Displaying 20 results from an estimated 32 matches for "gensec_spnego_parse_negtokeninit".
2016 Oct 04
0
Fwd: Winbind Preauthentication failed
...ibrpc/crypto/gse.
c:497(gse_get_server_auth_token)
gss_accept_sec_context failed with [ Miscellaneous failure (see text):
Failed to find cifs/fs1.domain.local at DOMAIN.LOCAL(kvno 2) in keytab
MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
[2016/10/02 06:10:34.884404, 1] ../auth/gensec/spnego.c:541(
gensec_spnego_parse_negTokenInit)
SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:10:34.884433, 2] ../auth/gensec/spnego.c:716(
gensec_spnego_server_negTokenTarg)
SPNEGO login failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:13:07.177316, 2] ../source3/smbd/server.c:467(
remove_child_pid)
Could...
2017 Jan 12
2
Difficulties with Windows XP: failed to find cifs/fileserver.y.z@Y.Z in keytab (arcfour-hmac-md5)
...ibrpc/crypto/gse.c:496(gse_get_server_auth_token)
gss_accept_sec_context failed with [ Miscellaneous failure (see text):
Failed to find cifs/hg004.humgen.0zone at HUMGEN.0ZONE(kvno 1) in keytab
MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
[2017/01/11 16:42:34.522095, 1]
../auth/gensec/spnego.c:541(gensec_spnego_parse_negTokenInit)
SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
[2017/01/11 16:42:34.525704, 1]
../lib/param/loadparm.c:1629(lpcfg_do_global_parameter)
WARNING: The "syslog only" option is deprecated
[2017/01/11 16:42:34.525743, 1]
../lib/param/loadparm.c:1629(lpcfg_do_global_param...
2017 Nov 07
3
after DCs migration to 4.7, two things
...(gensec_gssapi_update_internal)
> GSS server Update(krb5)(1) Update failed: Miscellaneous failure (see text): Failed to find DC4$@SAMBA.COMPANY.COM(kvno 1) in keytab FILE:/var/lib/samba/private/secrets.keytab (arcfour-hmac-md5)
> [2017/11/07 18:23:25.114456, 1] ../auth/gensec/spnego.c:411(gensec_spnego_parse_negTokenInit)
> SPNEGO(gssapi_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
That one worries me a bit more than the DNS thing...
Have a nice evening everyone!
MJ
2017 Feb 01
2
gpupdate - Failed to find DC1 in keytab
...ensec_gssapi.c:619(gensec_gssapi_update)
GSS server Update(krb5)(1) Update failed: Miscellaneous failure
(see text): Failed to find DC1$EXAMPLE.ORG(kvno 7) in keytab
FILE:/var/lib/samba/private/secrets.keytab (arcfour-hmac-md5)
[2017/01/13 13:49:16.075405, 1]
../auth/gensec/spnego.c:541(gensec_spnego_parse_negTokenInit)
SPNEGO(gssapi_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
klist on secrets.keytab:
Keytab name: FILE:/var/lib/samba/private/secrets.keytab
KVNO Principal
---- --------------------------------------------------------------------------
1 HOST/dc1 at EXAMPLE.ORG (des-cbc-crc)...
2017 Nov 07
2
after DCs migration to 4.7, two things
...(gensec_gssapi_update_internal)
> GSS server Update(krb5)(1) Update failed: Miscellaneous failure (see text): Failed to find DC4$@SAMBA.COMPANY.COM(kvno 1) in keytab FILE:/var/lib/samba/private/secrets.keytab (arcfour-hmac-md5)
> [2017/11/07 18:23:25.114456, 1] ../auth/gensec/spnego.c:411(gensec_spnego_parse_negTokenInit)
> SPNEGO(gssapi_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
> [2017/11/07 18:30:02.741596, 1] ../source4/auth/gensec/gensec_gssapi.c:790(gensec_gssapi_update_internal)
> GSS server Update(krb5)(1) Update failed: Miscellaneous failure (see text): Failed to find DC4$@SAMBA.CO...
