search for: gse_init_client

Having problems with rfc2307 user ids. This was working briefly and now it’s not. samba and winbind v 2.4.2.10+dfs wbinfo -u lists all the domain users wbinfo -g lists all the domain groups getent group lists all the local groups and the AD domain groups that have a UNIX gid set getent passwd lists only the local users, then pauses for a moment, then nothing. AD users can’t log in and can’t

....14 without more success. I have also some errors showing up with a high level of debug for winbind: [2016/07/25 23:15:24.221239, 5] ../auth/gensec/gensec_start.c:672(gensec_start_mech) Starting GENSEC submechanism gse_krb5 [2016/07/25 23:15:24.263941, 5] ../source3/librpc/crypto/gse.c:265(gse_init_client) gss_acquire_creds failed for GSS_C_NO_NAME with [ No credentials were supplied, or the credentials were unavailable or inaccessible.: unknown mech-code 0 for mech 1 2 840 113554 1 2 2] -the caller may retry after a kinit. [2016/07/25 23:15:24.264068, 4] ../auth/gensec/gensec_start.c:679(ge...

...ing to man smb.conf, security = ads can only be used when the net utilities were used to join the computer into the domain, which was not the case. Changing to security = ads results in a different error, this time, in log.smbd [2024/07/12 17:49:16.409171, ?5] ../../source3/librpc/crypto/gse.c:301(gse_init_client) ? smb_gss_krb5_import_cred ccache[MEMORY:prtpub_cache] failed with [ Miscellaneous failure (see text): unknown mech-code?2 for mech 1 2 840 113554 1 2 2] -the caller may retry after a kinit. # COMMENT: sssd could successfully sign user in with Kerberos, so not sure why this error. This seems to be...