Displaying 5 results from an estimated 5 matches for "gensec_gse_client_prepare_ccache".
2025 May 25
1
Linux member joined to AD domain: No login with domain user possible, getent not working
...online), I
> unjoined the domain, stopped samba on the member, deleted samba .tdb
> cache files, and rejoined using net ads join --no-dns-updates -U
> administrator, then I started samba services.
>
> The output of the attempt to join showed different errors this time:
>
> gensec_gse_client_prepare_ccache: Kinit for
> MEMBER$@SAMDOM.EXAMPLE.COM to access ldap/DC1.SAMDOM.EXAMPLE.COM
> failed: Client not found in Kerberos database: NT_STATUS_LOGON_FAILURE
> gensec_gse_client_prepare_ccache: Kinit for
> MEMBER$@SAMDOM.EXAMPLE.COM to access cifs/DC1.SAMDOM.EXAMPLE.COM
> failed: Client not...
2024 Dec 31
2
ef205f6b52e "s3:gse: get an explicit ccache_name" breaks kerberos auth in smbclient
...but we'll remove the kinit from the callers soon.
Before this one (using kinit):
$ smbclient -U mjt at TLS.MSK.RU -N //tsrv/mjt
Try "help" to get a list of possible commands.
smb: \>
After this commit:
$ smbclient -U mjt at TLS.MSK.RU -N //tsrv/mjt -d5
...
gensec_gse_client_prepare_ccache: No password for user principal[mjt at TLS.MSK.RU]
Failed to start GENSEC client mech gse_krb5: NT_STATUS_INVALID_PARAMETER
...
session setup failed: NT_STATUS_LOGON_FAILURE
This is still happening in current master.
I guess this wasn't an intended behavior :)
Thanks,
/mjt
2025 May 25
1
Linux member joined to AD domain: No login with domain user possible, getent not working
...h DC1 and the formerly missing DC2 online), I
unjoined the domain, stopped samba on the member, deleted samba .tdb
cache files, and rejoined using net ads join --no-dns-updates -U
administrator, then I started samba services.
The output of the attempt to join showed different errors this time:
gensec_gse_client_prepare_ccache: Kinit for MEMBER$@SAMDOM.EXAMPLE.COM
to access ldap/DC1.SAMDOM.EXAMPLE.COM failed: Client not found in
Kerberos database: NT_STATUS_LOGON_FAILURE
gensec_gse_client_prepare_ccache: Kinit for MEMBER$@SAMDOM.EXAMPLE.COM
to access cifs/DC1.SAMDOM.EXAMPLE.COM failed: Client not found in
Kerberos da...
2025 May 23
1
Linux member joined to AD domain: No login with domain user possible, getent not working
On Fri, 23 May 2025 20:42:23 +0200
Paul Leiber via samba <samba at lists.samba.org> wrote:
>
> However, here is a new angle: I have the suspicion that a temporarily
> missing DC has to do with my issue. I installed a second DC (for
> redundancy) on a Raspberry Pi some time ago. I had problems with the
> setup of the Raspberry Pi, therefore this DC2 was inactive for some
2025 Jan 01
1
ef205f6b52e "s3:gse: get an explicit ccache_name" breaks kerberos auth in smbclient
...t;
> Before this one (using kinit):
>
> ? $ smbclient -U mjt at TLS.MSK.RU -N //tsrv/mjt
> ? Try "help" to get a list of possible commands.
> ? smb: \>
>
> After this commit:
>
> ? $ smbclient -U mjt at TLS.MSK.RU -N //tsrv/mjt -d5
> ? ...
> ? gensec_gse_client_prepare_ccache: No password for user principal[mjt at TLS.MSK.RU]
> ? Failed to start GENSEC client mech gse_krb5: NT_STATUS_INVALID_PARAMETER
> ? ...
> ? session setup failed: NT_STATUS_LOGON_FAILURE
>
> This is still happening in current master.
>
> I guess this wasn't an intended...