2016 Dec 14
1
netbios alias and AD trouble
.../gse.c:497(gse_get_server_auth_token)
gss_accept_sec_context failed with [ Miscellaneous failure (see
text): Failed to find cifs/srv1-alias.mydom.local at MYDOM.LOCAL(kvno 2) in
keytab MEMORY:cifs_srv_keytab (aes256-cts-hmac-sha1-96)]
[2016/12/14 14:26:26.302905, 1]
../auth/gensec/spnego.c:545(gensec_spnego_parse_negTokenInit)
SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
[2016/12/14 14:26:26.302925, 2]
../auth/gensec/spnego.c:720(gensec_spnego_server_negTokenTarg)
SPNEGO login failed: NT_STATUS_LOGON_FAILURE
My /etc/krb5.keytab on srv2
host/srv2-alias.mydom.local at MYDOM.LOCAL
host/SRV2 a...
2018 Apr 04
3
Unable to rejoin domain, LDAP error 50
...rndc update - NT_STATUS_ACCESS_DENIED
[2018/04/04 10:26:57.344688, 0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/rndc: rndc: neither /etc/rndc.conf nor /etc/rndc.key was found
2. KVNO mismatch - on the main DC
[2018/04/03 14:36:46.822531, 1] ../auth/gensec/spnego.c:411(gensec_spnego_parse_negTokenInit)
SPNEGO(gssapi_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
[2018/04/03 14:36:46.968728, 1] ../source4/auth/gensec/gensec_gssapi.c:790(gensec_gssapi_update_internal)
GSS server Update(krb5)(1) Update failed: Miscellaneous failure (see text): Failed to find DC$@DOMAIN.NET.PL(kvno 2) in...
2017 Feb 03
2
gpupdate - Failed to find DC1 in keytab
...)
> > GSS server Update(krb5)(1) Update failed: Miscellaneous failure
> > (see text): Failed to find DC1$EXAMPLE.ORG(kvno 7) in keytab
> > FILE:/var/lib/samba/private/secrets.keytab (arcfour-hmac-md5)
> > [2017/01/13 13:49:16.075405,
> > 1] ../auth/gensec/spnego.c:541(gensec_spnego_parse_negTokenInit)
> > SPNEGO(gssapi_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
> >
> >
> > klist on secrets.keytab:
> >
> > Keytab name: FILE:/var/lib/samba/private/secrets.keytab
> > KVNO Principal
> > ----
> > ----------------------------------------...
2017 Jan 16
4
SOLVED(I hope): Difficulties with Windows XP: failed to find cifs/fileserver.y.z@Y.Z in keytab (arcfour-hmac-md5)
...ken)
>> gss_accept_sec_context failed with [ Miscellaneous failure (see text):
>> Failed to find cifs/hg004.humgen.0zone at HUMGEN.0ZONE(kvno 1) in keytab
>> MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
>> [2017/01/11 16:42:34.522095, 1]
>> ../auth/gensec/spnego.c:541(gensec_spnego_parse_negTokenInit)
>> SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
>
> Looks like: https://bugzilla.samba.org/show_bug.cgi?id=12262
Thank you Mark
but it doesn't feels the same to me...
In subsequent tests I wasn't able any more even to join. The first time was
a lucky on...
2016 Oct 10
1
unable to browse shares
...librpc/crypto/gse.c:497(gse_get_server_auth_token)
gss_accept_sec_context failed with [ Miscellaneous failure (see text):
Failed to find cifs/rimfire.hebe.us at HEBE.US(kvno 2) in keytab
MEMORY:cifs_srv_keytab (aes256-cts-hmac-sha1-96)]
[2016/10/10 17:14:50.128737, 1]
../auth/gensec/spnego.c:545(gensec_spnego_parse_negTokenInit)
SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
[2016/10/10 17:14:50.128766, 2]
../auth/gensec/spnego.c:720(gensec_spnego_server_negTokenTarg)
SPNEGO login failed: NT_STATUS_LOGON_FAILURE
[2016/10/10 17:14:50.128804, 3]
../source3/smbd/smb2_server.c:3097(smbd_smb2_request_err...
