search for: kerberos_pac

...UCH_USER [2017/10/16 10:11:21.392982, 10, pid=1440, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd.c:734(process_request) process_request: Handling async request 58217:PAM_AUTH_CRAP [2017/10/16 10:11:21.912764, 5, pid=1440, effective(0, 0), real(0, 0)] ../auth/kerberos/kerberos_pac.c:347(kerberos_decode_pac) PAC Decode: Failed to verify the service signature: Invalid argument [2017/10/16 10:11:21.912829, 5, pid=1440, effective(0, 0), real(0, 0)] ../auth/kerberos/kerberos_pac.c:347(kerberos_decode_pac) PAC Decode: Failed to verify the service signature: Invalid argument...

...1.392982, 10, pid=1440, effective(0, 0), > real(0, 0), class=winbind] > ../source3/winbindd/winbindd.c:734(process_request) > process_request: Handling async request 58217:PAM_AUTH_CRAP > [2017/10/16 10:11:21.912764, 5, pid=1440, effective(0, 0), > real(0, 0)] ../auth/kerberos/kerberos_pac.c:347(kerberos_decode_pac) > PAC Decode: Failed to verify the service signature: > Invalid argument > [2017/10/16 10:11:21.912829, 5, pid=1440, effective(0, 0), > real(0, 0)] ../auth/kerberos/kerberos_pac.c:347(kerberos_decode_pac) > PAC Decode: Failed to verify the service...

...gt; 10:11:21.392982, 10, pid=1440, effective(0, 0), real(0, 0), > class=winbind] ../source3/winbindd/winbindd.c:734(process_request) > process_request: Handling async request 58217:PAM_AUTH_CRAP > [2017/10/16 10:11:21.912764, 5, pid=1440, effective(0, 0), real(0, > 0)] ../auth/kerberos/kerberos_pac.c:347(kerberos_decode_pac) PAC > Decode: Failed to verify the service signature: Invalid argument > [2017/10/16 10:11:21.912829, 5, pid=1440, effective(0, 0), real(0, > 0)] ../auth/kerberos/kerberos_pac.c:347(kerberos_decode_pac) PAC > Decode: Failed to verify the service signature: In...

On Sat, 14 Oct 2017, Rowland Penny via samba wrote: > On Sat, 14 Oct 2017 05:33:31 -0400 (EDT) > me at tdiehl.org wrote: > >> On Fri, 13 Oct 2017, Rowland Penny via samba wrote: >> >>> On Fri, 13 Oct 2017 11:45:43 +0200 >>> "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: >>> >>>> Hai, >>>>

...982, 10, pid=1440, effective(0, 0), real(0, 0), >> class=winbind] ../source3/winbindd/winbindd.c:734(process_request) >> process_request: Handling async request 58217:PAM_AUTH_CRAP >> [2017/10/16 10:11:21.912764, 5, pid=1440, effective(0, 0), real(0, >> 0)] ../auth/kerberos/kerberos_pac.c:347(kerberos_decode_pac) PAC >> Decode: Failed to verify the service signature: Invalid argument >> [2017/10/16 10:11:21.912829, 5, pid=1440, effective(0, 0), real(0, >> 0)] ../auth/kerberos/kerberos_pac.c:347(kerberos_decode_pac) PAC >> Decode: Failed to verify the servi...

Hi, I have 2 samba AD DC's running 4.7.0 and 2 member servers running 4.6.2. Everything seems to be working OK except that I see the following errors over and over again in the winbind log on one of the member servers: [2017/10/12 00:53:52.351095, 2] ../auth/kerberos/kerberos_pac.c:96(check_pac_checksum) check_pac_checksum: PAC Verification failed: Decrypt integrity check failed (-1765328353) [2017/10/12 00:53:52.871160, 2] ../auth/kerberos/kerberos_pac.c:96(check_pac_checksum) check_pac_checksum: PAC Verification failed: Decrypt integrity check failed (-1765328353)...

