search for: cli_session_setup_kerberos

...38 winbindd[17222]: [2009/05/28 19:12:07, 2] winbindd/winbindd_util.c:add_trusted_domain(235) May 28 19:12:07 mxln133738 winbindd[17222]: Added domain RES RES.HU.CORP S-1-5-21-698458317-4263495693-249106618 May 28 19:12:07 mxln133738 winbindd[17228]: [2009/05/28 19:12:07, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(617) May 28 19:12:07 mxln133738 winbindd[17228]: Doing kerberos session setup May 28 19:12:07 mxln133738 winbindd[17228]: [2009/05/28 19:12:07, 1] libsmb/clikrb5.c:ads_krb5_mk_req(686) May 28 19:12:07 mxln133738 winbindd[17228]: ads_krb5_mk_req: krb5_get_credentials failed for bindc01$@RES (Ca...

...word for Administrator@COROD.LOCAL: As you can see kerberors seems works well, but when i tried to join to ADS routput is: Type or value exists. I checked the computer folder in Active Directory, but there isn't the samba server. #### winbindd.log [2006/05/22 10:23:17, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(544) spnego_gen_negTokenTarg failed: No credentials cache found [2006/05/22 10:23:17, 1] libsmb/clikrb5.c:ads_krb5_mk_req(323) krb5_cc_get_principal failed (No credentials cache found) [2006/05/22 10:23:17, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(544) spnego_gen_negTokenTarg failed:...

...22]: [2009/05/28 19:12:07, 2] winbindd/winbindd_util.c:add_trusted_domain(235) > > May 28 19:12:07 mxln133738 winbindd[17222]: Added domain RES RES.HU.CORP S-1-5-21-698458317-4263495693-249106618 > May 28 19:12:07 mxln133738 winbindd[17228]: [2009/05/28 19:12:07, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(617) > > May 28 19:12:07 mxln133738 winbindd[17228]: Doing kerberos session setup > May 28 19:12:07 mxln133738 winbindd[17228]: [2009/05/28 19:12:07, 1] libsmb/clikrb5.c:ads_krb5_mk_req(686) > May 28 19:12:07 mxln133738 winbindd[17228]: ads_krb5_mk_req: krb5_get_credentials failed...

...starting I'm seeing the following in the logs which I'm guessing is the cause for me being unable to authenticate any users: log.wb-PRESIDIO ads_krb5_mk_req: krb5_get_credentials failed for pdc$@PRESIDIO (Cannot find KDC for requested realm) [2009/09/23 10:54:31, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(624) cli_session_setup_kerberos: spnego_gen_negTokenTarg failed: Cannot find KDC for requested realm [2009/09/23 10:54:31, 0] rpc_client/cli_pipe.c:cli_pipe_verify_schannel(494) cli_pipe_verify_schannel: auth_len 56. log.winbindd [2009/09/23 10:54:30, 0] winbindd/winbindd_cache.c:initialize_...

...cli_session_setup_spnego(880) cli_session_setup_spnego: got a bad server principal, trying to guess ... [2008/11/05 11:28:06, 3] libsmb/cliconnect.c:cli_session_setup_spnego(908) cli_session_setup_spnego: guessed server principal=server$@FOO [2008/11/05 11:28:06, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(619) Doing kerberos session setup [2008/11/05 11:28:06, 1] libsmb/clikrb5.c:ads_krb5_mk_req(680) ads_krb5_mk_req: krb5_get_credentials failed for server$@FOO (Cannot resolve network address for KDC in requested realm) [2008/11/05 11:28:06, 1] libsmb/cliconnect.c:cli_session_setup_kerber...

....97.5 SMB Tree Connect AndX Request, Path: \\192.168.97.5\global 166.068787 192.168.97.5 -> 192.168.97.2 SMB Tree Connect AndX Response --- Winbind gives following error, not sure if this is significant for I can access the AD via "wbinfo" [2008/11/26 15:22:58, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(626) cli_session_setup_kerberos: spnego_gen_negTokenTarg failed: Cannot find KDC for requested realm Please see attached for configuration detail + detailed error log. Googling helped me to get so far, but not completely resolve this issue. Please advise. Thanks in Advance, -Kums -------------...