2017 Jan 16
0
SOLVED(I hope): Difficulties with Windows XP: failed to find cifs/fileserver.y.z@Y.Z in keytab (arcfour-hmac-md5)
...accept_sec_context failed with [ Miscellaneous failure (see
> >> text): Failed to find cifs/hg004.humgen.0zone at HUMGEN.0ZONE(kvno 1)
> >> in keytab MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
> >> [2017/01/11 16:42:34.522095, 1]
> >> ../auth/gensec/spnego.c:541(gensec_spnego_parse_negTokenInit)
> >> SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
> >
> > Looks like: https://bugzilla.samba.org/show_bug.cgi?id=12262
>
> Thank you Mark
>
> but it doesn't feels the same to me...
>
> In subsequent tests I wasn't able any mor...
2017 Feb 03
0
gpupdate - Failed to find DC1 in keytab
...pi.c:619(gensec_gssapi_update)
> GSS server Update(krb5)(1) Update failed: Miscellaneous failure (see text): Failed to find DC1$EXAMPLE.ORG(kvno 7) in keytab FILE:/var/lib/samba/private/secrets.keytab (arcfour-hmac-md5)
> [2017/01/13 13:49:16.075405, 1] ../auth/gensec/spnego.c:541(gensec_spnego_parse_negTokenInit)
> SPNEGO(gssapi_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
>
>
> klist on secrets.keytab:
>
> Keytab name: FILE:/var/lib/samba/private/secrets.keytab
> KVNO Principal
> ---- --------------------------------------------------------------------------
> 1...
2017 Feb 03
0
gpupdate - Failed to find DC1 in keytab
...)
> > GSS server Update(krb5)(1) Update failed: Miscellaneous failure
> > (see text): Failed to find DC1$EXAMPLE.ORG(kvno 7) in keytab
> > FILE:/var/lib/samba/private/secrets.keytab (arcfour-hmac-md5)
> > [2017/01/13 13:49:16.075405,
> > 1] ../auth/gensec/spnego.c:541(gensec_spnego_parse_negTokenInit)
> > SPNEGO(gssapi_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
> >
> >
> > klist on secrets.keytab:
> >
> > Keytab name: FILE:/var/lib/samba/private/secrets.keytab
> > KVNO Principal
> > ----
> > ----------------------------------------...
2017 Nov 07
0
after DCs migration to 4.7, two things
...> GSS server Update(krb5)(1) Update failed: Miscellaneous failure
> > (see text): Failed to find DC4$@SAMBA.COMPANY.COM(kvno 1) in keytab
> > FILE:/var/lib/samba/private/secrets.keytab (arcfour-hmac-md5)
> > [2017/11/07 18:23:25.114456,
> > 1] ../auth/gensec/spnego.c:411(gensec_spnego_parse_negTokenInit)
> > SPNEGO(gssapi_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
>
> That one worries me a bit more than the DNS thing...
>
It seems that something is looking for 'key version number 1' (kvno 1)
but the klist you posted shows kvno 2
Rowland
2018 Apr 08
0
Unable to rejoin domain, LDAP error 50
>>> 2. KVNO mismatch - on the main DC
>>>
>>> [2018/04/03 14:36:46.822531,
>>> 1] ../auth/gensec/spnego.c:411(gensec_spnego_parse_negTokenInit)
>>> SPNEGO(gssapi_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
>>> [2018/04/03 14:36:46.968728,
>>> 1]
>>> ../source4/auth/gensec/gensec_gssapi.c:790(gensec_gssapi_update_internal)
>>> GSS server Update(krb5)(1) Update failed: Miscellaneous fa...