...AD DC's running 4.7.0 and 2 member servers > running 4.6.2. > > Everything seems to be working OK except that I see the > following errors > over and over again in the winbind log on one of the member servers: > > [2017/10/12 00:53:52.351095, 2] > ../auth/kerberos/kerberos_pac.c:96(check_pac_checksum) > check_pac_checksum: PAC Verification failed: Decrypt > integrity check failed (-1765328353) > [2017/10/12 00:53:52.871160, 2] > ../auth/kerberos/kerberos_pac.c:96(check_pac_checksum) > check_pac_checksum: PAC Verification failed: Decrypt > inte...

...rash again, I would prefer to be able to > know things earlier. The DM gave up again today. No more gid-related stuff inside the logs, had to kill the daemons to get the shares up again. I increased loglevel to 2 and see in # tail winbindd.log [2017/12/06 13:12:50.216478, 2] ../auth/kerberos/kerberos_pac.c:96(check_pac_checksum) check_pac_checksum: PAC Verification failed: Decrypt integrity check failed (-1765328353) [2017/12/06 13:12:50.216523, 2] ../auth/kerberos/kerberos_pac.c:96(check_pac_checksum) check_pac_checksum: PAC Verification failed: Decrypt integrity check failed (-1765328353) [2...

....2. > >> > >> Everything seems to be working OK except that I see the > >> following errors > >> over and over again in the winbind log on one of the > member servers: > >> > >> [2017/10/12 00:53:52.351095, 2] > >> ../auth/kerberos/kerberos_pac.c:96(check_pac_checksum) > >> check_pac_checksum: PAC Verification failed: Decrypt > >> integrity check failed (-1765328353) > >> [2017/10/12 00:53:52.871160, 2] > >> ../auth/kerberos/kerberos_pac.c:96(check_pac_checksum) > >> check_pac_checksum:...

On 12/04/2017 02:15 PM, Rowland Penny via samba wrote: > Possibly, if, by using the old config, Samba is ignoring the 'idmap > config DOMAIN' lines and putting everything into the '*' domain, then > you may (probably would) have more than your original set up allowed. > If this fixes it, you have found another bug ;-) > It should work with the old lines. I now

...709000,? 2]) with som errors. Any idea ? ----- samba.log ----- 020/01/04 23:59:55.691908,? 2] ../source3/smbd/close.c:802(close_normal_file) ? EXAMPLE\myuser closed file .system/Thunderbird/profile-release/panacea.dat (numopen=13) NT_STATUS_OK [2020/01/04 23:59:55.697718,? 3] ../auth/kerberos/kerberos_pac.c:413(kerberos_decode_pac) ? Found account name from PAC: MYPC$ [] [2020/01/04 23:59:55.697764,? 3] ../source3/auth/user_krb5.c:51(get_user_from_kerberos_info) ? Kerberos ticket principal name is [MYPC$@EXAMPLE.DOMAIN.FR] [2020/01/04 23:59:55.699792,? 3] ../source3/auth/user_krb5.c:164(get_user...

...registered [2014/07/21 13:17:30.645510, 3] ../source3/smbd/negprot.c:671(reply_negprot) Selected protocol SMB 2.??? [2014/07/21 13:17:30.645912, 3] ../source3/smbd/smb2_negprot.c:243(smbd_smb2_request_process_negprot) Selected protocol SMB2_10 [2014/07/21 13:17:30.650719, 3] ../auth/kerberos/kerberos_pac.c:386(kerberos_decode_pac) Found account name from PAC: kxmjd01 [Doe, John] [2014/07/21 13:17:30.650802, 3] ../source3/auth/user_krb5.c:51(get_user_from_kerberos_info) Kerberos ticket principal name is [kxmjd01 at MY-DOMAIN.TLD] [2014/07/21 13:17:30.651176, 1] ../source3/auth/user_krb5.c:164(...

