search for: backupkey

i get this error when compiling samba 4 [3712/3935] Linking default/source4/rpc_server/libdcerpc-server.so default/source4/rpc_server/backupkey/dcesrv_backupkey_21.o: In function `get_pk_from_raw_keypair_params': dcesrv_backupkey.c:(.text+0xb5e): undefined reference to `gnutls_x509_privkey_import_rsa_raw2' default/source4/rpc_server/backupkey/dcesrv_backupkey_21.o: In function `get_and_verify_access_check': dcesrv_backupkey....

Hi . I upgraded my samba4 servers from 4.1.17 to 4.2.1 . After upgrading , the samba4 servers becomed very slow and these error logs occured : [2015/04/27 08:09:08.279400, 1] ../source4/rpc_server/backupkey/dcesrv_backupke y.c:1423(bkrp_do_retrieve_server_wrap_key) Unable to fetch value for secret BCKUPKEY_34847c15-efd9-4430-ba82-bf7d3160e9e1 , are we an undetected RODC? [2015/04/27 08:09:08.454487, 1] ../source4/rpc_server/backupkey/dcesrv_backupke y.c:1423(bkrp_do_retrieve_server_wrap_key) Un...

...ws PC believes it is failing to reset the access to its DPAPI store (where the saved passwords are kept) - hence the repitition in the samba log and the Windows event log as the client tries over-and-over again. I don't see any specific error in the samba log though. Any advice on getting this backupkey/DPAPI functionality to work very much appreciated. In the below the domain controller is soda.mbsw.prv.mercedes-benzsouthwest.co.uk and the client is ex-wrk-11, the user whose password is being changed is wtr30. Audit failure log entries in Windows Event Viewer (from Windows 7 Pro PC), there are...

...nonymous = 0 auth methods = sam winbind server services = winbindd, s3fs, rpc, nbt, wrepl, cldap, ldap, kdc, drepl, ntp_signd, kcc, dnsupdate dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon, lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6, backupkey, dnsserver, remote, winreg, srvsvc RDP working configuration but not the new client and join restrict anonymous = 2 auth methods = sam winbind server services = winbindd, s3fs, rpc, nbt, wrepl, cldap, ldap, kdc, drepl, ntp_signd, kcc, dnsupdate dcerpc endpoin...

Is there a corresponding bug number for the Samba bugzilla so that I can track when this is fixed for vanilla samba? On 26 November 2014 at 20:01, Andrew Bartlett <abartlet at samba.org> wrote: > On Mon, 2014-11-24 at 11:35 +0100, Roberto Su?rez Soto wrote: > > > > Error verifying signature: parse > > error > > --------------ms020506010503000409040509 > >

For anybody interested in tracking when this is resolved for mainline samba4 there is now a bugzilla record here: https://bugzilla.samba.org/show_bug.cgi?id=10980 On 2 December 2014 at 11:52, Kirin van der Veer < kirin.vanderveer at planetinnovation.com.au> wrote: > Is there a corresponding bug number for the Samba bugzilla so that I can > track when this is fixed for vanilla samba?

...2.0rc3 is not production ready, but has anyone else come across this issue and better still found a solution that leaves KB2992611 in place? > > Just a heads-up that I am looking into this for a client. The protocol > involved is MS-BKRP, eg the protected_storage pipe serviced by our > backupkey RPC server in the source4 codebase. > > At this stage it looks like a case of increased expectations of what the > server must deliver over this protocol, expectations that we don't > currently meet. I've already started a thread with Microsoft. > > Failure to meet thos...

...ault/source3/lib/netapi/examples/file/file_enum [3710/3935] Linking default/source3/lib/netapi/examples/localgroup/localgroup_setinfo [3711/3935] Linking default/source3/lib/netapi/examples/user/user_enum [3712/3935] Linking default/source4/rpc_server/libdcerpc-server.so default/source4/rpc_server/backupkey/dcesrv_backupkey_21.o: In function `get_pk_from_raw_keypair_params': dcesrv_backupkey.c:(.text+0xb5e): undefined reference to `gnutls_x509_privkey_import_rsa_raw2' default/source4/rpc_server/backupkey/dcesrv_backupkey_21.o: In function `get_and_verify_access_check': dcesrv_backupkey....

...server services = winbindd, s3fs, rpc, nbt, wrepl, cldap, ldap, >> kdc, drepl, ntp_signd, kcc, dnsupdate >> dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, >> netlogon, lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, >> eventlog6, >> backupkey, dnsserver, remote, winreg, srvsvc >> >> >> RDP working configuration but not the new client and join >> >> >> restrict anonymous = 2 >> auth methods = sam winbind >> server services = winbindd, s3fs, rpc, nbt, wrepl, c...

...thods = sam, winbind, ntdomain, ntdomain:winbind > server services = s3fs, winbind, rpc, nbt, wrepl, cldap, ldap, kdc, drepl, ntp_signd, kcc, dnsupdate > dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon, lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6, backupkey, dnsserver, remote, winreg, srvsvc > ... I added the missing dcerpc endpoint servers (remote, winreg, srvsvc) and auth methods (sam, winbind, ntdomain, ntdomain:winbind) which are not in smb.conf by default and now RDP Connections are working. I hope I will find some information about these s...