2018 Aug 07
0
gss_accept_sec_context failed with [ Miscellaneous failure (see text): Decrypt integrity check failed]
...every 10
seconds the following error:
[2018/08/07 12:52:15.351515, 1] ../source3/librpc/crypto/gse.c:496(gse_get_server_auth_token)
gss_accept_sec_context failed with [ Miscellaneous failure (see text): Decrypt integrity check failed]
[2018/08/07 12:52:15.351565, 1] ../auth/gensec/spnego.c:541(gensec_spnego_parse_negTokenInit)
SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
[2018/08/07 12:52:15.351609, 2] ../auth/gensec/spnego.c:716(gensec_spnego_server_negTokenTarg)
SPNEGO login failed: NT_STATUS_LOGON_FAILURE
Maybe somebody could give me a hint what is broken here and how to fix it.
I tried to fi...
2018 Mar 29
2
Failed to find DC in keytab, gpupdate fails
...o.
>
> I'm looking for a help, because I'm fighting almost for a
> week and I'm
> unable to find the cause.
>
>
>
> I saw such a logs on my main DC (and only there):
>
>
>
> [2018/03/28 09:11:29.622673, 1]
> ../auth/gensec/spnego.c:411(gensec_spnego_parse_negTokenInit)
>
> SPNEGO(gssapi_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
>
> [2018/03/28 09:11:29.695783, 1]
> ../source4/auth/gensec/gensec_gssapi.c:790(gensec_gssapi_updat
> e_internal)
>
> GSS server Update(krb5)(1) Update failed: Miscellaneous
> failure (see...
2017 Feb 15
0
gpupdate - Failed to find DC1 in keytab
...ensec_gssapi.c:619(gensec_gssapi_update)
GSS server Update(krb5)(1) Update failed: Miscellaneous failure
(see text): Failed to find DC1$EXAMPLE.ORG(kvno 7) in keytab
FILE:/var/lib/samba/private/secrets.keytab (arcfour-hmac-md5)
[2017/01/13 13:49:16.075405, 1]
../auth/gensec/spnego.c:541(gensec_spnego_parse_negTokenInit)
SPNEGO(gssapi_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
Thanks a lot
Regards
Łukasz Sellmann
2017-02-03 17:58 GMT+01:00 Rowland Penny via samba <samba at lists.samba.org>:
> On Fri, 3 Feb 2017 17:39:17 +0100
> Łukasz Sellmann via samba <samba at lists.samba.o...
2018 Feb 07
0
Replication fails after DC re-joined to domain
...(gensec_gssapi_update_internal)
> GSS server Update(krb5)(1) Update failed: Miscellaneous failure (see text):
> Decrypt integrity check failed for checksum type hmac-sha1-96-aes256, key type
> aes256-cts-hmac-sha1-96
> [2018/02/07 16:02:50.440729, 1]
> ../auth/gensec/spnego.c:411(gensec_spnego_parse_negTokenInit)
> SPNEGO(gssapi_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
>
> Replication is OK in the other direction on dc2: ie
> samba-tool drs replicate dc2 dc1 dc=samdom,dc=example,dc=com --full-sync
>
> works ok.
>
> samba-tool dbcheck --cross-ncs shows no errors when r...
2012 Apr 23
1
Can't authenticate any more, KVNO mismatch? (alpha 17-19)
...c/gensec_gssapi.c:639(gensec_gssapi_update)
GSS server Update(krb5)(1) Update failed: Miscellaneous failure (see
text): Failed to find VIE-SRV001$@VENTUM.AT(kvno 3) in keytab
FILE:/usr/local/samba/private/secrets.keytab (arcfour-hmac-md5)
[2012/04/23 01:58:29, 1]
../auth/gensec/spnego.c:574(gensec_spnego_parse_negTokenInit)
SPNEGO(gssapi_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
Indeed, klist -ke FILE:/usr/local/samba/private/secrets.keytab shows this:
Keytab name: WRFILE:/usr/local/samba/private/secrets.keytab
KVNO Principal
----
---------------------------------------------------------------------...