search for: gss_get_name_attribut

...see that a ticket has been issued for cifs/hostname at MYREALM.COM, but in /var/log/messages I get this: Jan 21 11:27:00 elastic smbd[1573]: [2013/01/21 11:27:00.675545, 0] ../auth/kerberos/gssapi_pac.c:116(gssapi_obtain_pac_blob) Jan 21 11:27:00 elastic smbd[1573]: obtaining PAC via GSSAPI gss_get_name_attribute failed: The operation or option is not available or unsupported: No such file or directory Jan 21 11:27:07 elastic smbd[1574]: [2013/01/21 11:27:07.559656, 0] ../auth/kerberos/gssapi_pac.c:116(gssapi_obtain_pac_blob) Jan 21 11:27:07 elastic smbd[1574]: obtaining PAC via GSSAPI gss_get_name_a...

...ss a share, I get this error: session setup failed: NT_STATUS_NO_IMPERSONATION_TOKEN Here's what I have in the logs (samba-4.20.1-1.el9.x86_64): [2024/07/09 11:22:26.747013,? 3] ../../auth/kerberos/gssapi_pac.c:120(gssapi_obtain_pac_blob) ? gssapi_obtain_pac_blob: obtaining PAC via GSSAPI gss_get_name_attribute failed: The operation or option is not available or unsupported: No such file or directory [2024/07/09 11:22:26.747103,? 1] ../../auth/gensec/gensec_util.c:70(gensec_generate_session_info_pac) ? gensec_generate_session_info_pac: Unable to find PAC in ticket from username at EXAMPLE.ORG, failin...

...ion setup failed: NT_STATUS_NO_IMPERSONATION_TOKEN > > Here's what I have in the logs (samba-4.20.1-1.el9.x86_64): > > [2024/07/09 11:22:26.747013,? 3] > ../../auth/kerberos/gssapi_pac.c:120(gssapi_obtain_pac_blob) > ? gssapi_obtain_pac_blob: obtaining PAC via GSSAPI > gss_get_name_attribute failed: The operation or option is not > available or unsupported: No such file or directory > [2024/07/09 11:22:26.747103,? 1] > ../../auth/gensec/gensec_util.c:70(gensec_generate_session_info_pac) > ? gensec_generate_session_info_pac: Unable to find PAC in ticket > from username...

...ession setup failed: NT_STATUS_NO_IMPERSONATION_TOKEN > > Here's what I have in the logs (samba-4.20.1-1.el9.x86_64): > > [2024/07/09 11:22:26.747013,? 3] > ../../auth/kerberos/gssapi_pac.c:120(gssapi_obtain_pac_blob) > ? gssapi_obtain_pac_blob: obtaining PAC via GSSAPI > gss_get_name_attribute failed: The operation or option is not > available or unsupported: No such file or directory > [2024/07/09 11:22:26.747103,? 1] > ../../auth/gensec/gensec_util.c:70(gensec_generate_session_info_pac) > ? gensec_generate_session_info_pac: Unable to find PAC in ticket from > usernam...

...RSONATION_TOKEN > > > > Here's what I have in the logs (samba-4.20.1-1.el9.x86_64): > > > > [2024/07/09 11:22:26.747013,? 3] > > ../../auth/kerberos/gssapi_pac.c:120(gssapi_obtain_pac_blob) > > ? gssapi_obtain_pac_blob: obtaining PAC via GSSAPI > > gss_get_name_attribute failed: The operation or option is not > > available or unsupported: No such file or directory > > [2024/07/09 11:22:26.747103,? 1] > > ../../auth/gensec/gensec_util.c:70(gensec_generate_session_info_pac) > > ? gensec_generate_session_info_pac: Unable to find PAC in ticke...

...or KRB5_PDU_NONE declaration... no checking for flags in krb5_creds... no configure: WARNING: krb5_get_init_creds_opt_alloc found in -lkrb5 configure: WARNING: krb5_principal_compare_any_realm not found in -lkrb5 configure: WARNING: gss_wrap_iov not found in -lgssapi configure: WARNING: need either gss_get_name_attribute or gsskrb5_extract_authz_data_from_sec_context and gss_inquire_sec_context_by_oid in -lgssapi for PAC support configure: error: krb5 libs don't have all features required for Active Directory support the attachment is config.log Any help appreciated thanks

...ion... no > checking for flags in krb5_creds... no > configure: WARNING: krb5_get_init_creds_opt_alloc found in -lkrb5 > configure: WARNING: krb5_principal_compare_any_realm not found in -lkrb5 > configure: WARNING: gss_wrap_iov not found in -lgssapi > configure: WARNING: need either gss_get_name_attribute or gsskrb5_extract_authz_data_from_sec_context and gss_inquire_sec_context_by_oid in -lgssapi for PAC support > configure: error: krb5 libs don't have all features required for Active Directory support > the attachment is config.log > > > Any help appreciated Why are you usi...

...US_NO_IMPERSONATION_TOKEN >> >> Here's what I have in the logs (samba-4.20.1-1.el9.x86_64): >> >> [2024/07/09 11:22:26.747013,? 3] >> ../../auth/kerberos/gssapi_pac.c:120(gssapi_obtain_pac_blob) >> ? gssapi_obtain_pac_blob: obtaining PAC via GSSAPI >> gss_get_name_attribute failed: The operation or option is not >> available or unsupported: No such file or directory >> [2024/07/09 11:22:26.747103,? 1] >> ../../auth/gensec/gensec_util.c:70(gensec_generate_session_info_pac) >> ? gensec_generate_session_info_pac: Unable to find PAC in ticket &g...

...t;bb at sernet.de> * BUG 7564: Fix default name resolve order in the manpage. * BUG 8554, 8612, 8748: Add new printers to registry. * BUG 8789: Remove whitespace in example samba.ldif. o Alexander Bokovoy <ab at samba.org> * BUG 8988: Avoid crash with MIT krb5 1.10.0 in gss_get_name_attribute(). o Alejandro Escanero Blanco <aescanero at gmail.com> * BUG 8798: The primary rid should be in the groups rid array. o Ira Cooper <samba at ira.wakeful.net> * BUG 8729: Fix getpass regressions on Solaris/Illumos. * BUG 8743: Fix configure.developer builds on Solar...

...t;bb at sernet.de> * BUG 7564: Fix default name resolve order in the manpage. * BUG 8554, 8612, 8748: Add new printers to registry. * BUG 8789: Remove whitespace in example samba.ldif. o Alexander Bokovoy <ab at samba.org> * BUG 8988: Avoid crash with MIT krb5 1.10.0 in gss_get_name_attribute(). o Alejandro Escanero Blanco <aescanero at gmail.com> * BUG 8798: The primary rid should be in the groups rid array. o Ira Cooper <samba at ira.wakeful.net> * BUG 8729: Fix getpass regressions on Solaris/Illumos. * BUG 8743: Fix configure.developer builds on Solar...