search for: credentials_krb5

...Changes with uSNChanged >= 3651 flags 0x00000074 on <GUID=57840cd3-5b72-476b-9333-32d1c03d872c>;CN=Configuration,DC=ad,DC=microsult,DC=de gave 0 objects (done 0/0) 0 links (done 0/0 (as S-1-5-21-820921042-1573760902-1500171102-1000)) [2016/01/04 12:34:39.306100, 3] ../auth/credentials/credentials_krb5.c:532(cli_credentials_get_client_gss_creds) Credentials for VERDANDI$@AD.MICROSULT.DE will expire shortly (0 sec), must refresh credentials cache [2016/01/04 12:34:39.306295, 1] ../source4/auth/gensec/gensec_gssapi.c:644(gensec_gssapi_update) GSS client Update(krb5)(1) Update failed: Misc...

Hi, I used Samba 4.0.5 in Wheezy. Here is that I have done: --------------------------------------------------------------- samba-tool domain provision --realm=CHEZMOI.PRIV --domain=CHEZMOI \ --server-role=dc --dns-backend=SAMBA_INTERNAL --adminpass='+toto123' echo "nameserver 192.168.0.21" > /etc/resolv.conf samba ln -s /usr/local/samba/lib/libnss_winbind.so

...y day at either at 10 PM or 8 AM replication is broken (I can see WERR_ACCESS_DENIED errors by running samba-tool drs showrepl). Restarting Samba returns everything to normal, until the next day... By increasing the log level I can see this: -- [2015/07/07 22:02:48.149819, 3] ../auth/credentials/credentials_krb5.c:532(cli_credentials_get_client_gss_creds) Credentials for DC2$@MYCOMPANY.COM will expire shortly (0 sec), must refresh credentials cache [2015/07/07 22:02:48.150486, 1] ../source4/auth/gensec/gensec_gssapi.c:644(gensec_gssapi_update) GSS client Update(krb5)(1) Update failed: Miscellaneous f...

...624: lib/pthreadpool: Fix a memory leak. * BUG 12727: Lookup-domain for well-known SIDs on a DC. * BUG 12728: winbindd: Fix error handling in rpc_lookup_sids(). * BUG 12729: winbindd: Trigger possible passdb_dsdb initialisation. o Alexander Bokovoy <ab at samba.org> * BUG 12611: credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case. * BUG 12690: lib/crypto: Implement samba.crypto Python module for RC4. o Amitay Isaacs <amitay at gmail.com> * BUG 12697: ctdb-readonly: Avoid a tight loop waiting for revoke to complete. * BUG 12723: ctdb_event monit...

...624: lib/pthreadpool: Fix a memory leak. * BUG 12727: Lookup-domain for well-known SIDs on a DC. * BUG 12728: winbindd: Fix error handling in rpc_lookup_sids(). * BUG 12729: winbindd: Trigger possible passdb_dsdb initialisation. o Alexander Bokovoy <ab at samba.org> * BUG 12611: credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case. * BUG 12690: lib/crypto: Implement samba.crypto Python module for RC4. o Amitay Isaacs <amitay at gmail.com> * BUG 12697: ctdb-readonly: Avoid a tight loop waiting for revoke to complete. * BUG 12723: ctdb_event monit...

...replication is broken (I can see >WERR_ACCESS_DENIED errors by running samba-tool drs showrepl). >Restarting Samba returns everything to normal, until the next day... > >By increasing the log level I can see this: > >-- >[2015/07/07 22:02:48.149819, 3] >../auth/credentials/credentials_krb5.c:532(cli_credentials_get_ >client_gss_creds) > Credentials for DC2$@MYCOMPANY.COM will expire shortly (0 sec), must >refresh credentials cache >[2015/07/07 22:02:48.150486, 1] >../source4/auth/gensec/gensec_gssapi.c:644(gensec_gssapi_update) > GSS client Update(krb5)(1) Update...

...ookup-domain for well-known SIDs on a DC. > > * BUG 12728: winbindd: Fix error handling in rpc_lookup_sids(). > > * BUG 12729: winbindd: Trigger possible passdb_dsdb > initialisation. > > > > o Alexander Bokovoy <ab at samba.org> > > * BUG 12611: credentials_krb5: use gss_acquire_cred for > client-side GSSAPI > > use case. > > * BUG 12690: lib/crypto: Implement samba.crypto Python > module for RC4. > > > > o Amitay Isaacs <amitay at gmail.com> > > * BUG 12697: ctdb-readonly: Avoid a tight loop waiti...

Hmmm...not quite sure where to go to fix this up. Samba 4 PDC, 1 W2K3R2, 1 W2K8R2 additional DC's. samba.log perpetually spewing: [Fri Jun 11 14:47:42 2010 PDT, 0 librpc/rpc/dcerpc_util.c:619:dcerpc_pipe_auth_recv()] Failed to bind to uuid e3514235-4b06-11d1-ab04-00c04fc2dcd2 - NT_STATUS_INVALID_PARAMETER [Fri Jun 11 14:47:42 2010 PDT, 0

...tials_files.c auth/credentials/credentials_files.c: In function ?cli_credentials_set_machine_account?: auth/credentials/credentials_files.c:355: warning: ?event_context_find? is deprecated (declared at ./lib/events/events.h:6) Compiling auth/credentials/credentials_ntlm.c Compiling auth/credentials/credentials_krb5.c Compiling auth/credentials/../kerberos/kerberos_util.c Partially linking bin/mergedobj/credentials.o Compiling heimdal/lib/gssapi/spnego/init_sec_context.c Compiling heimdal/lib/gssapi/spnego/external.c heimdal/lib/gssapi/spnego/external.c:46: warning: cast discards qualifiers from pointer target...