...client //SAMBASERVER01/IT -k OS=[Unix] Server=[Samba 3.2.5] smb: \> that works! the smbd and nmbd logs are clean but it seems that winbind ist struggling: log.winbindd ------------------------------------8<-------------------------------------- [2010/06/07 10:17:59, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(619) Doing kerberos session setup [2010/06/07 10:17:59, 1] libsmb/clikrb5.c:ads_krb5_mk_req(680) ads_krb5_mk_req: krb5_get_credentials failed for DC01$@DOMAIN (Cannot resolve network address for KDC in requested realm) [2010/06/07 10:17:59, 1] libsmb/cliconnect.c:cli_session_setup_kerbero...

...error. I've noticed that /var/log/samba/log.winbinds shows: 2009/05/06 09:22:31, 1] libsmb/clikrb5.c:ads_krb5_mk_req(686) ads_krb5_mk_req: krb5_get_credentials failed for CAD1$@BYU (Cannot resolve network address for KDC in requested realm) [2009/05/06 09:22:31, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(624) cli_session_setup_kerberos: spnego_gen_negTokenTarg failed: Cannot resolve network address for KDC in requested realm I can't run `kinit host/vi4debain$@BYU.LOCAL` <mailto:host/vi4debain$@BYU.LOCAL%60> or anything like it, all I get is "kinit(v5): Client not found in Ker...

I hope this is the right place to post this. I am running SuSe 8.2 Linux on an IBM 1 gig processor at work. I installed samba 3.0.5 on it and followed the instructions in the online book "Samba-3 by Example" for chapter 9 "Active Directory Domain with Samba Domain Member Server <http://www.samba.org/samba/docs/man/Samba-Guide/unixclients.html#adssdm>" to the tee (of

...P.DC' with: Preauthentication failed (-1765328360) [2010/06/29 13:57:37, 1] libsmb/clikrb5.c:ads_krb5_mk_req(680) ads_krb5_mk_req: krb5_get_credentials failed for GSCPSVMAD01$@GRANSAPORE (Cannot resolve network address for KDC in requested realm) [2010/06/29 13:57:37, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(626) cli_session_setup_kerberos: spnego_gen_negTokenTarg failed: Cannot resolve network address for KDC in requested realm #less log.winbindd [2010/06/29 15:24:40, 0] winbindd/winbindd_cache.c:initialize_winbindd_cache(2374) initialize_winbindd_cache: clearing cache and re-creating with versi...

...lib/security/pam_winbind.so nsswitch.conf passwd: files winbind shadow: files group: files winbind winbindd.log [2005/05/11 12:34:43, 1] libsmb/clikrb5.c:ads_krb5_mk_req(415) ads_krb5_mk_req: krb5_mk_req_extended failed (Ticket expired) [2005/05/11 12:34:43, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(539) spnego_gen_negTokenTarg failed: Ticket expired [2005/05/11 12:34:43, 1] nsswitch/winbindd_ads.c:ads_cached_connection(81) ads_connect for domain DOMAIN failed: Cannot read password [2005/05/11 12:34:43, 1] nsswitch/winbindd_util.c:init_domain_list(322) Could not fetch sid for our domain...

...:ads_cached_connection(65) ads_connect for domain INFORMA-UK failed: Preauthentication failed [2004/02/13 13:35:47, 1] libsmb/clikrb5.c:ads_krb5_mk_req(276) krb5_get_credentials failed for tele-root1$@INFORMA.COM (Cannot find KDC for requested realm) [2004/02/13 13:35:47, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(516) spnego_gen_negTokenTarg failed: Cannot find KDC for requested realm [2004/02/13 13:35:47, 1] nsswitch/winbindd_util.c:add_trusted_domain(166) Added domain INFORMA informa.com S-1-5-21-872949640-2421699758-2984176268 [2004/02/13 13:35:48, 1] nsswitch/winbindd_util.c:add_trusted_domain(166)...

...]# wbinfo -t checking the trust secret via RPC calls failed error code was NT_STATUS_UNSUCCESSFUL (0xc0000001) Could not check secret [root@nasone samba]# After trying to do the `wbinfo -t`, I see the following in 'winbindd.log': [2004/05/13 17:49:41, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(535) Doing kerberos session setup [2004/05/13 17:49:41, 0] rpc_client/cli_pipe.c:rpc_auth_pipe(336) rpc_auth_pipe: wrong schannel auth len 24 [2004/05/13 17:49:41, 0] rpc_client/cli_netlogon.c:cli_nt_setup_creds(249) cli_nt_setup_creds: request challenge failed [2004/05/13 17...

