Displaying 16 results from an estimated 16 matches for "decode_pac_data".
2010 Dec 20
4
problem connecting DFS-share with winXP - successful with Vista & 7
...ply_sesssetup_and_X_spnego(1210)
NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows
2002 5.1] PrimaryDomain=[]
[2010/12/20 10:30:17, 3] smbd/sesssetup.c:reply_spnego_negotiate(802)
reply_spnego_negotiate: Got secblob of size 1172
[2010/12/20 10:30:17, 3] libads/authdata.c:decode_pac_data(301)
Found account name from PAC: CLIENTXP$ []
[2010/12/20 10:30:17, 3] smbd/sesssetup.c:reply_spnego_kerberos(356)
Ticket name is [CLIENTXP$@DOMAIN.LOCAL]
[2010/12/20 10:30:17, 1] smbd/sesssetup.c:reply_spnego_kerberos(474)
Username DOMAIN00\CLIENTXP$ is invalid on this system
[2010/...
2005 Nov 21
1
Performance Problem / failed to verify PAC server signature
...b_krb5_verify_checksum(695)
smb_krb5_verify_checksum: krb5_c_verify_checksum() failed: Bad encryption type
[2005/11/21 16:09:28, 2] libads/authdata.c:check_pac_checksum(666)
check_pac_checksum: PAC Verification failed: Bad encryption type (-1765328196)
[2005/11/21 16:09:28, 0] libads/authdata.c:decode_pac_data(876)
decode_pac_data: failed to verify PAC server signature
[2005/11/21 16:09:28, 3] libads/kerberos_verify.c:ads_verify_ticket(416)
ads_verify_ticket: failed to decode PAC_DATA: NT_STATUS_ACCESS_DENIED
-------------------------------------- 8< --------------------------------------
Other r...
2008 Feb 12
1
RE: Delegation of authentication (S4U) and SAMBA
Hello,
Does samba support the use of S4U?
What do we need to configure in SAMBA or krb5 to support getting a
ticket obtained by S4U. We are using 3.0.25 and krb5-1.4.1
We are getting the following error:
decode_pac_data: Name in PAC [username@something1.something2.realmname]
does not match principal name in ticket
The ticket could be different than the PAC name because the ticket was
obtained using S4U extension.
Any help will be really appreciated.
Cheers,
Ephi
Background:
http://searchwindow...
2009 Jul 07
0
Problems with shares after upgrading to 3.4.0
...updated server, most of them cannot. Running samba with log level 3
gives the following logs (only part shown)
Almost at the beginning of connection there is a difference at the following
call:
working client:
[2009/07/07 10:35:43, 3, pid=29169, effective(0, 0), real(0, 0)] libads/authdata.c:302(decode_pac_data)
Found account name from PAC: ATPCS7DC$ [ATPCS7DC$]
not working client:
[2009/07/07 10:27:26, 3, pid=28626, effective(0, 0), real(0, 0)] libads/authdata.c:302(decode_pac_data)
Found account name from PAC: SK17007C$ []
I don't know where this difference comes from but from here on the not...
2007 Aug 15
1
Performance Problem / failed to verify PAC server signature
..._verify_checksum(697)
smb_krb5_verify_checksum: krb5_c_verify_checksum() failed: Bad
encryption type
[2007/08/13 17:52:01, 2] libads/authdata.c:check_pac_checksum(659)
check_pac_checksum: PAC Verification failed: Bad encryption type
(-1765328196)
[2007/08/13 17:52:01, 0] libads/authdata.c:decode_pac_data(870)
decode_pac_data: failed to verify PAC server signature
[2007/08/13 17:52:01, 3]
libads/kerberos_verify.c:ads_verify_ticket(416)
ads_verify_ticket: failed to decode PAC_DATA:
NT_STATUS_ACCESS_DENIED
......
[2007/08/14 12:01:05, 3] smbd/error.c:error_packet(142)
error packet at smbd/s...