...arder = 192.168.1.1 printing = bsd server services = s3fs, rpc, wrepl, ldap, cldap, kdc, drepl, winbind, ntp_signd, kcc, dnsupdate, dns dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon, lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6, backupkey, dnsserver restrict anonymous = 1 vfs objects = acl_xattr map acl inherit = Yes store dos attributes = no unix extensions = no inherit acls = yes inherit permissions = yes ea support = no idmap_ldb:use rfc2307 = yes...

...l move on from here. I've > learned a lot. > > If you are interested why it didn't work before: dcerpc endpoint servers = epmapper, mapiproxy, dnsserver Is turning off this lot: wkssvc, rpcecho, samr, netlogon, lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6, backupkey If you run 'samba-tool testparm -v' , you will get all the defaults as well as what is in smb.conf, amongst which is: dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon, lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6, backupkey, dnsserver So by settin...

Hi list, we have a problem with users that have personal certificates. When they change their password via the Ctrl-Alt-Del prompt, their personal certificates can no longer be used to authenticate. This happens with Windows 7 Professional joined to a Samba legacy domain. I've tested Samba 4.0.22 and 4.2.0 and they both show the same behaviour. When I leave the domain, and try it with

...: not found Checking for gnutls >= 1.4.0 and broken versions : not found /usr/local/src/samba-4.2.1/source4/lib/tls/wscript:37: error: Building the AD DC requires GnuTLS (eg libgnutls-dev, gnutls-devel) for ldaps:// support and for the BackupKey protocol libgnutls28-dev is already installed : apt-cache show libgnutls28-dev Package: libgnutls28-dev Source: gnutls28 Version: 3.3.8-6 Installed-Size: 2885 Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint at lists.alioth.debian.org> Architecture: amd64 Replaces: gnutls-dev Provide...

...for gnutls> = 3.0.0s: not found Checking for program pkg-config: not found Checking for gnutls> = 1.4.0 and broken versions: not found /srv/wget/samba-4.8.3/source4/lib/tls/wscript:51: error: Building the AD DC requires GnuTLS (eg libgnutls-dev, gnutls-devel) for ldaps: // support and for the BackupKey protocol But libgnutls-dev is installed: dpkg -l | grep libgnutls-dev ii libgnutls-dev 2.12.23-12ubuntu2.8 amd64 GNU TLS library - development files Where is the problem? Many thanks for the help...

On Samba AD DC most of these enpoint server are already running -- dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon, lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6, backupkey, dnsserver, mapiproxy Use samba-tool testparm -v first before adding them to the smb.conf I say this because I could not "join" Windows clients to Samba with these running from smb.conf Rowland indicated these stopped certain other services -- wkssvc, rpcecho, samr, netlogon, lsarpc,...

...mb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case. * BUG 11175: Fix lots of winbindd zombie processes on Solaris platform. * BUG 11177: s3: libsmbclient: Add missing talloc stackframe. o Andrew Bartlett <abartlet at samba.org> * BUG 11135: backupkey: Explicitly link to gnutls and gcrypt. * BUG 11174: backupkey: Use ndr_pull_struct_blob_all(). o Ralph Boehme <slow at samba.org> * BUG 11125: vfs_fruit: Enhance handling of malformed AppleDouble files. o Samuel Cabrero <samuelcabrero at kernevil.me> * BUG 9791: Init...

...mb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case. * BUG 11175: Fix lots of winbindd zombie processes on Solaris platform. * BUG 11177: s3: libsmbclient: Add missing talloc stackframe. o Andrew Bartlett <abartlet at samba.org> * BUG 11135: backupkey: Explicitly link to gnutls and gcrypt. * BUG 11174: backupkey: Use ndr_pull_struct_blob_all(). o Ralph Boehme <slow at samba.org> * BUG 11125: vfs_fruit: Enhance handling of malformed AppleDouble files. o Samuel Cabrero <samuelcabrero at kernevil.me> * BUG 9791: Init...

...arder = 192.168.1.1 printing = bsd server services = s3fs, rpc, wrepl, ldap, cldap, kdc, drepl, winbind, ntp_signd, kcc, dnsupdate, dns dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon, lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6, backupkey, dnsserver restrict anonymous = 1 map acl inherit = no store dos attributes = yes unix extensions = no ea support = no idmap_ldb:use rfc2307 = yes browseable= yes writable = yes read only= no create mask = 770...

...wrote: > On 01/05/15 15:29, Steve Ankeny wrote: >> On Samba AD DC most of these enpoint server are already running -- >> >> dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon, >> lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6, >> backupkey, dnsserver, mapiproxy >> >> Use samba-tool testparm -v first before adding them to the smb.conf >> >> I say this because I could not "join" Windows clients to Samba with >> these running from smb.conf >> >> Rowland indicated these stopped certain...