...Unknown error -1765328352 session setup failed: NT_STATUS_OK # wbinfo -u Error looking up domain users log: [2004/03/26 10:48:30, 1] libsmb/clikrb5.c:ads_krb5_mk_req(276) krb5_get_credentials failed for shadow$@SBRC.LOCAL (Unknown error -1765328343) [2004/03/26 10:48:30, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(516) spnego_gen_negTokenTarg failed: Unknown error -1765328343 [2004/03/26 10:48:30, 4] nsswitch/winbindd_cm.c:cm_open_connection(186) failed kerberos session setup with Unknown error -1765328343 anybody knows what's a problem? freebsd 5.2.1 + samba 3.0.2a + heimdal 0.6

...840 113554 1 2 2 3 [2004/08/17 11:11:30, 3] libsmb/cliconnect.c:cli_session_setup_spnego(730) got OID=1 3 6 1 4 1 311 2 2 10 [2004/08/17 11:11:30, 3] libsmb/cliconnect.c:cli_session_setup_spnego(737) got principal=win2k3srv$@PRIV.DOMAIN.COM [2004/08/17 11:11:30, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(535) Doing kerberos session setup [2004/08/17 11:11:30, 1] libsmb/clikrb5.c:cli_krb5_get_ticket(392) krb5_set_default_tgs_ktypes failed (Program lacks support for encryption type) [2004/08/17 11:11:30, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(541) spnego_gen_negTokenTarg fa...

...o the 3.3.4 RPMs from Sernet, still no luck. The errors I see are something like [2009/05/13 13:29:57, 1] libsmb/clikrb5.c:ads_krb5_mk_req(686) ads_krb5_mk_req: krb5_get_credentials failed for dc1$@PROD.X.CH (Server not found in Kerberos database) [2009/05/13 13:29:57, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(624) cli_session_setup_kerberos: spnego_gen_negTokenTarg failed: Server not found in Kerberos database Before I go on and try to isolate the error: Do I have any chance to get such a setup to work? Many thanks for listening. -- CU, Joe

...blem I have are a lot of lines like this in log.wb-MYDOMAIN and log.winbindd: [2009/06/09 00:06:17, 1] libsmb/clikrb5.c:ads_krb5_mk_req(686) ads_krb5_mk_req: krb5_get_credentials failed for dc1$@MYDOMAIN (Cannot contact any KDC for requested realm) [2009/06/09 00:06:17, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(624) cli_session_setup_kerberos: spnego_gen_negTokenTarg failed: Cannot contact any KDC for requested realm As you see, it's trying to find a KDC for the _workgroup_ name, not the DNS name. I suppose that it has no trouble locating a DC for the correct realm name (because it doesn't log...

...Kerberos Authentication" Kerberos Authentication [root at a10 etc]# echo ${SAMBA_NT_ADMIN_PASS} | kinit Administrator kinit: Cannot find KDC for realm "MWLLC.INFO" while getting initial credentials [root at a10 etc]# smbclient //${SETFQDN}/netlogon -U Administrator -c 'ls' -k cli_session_setup_kerberos: spnego_gen_krb5_negTokenInit failed: No such file or directory session setup failed: NT_STATUS_UNSUCCESSFUL [root at a10 etc]# kdestroy

...rked $ tail /var/log/samba/log.wb-DOMAIN-NAME [2007/02/26 22:26:14, 0] libsmb/clientgen.c:cli_rpc_pipe_close(375) cli_rpc_pipe_close: cli_close failed on pipe \NETLOGON, fnum 0xc00c to machine SERVER01. Error was Write error: Connection reset by peer [2007/02/26 22:26:14, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(533) Doing kerberos session setup [2007/02/26 22:29:55, 0] nsswitch/winbindd_dual.c:child_read_request(49) Got invalid request length: 0 [2007/02/26 22:29:57, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(533) Doing kerberos session setup Any Ideas? TIA! -- Alexander Menk

...error occour only in the first time i authenticate an user. All works fine, but i have this is my logs: ==> /var/log/samba/log.winbindd <== [2008/05/21 00:32:36, 2] nsswitch/winbindd_util.c:add_trusted_domain(171) Added domain BUILTIN S-1-5-32 [2008/05/21 00:32:37, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(615) Doing kerberos session setup [2008/05/21 00:35:56, 1] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(312) Could not get convert sid from string [2008/05/21 00:47:01, 1] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(312) Could not get convert sid from string [2008/05/21 00:48:57, 1] nsswitch...