_libvirt_supported_credentials?
+ */
+ if (g->nr_supported_credentials > 0 && exists_libvirt_auth_event (g)) {
+ memset (&au...
2009 Jul 07
0
Problems with shares after upgrading to 3.4.0
...y share on
the updated server, most of them cannot. Running samba with log level 3
gives the following logs (only part shown)
Almost at the beginning of connection there is a difference at the following
call:
working client:
[2009/07/07 10:35:43, 3, pid=29169, effective(0, 0), real(0, 0)] libads/authdata.c:302(decode_pac_data)
Found account name from PAC: ATPCS7DC$ [ATPCS7DC$]
not working client:
[2009/07/07 10:27:26, 3, pid=28626, effective(0, 0), real(0, 0)] libads/authdata.c:302(decode_pac_data)
Found account name from PAC: SK17007C$ []
I don't know where this difference comes from bu...
2010 Apr 13
1
unexplaind log entry
...m issues with a Samba installation on a Netgear Ready Nas and I was wondering whether any clever so and so could explain what it means.
Log entry
[2010/04/13 15:40:17, 1] libads/kerberos.c:130(smb_krb5_get_ntstatus_from_krb5_error_init_creds_opt)
no krb5_error
[2010/04/13 15:40:17, 1] libads/authdata.c:401(kerberos_return_pac)
kinit failed for 'admin at domain.COM' with: Client not found in Kerberos database (-1765328378)
[2010/04/13 15:40:17, 2] winbindd/winbindd_pam.c:1730(winbindd_dual_pam_auth)
Plain-text authentication for user admin returned NT_STATUS_NO_SUCH_USER (PAM: 10)...
2007 Aug 15
1
Performance Problem / failed to verify PAC server signature
...s_verify.c:ads_secrets_verify_ticket(243)
ads_secrets_verify_ticket: enc type [3] decrypted message !
......
[2007/08/13 17:52:01, 3] libsmb/clikrb5.c:smb_krb5_verify_checksum(697)
smb_krb5_verify_checksum: krb5_c_verify_checksum() failed: Bad
encryption type
[2007/08/13 17:52:01, 2] libads/authdata.c:check_pac_checksum(659)
check_pac_checksum: PAC Verification failed: Bad encryption type
(-1765328196)
[2007/08/13 17:52:01, 0] libads/authdata.c:decode_pac_data(870)
decode_pac_data: failed to verify PAC server signature
[2007/08/13 17:52:01, 3]
libads/kerberos_verify.c:ads_verify_tick...
2014 Oct 30
2
[PATCH 0/2] v2v: Add --password-file parameter (RHBZ#1158526).
These patches add the --password-file parameter, allowing you to pass
a single password via a file.
https://bugzilla.redhat.com/show_bug.cgi?id=1158526
Rich.
2012 Dec 30
1
DFS not working on Win XP
...file with 2744 lines and the machine 2 (working) produced a trace file with 56 lines. (both machine have the same configure and the same account are taken from the client)
The first difference of the log files are that after "reply_spnego_negotiate" machine 1 are try to use "libads/authdata" and the machine 2 are "/libcli/auth/ntlmssp"
What are the different on both machine? And why became are the DFS-Root share to run?
Smb.conf:
[global]
workgroup = INT
realm = INT.TMG
server string = %h server (Samba, Ubuntu)
socket options = TCP_NOD...
2009 Oct 15
1
cli_session_setup: NT1 session setup failed: NT_STATUS_LOGON_FAILURE
...samba-3.0.25b-0.4E.6
I'm map a share drive and I get asked for user name and password. Right now I'm just trouble shooting the samba part. "smb" service is running and "winbind" server is running too.
The /var/log/samba/xxxx log file has the following in it:
libads/authdata.c:pac_io_pac_info_hdr_ctr(569)
unknown PAC type 12
[2009/10/14 16:51:05, 3] smbd/sesssetup.c:reply_spnego_kerberos(321)
Ticket name is [KKHAGANIXP$@STEC-INC.AD]
[2009/10/14 16:51:05, 1] smbd/sesssetup.c:reply_spnego_kerberos(439)
Username STEC-INC=KKHAGANIXP$ is invalid on this system
[2009/1...
2020 Oct 12
2
samba AD problem after re-join domain
...machines since I automated the installation process, and that rebuild
was working perfectly many many times, but now it is failed.? In winbind
log every time I try to login I'm mostly seeing:
[2020/10/11 21:33:45.498701,? 1, pid=3637, effective(1004, 0),
real(1004, 0)] ../../source3/libads/authdata.c:177(kerberos_return_pac)
? kinit failed for 'jas at AD.EECS.YORKU.CA' with: Preauthentication
failed (-1765328360)
.. which clearly doesn't make sense given that the net ads join
completed successfully, the computer entry is there, just like before.?