2014 Feb 14
1
Public Share on Samba with ADS security
...4:42.031246, 3] smbd/sesssetup.c:1114(reply_sesssetup_and_X_spnego)
NativeOS=[] NativeLanMan=[] PrimaryDomain=[]
[2014/02/13 16:04:42.031303, 3] smbd/sesssetup.c:660(reply_spnego_negotiate)
reply_spnego_negotiate: Got secblob of size 2437
[2014/02/13 16:04:42.163990, 3] libads/authdata.c:332(decode_pac_data)
Found account name from PAC: McNamaB [Bradley W. McNamara]
[2014/02/13 16:04:42.164061, 3] auth/user_krb5.c:50(get_user_from_kerberos_info)
Kerberos ticket principal name is [McNamaB at SPU.COS.LOCAL]
[2014/02/13 16:04:42.164296, 1] auth/user_krb5.c:162(get_user_from_kerberos_info)
Usernam...
2012 Nov 30
2
User is invalid on this system
...3:58.120409, 3] smbd/sesssetup.c:1107(reply_sesssetup_and_X_spnego)
NativeOS=[] NativeLanMan=[] PrimaryDomain=[]
[2012/11/29 15:23:58.120498, 3] smbd/sesssetup.c:660(reply_spnego_negotiate)
reply_spnego_negotiate: Got secblob of size 1680
[2012/11/29 15:23:58.124198, 3] libads/authdata.c:332(decode_pac_data)
Found account name from PAC: kevin_elliott [Kevin Elliott]
[2012/11/29 15:23:58.124309, 3] auth/user_krb5.c:50(get_user_from_kerberos_info)
Kerberos ticket principal name is [kevin_elliott at CBJ.LOCAL]
[2012/11/29 15:23:58.124710, 1] auth/user_krb5.c:162(get_user_from_kerberos_info)
Usern...
2012 Dec 30
1
DFS not working on Win XP
...ssetup_and_X_spnego)
NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
[2012/12/30 18:34:26.952324, 3] smbd/sesssetup.c:660(reply_spnego_negotiate)
reply_spnego_negotiate: Got secblob of size 1144
[2012/12/30 18:34:27.054131, 3] libads/authdata.c:332(decode_pac_data)
Found account name from PAC: WS-PCM26$ [WS-PCM26$]
[2012/12/30 18:34:27.054378, 3] auth/user_krb5.c:50(get_user_from_kerberos_info)
Kerberos ticket principal name is [WS-PCM26$@INT.TMG]
[2012/12/30 18:34:27.165496, 1] auth/user_krb5.c:162(get_user_from_kerberos_info)
Username INT\WS-PCM26$...
2013 Aug 12
0
Samba 3.6 File server with W2k3 DC
...6:21.481240, 3]
smbd/sesssetup.c:1107(reply_sesssetup_and_X_spnego)
NativeOS=[] NativeLanMan=[] PrimaryDomain=[]
[2013/08/12 13:56:21.481306, 3]
smbd/sesssetup.c:660(reply_spnego_negotiate)
reply_spnego_negotiate: Got secblob of size 1354
[2013/08/12 13:56:21.501097, 3] libads/authdata.c:332(decode_pac_data)
Found account name from PAC: Graficos [Graficos]
[2013/08/12 13:56:21.501177, 3]
auth/user_krb5.c:50(get_user_from_kerberos_info)
Kerberos ticket principal name is [Graficos at MONTECARLOTV.COM.UY]
[2013/08/12 13:56:21.502480, 3] smbd/password.c:298(register_existing_vuid)
register_existin...
2010 May 12
0
smbd/winbindd truncating user name: "Could not parse domain user"
...412424, 5]
smbd/sesssetup.c:753(parse_spnego_mechanisms)
parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10
[2010/05/12 09:14:34.412478, 3]
smbd/sesssetup.c:805(reply_spnego_negotiate)
reply_spnego_negotiate: Got secblob of size 1483
[2010/05/12 09:14:34.433890, 3] libads/authdata.c:304(decode_pac_data)
Found account name from PAC: WKAABC [Limited User]
[2010/05/12 09:14:34.434046, 3] smbd/sesssetup.c:338(reply_spnego_kerberos)
Ticket name is [WKAABC at MYREALM]
[2010/05/12 09:14:34.434550, 5] lib/username.c:133(Get_Pwnam_alloc)
Finding user MYDOMAIN\WKAABC
[2010/05/12 09:14:34.434609, 5...
