Displaying 8 results from an estimated 8 matches for "fill_mem_keytab_from_secret".
Did you mean:
fill_mem_keytab_from_secrets
2023 Apr 13
3
Is LDAP + Kerberos without Active Directory no longer supported?
I have a server that runs stand-alone with an LDAP directory and a KDC .
The linux machines have sssd to allow unified users etc. The clients are
mostly MacOS and Windows machines that aren't part of an AD.
This config has worked for 15 years, but after upgrading Debian and
bringing in Samba Version 4.17.7-Debian it seems to be broken.
I believe this is related to:
2019 Dec 16
2
Failed to find [principal](kvno 4) in keytab MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
...pens each connection:
- gensec_gse_server_start
- gse_init_server
- gse_context_init
- krb5_init_context(&gse_ctx->k5ctx)
- gse_krb5_get_server_keytab
FreeNAS generates an smb4.conf without 'kerberos method', so it defaults to
'secrets only'. That means only fill_mem_keytab_from_secrets() is used.
That function gets the (current and previous) machine password from
secrets.tdb, which I can dump with:
tdbdump /var/db/system/samba4/private/secrets.tdb
Troubleshooting:
- I've obviously tried restarting the smb service
- I've tried having users log-off/reboot
- I've perf...
2018 May 11
2
smb_krb5_open_keytab failed (Key table name malformed)
Hi.
I joined a fileserver system with Samba version 4.5.12-Debian (fileserv) in
an Active Directory domain managed by a Samba 4.6.7-Ubuntu installed on
another system using "realm discover" and sssd.
The Samba fileserver is correctly joined into the domain and I can
correctly browse AD users:
root at fileserv:/# getent passwd my.user
2018 Jun 25
2
Samba 4.7.1 Generating Core Dumps
...nternal error") at ../lib/util/fault.c:166
No locals.
#5 0x00007fc2287530c6 in fault_report (sig=<optimized out>) at ../lib/util/fault.c:83
counter = 1
#6 sig_fault (sig=<optimized out>) at ../lib/util/fault.c:94
No locals.
#7 <signal handler called>
No locals.
#8 fill_mem_keytab_from_secrets (krbctx=krbctx at entry=0x55b48e613620, keytab=keytab at entry=0x55b48e610590) at ../source3/librpc/crypto/gse_krb5.c:186
frame = 0x55b48e61f0b0
ret = <optimized out>
domain = 0x55b48e5e6dc0 "ENDACE"
info = 0x0
realm = 0x0
ct = 0x0...
2019 Jun 11
2
Sharing directory via Samba using AD credentials
...mes?, Windows presents the error messages (after prompting for credentials): System error 86 has occurred. // The specified network password is not correct.
Within /var/log/samba/10.0.0.1.log, the following items seem notable:
[2019/06/1015:05:10.230921,? 2] ../source3/librpc/crypto/gse_krb5.c:196(fill_mem_keytab_from_secrets)
? ../source3/librpc/crypto/gse_krb5.c:196: failed to fetch machine password
[2019/06/1015:05:10.230941,? 1] ../source3/librpc/crypto/gse_krb5.c:594(gse_krb5_get_server_keytab)
? ../source3/librpc/crypto/gse_krb5.c:594: Error! Unable to set mem keytab - -1765328254
[2019/06/1015:05:10.230968,? 1]...
2017 Sep 21
2
get access denied on samba AD share
...urce3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2017/09/21 00:36:03.320722, 3] ../source3/smbd/smb2_negprot.c:290(smbd_smb2_request_process_negprot)
Selected protocol SMB2_FF
[2017/09/21 00:36:03.321314, 2] ../source3/librpc/crypto/gse_krb5.c:229(fill_mem_keytab_from_secrets)
../source3/librpc/crypto/gse_krb5.c:229: failed to fetch machine password
[2017/09/21 00:36:03.321344, 3] ../source3/librpc/crypto/gse_krb5.c:587(gse_krb5_get_server_keytab)
../source3/librpc/crypto/gse_krb5.c:587: Warning! Unable to set mem keytab from secrets!
[2017/09/21 00:36:03.322377,...
2019 Jun 11
0
Sharing directory via Samba using AD credentials
...presents the error messages (after prompting for credentials): System error 86 has occurred. // The specified network password is not correct.
>
> Within /var/log/samba/10.0.0.1.log, the following items seem notable:
> [2019/06/1015:05:10.230921,? 2] ../source3/librpc/crypto/gse_krb5.c:196(fill_mem_keytab_from_secrets)
> ? ../source3/librpc/crypto/gse_krb5.c:196: failed to fetch machine password
> [2019/06/1015:05:10.230941,? 1] ../source3/librpc/crypto/gse_krb5.c:594(gse_krb5_get_server_keytab)
> ? ../source3/librpc/crypto/gse_krb5.c:594: Error! Unable to set mem keytab - -1765328254
> [2019/06/1...
2019 Jun 11
1
Sharing directory via Samba using AD credentials
...ror messages (after prompting for credentials): System error 86 has occurred. // The specified network password is not correct.
> >
> > Within /var/log/samba/10.0.0.1.log, the following items seem notable:
> > [2019/06/1015:05:10.230921,? 2] ../source3/librpc/crypto/gse_krb5.c:196(fill_mem_keytab_from_secrets)
> > ? ../source3/librpc/crypto/gse_krb5.c:196: failed to fetch machine password
> > [2019/06/1015:05:10.230941,? 1] ../source3/librpc/crypto/gse_krb5.c:594(gse_krb5_get_server_keytab)
> > ? ../source3/librpc/crypto/gse_krb5.c:594: Error! Unable to set mem keytab - -1765328254
&g...