In fact, I can login to the s...
2018 Jul 21
2
Failed to establish your Kerberos Ticket cache due time differences with the domain controller
...rony will set the DC's clock as well as providing the time server for domain computers?) but the problem remains. When I log in (via ssh) I get the above message (as in the subject) and the following is logged in the log.wb-MICROLYNX file:
[2018/07/21 16:37:52.194656, 1] ../source3/libads/authdata.c:175(kerberos_return_pac)
kinit failed for 'roy at MICROLYNX.ORG' with: Clock skew too great (-1765328347)
Yet the system time is correct. Where is it getting time from?
Roy
2014 Feb 14
1
Public Share on Samba with ADS security
...2014/02/13 16:04:42.031246, 3] smbd/sesssetup.c:1114(reply_sesssetup_and_X_spnego)
NativeOS=[] NativeLanMan=[] PrimaryDomain=[]
[2014/02/13 16:04:42.031303, 3] smbd/sesssetup.c:660(reply_spnego_negotiate)
reply_spnego_negotiate: Got secblob of size 2437
[2014/02/13 16:04:42.163990, 3] libads/authdata.c:332(decode_pac_data)
Found account name from PAC: McNamaB [Bradley W. McNamara]
[2014/02/13 16:04:42.164061, 3] auth/user_krb5.c:50(get_user_from_kerberos_info)
Kerberos ticket principal name is [McNamaB at SPU.COS.LOCAL]
[2014/02/13 16:04:42.164296, 1] auth/user_krb5.c:162(get_user_from_ke...
2012 Nov 30
2
User is invalid on this system
...2012/11/29 15:23:58.120409, 3] smbd/sesssetup.c:1107(reply_sesssetup_and_X_spnego)
NativeOS=[] NativeLanMan=[] PrimaryDomain=[]
[2012/11/29 15:23:58.120498, 3] smbd/sesssetup.c:660(reply_spnego_negotiate)
reply_spnego_negotiate: Got secblob of size 1680
[2012/11/29 15:23:58.124198, 3] libads/authdata.c:332(decode_pac_data)
Found account name from PAC: kevin_elliott [Kevin Elliott]
[2012/11/29 15:23:58.124309, 3] auth/user_krb5.c:50(get_user_from_kerberos_info)
Kerberos ticket principal name is [kevin_elliott at CBJ.LOCAL]
[2012/11/29 15:23:58.124710, 1] auth/user_krb5.c:162(get_user_from_...
2017 Sep 08
2
[PATCH] RFC: v2v: add and use libvirt connection objects
...conn, NULL, ignore_errors);
+
+ CAMLreturn (Val_libvirtconn (conn));
+}
+
+value
+v2v_libvirt_connect_rw (value passwordv, value connv, value unitv)
+{
+ CAMLparam3 (passwordv, connv, unitv);
const char *password = NULL;
const char *conn_uri = NULL;
- const char *domname;
virConnectAuth authdata;
/* We have to assemble the error on the stack because a dynamic
* string couldn't be freed.
*/
char errmsg[ERROR_MESSAGE_LEN];
- virErrorPtr err;
virConnectPtr conn;
- virDomainPtr dom;
- int is_test_uri = 0;
- char *xml;
if (passwordv != Val_int (0))
password =...
2019 Apr 08
0
[PATCH v4 3/7] v2v: switch to ocaml-libvirt
...g);
- }
-
- CAMLreturnT (virStoragePoolPtr, pool);
-}
-
-value
-v2v_dumpxml (value passwordv, value connv, value domnamev)
-{
- CAMLparam3 (passwordv, connv, domnamev);
- CAMLlocal1 (retv);
- const char *password = NULL;
- const char *conn_uri = NULL;
- const char *domname;
- virConnectAuth authdata;
- /* We have to assemble the error on the stack because a dynamic
- * string couldn't be freed.
- */
- char errmsg[ERROR_MESSAGE_LEN];
- virErrorPtr err;
- virConnectPtr conn;
- virDomainPtr dom;
- int is_test_uri = 0;
- char *xml;
-
- if (passwordv != Val_int (0))
- password =...
2018 Jul 21
0
Failed to establish your Kerberos Ticket cache due time differences with the domain controller
...ock as well as providing the time server for domain
> computers?) but the problem remains. When I log in (via ssh) I
> get the above message (as in the subject) and the following is logged
> in the log.wb-MICROLYNX file:
>
> [2018/07/21 16:37:52.194656,
> 1] ../source3/libads/authdata.c:175(kerberos_return_pac) kinit failed
> for 'roy at MICROLYNX.ORG' with: Clock skew too great (-1765328347)
>
> Yet the system time is correct. Where is it getting time from?
>
> Roy
>
>
Strange, you say the time is okay, but the error says it isn't.
Try t...