2011 Mar 03
1
samba 3.5.7 tries to authenticate on ADS by machine name, not username
...ssetup_and_X_spnego)
NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows
2002 5.1] PrimaryDomain=[]
[2011/03/03 08:20:09.115489, 3] smbd/sesssetup.c:806(reply_spnego_negotiate)
reply_spnego_negotiate: Got secblob of size 1197
[2011/03/03 08:20:09.127334, 3] libads/authdata.c:304(decode_pac_data)
Found account name from PAC: XXXX-001119$ [XXXX-001119$]
[2011/03/03 08:20:09.127570, 3] smbd/sesssetup.c:338(reply_spnego_kerberos)
Ticket name is [XXXX-001119$@LAN.XXXX.CO.UK]
[2011/03/03 08:20:09.146847, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[201...
2012 Oct 11
1
users map with ADS not working
...----------------------------------------------------------------------------------------------------------------
Here are the logs when user whose mapping is defined in users.map tries to log into samba instance which is binding to ABC domain
[2012/10/10 15:07:11.896408, 3] libads/authdata.c:332(decode_pac_data)
Found account name from PAC: foo [Foo Bar]
[2012/10/10 15:07:11.896530, 3] auth/user_krb5.c:50(get_user_from_kerberos_info)
Kerberos ticket principal name is [foo at ABC.COM]
[2012/10/10 15:07:11.896611, 4] auth/user_util.c:361(map_username)
Scanning username map /opt/local/samba-3.6.7/dev...
2011 Mar 14
0
upgraded samba server causes winXP integrated authentication to fail
...ssetup_and_X_spnego)
NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows
2002 5.1] PrimaryDomain=[]
[2011/03/14 09:04:27.949786, 3] smbd/sesssetup.c:806(reply_spnego_negotiate)
reply_spnego_negotiate: Got secblob of size 1197
[2011/03/14 09:04:27.968108, 3] libads/authdata.c:304(decode_pac_data)
Found account name from PAC: XXXX-001119$ [XXXX-001119$]
[2011/03/14 09:04:27.968665, 3] smbd/sesssetup.c:338(reply_spnego_kerberos)
Ticket name is [XXXX-001119$@LAN.XXXX.CO.UK]
[2011/03/14 09:04:27.969975, 0] lib/util_sock.c:1441(get_peer_addr_internal)
getpeername failed. Error was Trans...
2008 Aug 01
1
Samba 3.0.31 stills fails to read and write to socket.
...8/07/31 10:04:05, 10] passdb/secrets.c:secrets_named_mutex_release(996)
secrets_named_mutex: released mutex for replay cache mutex
[2008/07/31 10:04:05, 10] rpc_parse/parse_net.c:dump_user_flgs(1563)
dump_user_flgs
account has LOGON_EXTRA_SIDS
[2008/07/31 10:04:05, 10] libads/authdata.c:decode_pac_data(923)
Successfully validated Kerberos PAC
[2008/07/31 10:04:05, 10] libads/authdata.c:dump_pac_logon_info(735)
The PAC:
User Flags: 0x20 (32)
User Flags: LOGON_EXTRA_SIDS 0x20 (32)
User SID: S-1-5-21-2031228914-1097686851-784825492-55515
Group SID: S-1-5-21-203122...
2010 Feb 10
3
Having problem with "valid users" in Active Directory/Samba environment
We have a Ubuntu/Samba setup to serve Windows-XP users using Active Directory credentials.
The application is a backup service using rsync from their workstations to the server.
Ubuntu: 9.10, Samba: 3.4.0.
The backups work fine, and individual users logged onto XP with AD credentials can see the contents of their shares on the server.
However, we have been unable to configure Samba to allow
2007 Feb 19
3
Problems Samba, Kerberos, Win2003
...message !
[2007/02/17 16:28:04, 10]
passdb/secrets.c:secrets_named_mutex_release(714)
secrets_named_mutex: released mutex for replay cache mutex
[2007/02/17 16:28:04, 10] libsmb/clikrb5.c:get_krb5_smb_session_key(509)
Got KRB5 session key of length 16
[2007/02/17 16:28:04, 5] libads/authdata.c:decode_pac_data(592)
dump_pac_data
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 pac_io_pac_data pac data
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0000 num_buffers: 00000004
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0004 version: 0000...