Hello, First of all : Happy New Year to you all :-) I need your help for a problem. I've 2 servers on CentOS 7: a Samba DC+AD and a Samba Files Sharing. In the Samba file sharing server, all data is store in a RAID Disk partition wich is mounted in /data/ (fstab : UUID=a47ea879-7072-4e8f-a668-3f5a86e58ef2 /data ext4 defaults,user_xattr,acl,barrier=1?? ?1 2). Under Windows each user has

...I can even su(1) or ssh(1) to it and work at the CLI. But if I want to connect to a share: | ~# smbclient //herakles/profiles/ -Utest | Enter SYNTHESIS\test's password: | session setup failed: NT_STATUS_ACCESS_DENIED The log file contains: | [2019/06/24 09:28:03.876063, 3] ../auth/kerberos/kerberos_pac.c:413(kerberos_decode_pac) | Found account name from PAC: test [Max Mustermann] | [2019/06/24 09:28:03.876091, 3] ../source3/auth/user_krb5.c:51(get_user_from_kerberos_info) | Kerberos ticket principal name is [test at SYNTHESIS.SYNTH.INTERN] | [2019/06/24 09:28:03.877874, 3] ../source3/auth/...

...kraken:/var/log/samba# smbd --version Version 4.7.6-Ubuntu It appears there were some major changes between Samba 4.7.6 and Samba 4.8.3 ? On the functional CentOS system, when I try to map a share I see something like this in the log files: [2019/06/11 13:09:35.088714, 3] ../auth/kerberos/kerberos_pac.c:413(kerberos_decode_pac) Found account name from PAC: pgoetz [Goetz, Patrick G] On the Ubuntu system I see [2019/06/11 13:58:47.535611, 3] ../auth/ntlmssp/ntlmssp_server.c:454(ntlmssp_server_preauth) Got user=[pgoetz] domain=[austin] workstation=[CNS-VM-PGOETZ1] len1=24 len2=332 What...

Hi everyone, A quick question: Is check password script option working for ad dc setup? I believe, ad on it's own cannot provide password protection against dictionaries.

...N_DISCONNECTED' > [2015/05/27 10:09:07.633707, 3] > ../source4/smbd/process_single.c:114(single_terminate) > single_terminate: reason[kdc_tcp_call_loop: tstream_read_pdu_blob_recv() > - NT_STATUS_CONNECTION_DISCONNECTED] > [2015/05/27 10:09:07.642900, 3] > ../auth/kerberos/kerberos_pac.c:386(kerberos_decode_pac) > Found account name from PAC: Administrator [] > [2015/05/27 10:09:07.660999, 3] > ../source4/kdc/kpasswdd.c:375(kpasswd_process_request) > KURSK\Administrator (S-1-5-21-1939327600-330022255-2124521309-500) is > changing password of xviewsion at kursk...

...fo.c:159 [2020/01/04 23:59:55.714015,? 2] ../source3/smbd/close.c:802(close_normal_file) ? EXAMPLE\myuser closed file .system/Thunderbird/profile-release/favicons.sqlite-shm (numopen=13) NT_STATUS_OK On the other hand, is this error? normal ? [2020/01/04 23:59:55.719198,? 3] ../auth/kerberos/kerberos_pac.c:413(kerberos_decode_pac) ? Found account name from PAC: MYPC$ [] [2020/01/04 23:59:55.719241,? 3] ../source3/auth/user_krb5.c:51(get_user_from_kerberos_info) ? Kerberos ticket principal name is [MYPC$@EXAMPLE.DOMAIN.FR] [2020/01/04 23:59:55.721193,? 3] ../source3/auth/user_krb5.c:164(get_user...

...54, 3] ../source3/smbd/sesssetup.c:138(reply_sesssetup_and_X_spnego) Doing spnego session setup [2013/10/28 15:32:44.525773, 3] ../source3/smbd/sesssetup.c:179(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2013/10/28 15:32:44.538199, 3] ../auth/kerberos/kerberos_pac.c:386(kerberos_decode_pac) Found account name from PAC: Wakizashi [Alex Wakizashi] [2013/10/28 15:32:44.538250, 3] ../source3/auth/user_krb5.c:51(get_user_from_kerberos_info) Kerberos ticket principal name is [wakizashi at SAMBA.LOCAL.NET] [2013/10/28 15:32:44.538419, 3] ../source3/param/load...

...b_recv() - NT_STATUS_CONNECTION_DISCONNECTED' [2015/05/27 10:09:07.633707, 3] ../source4/smbd/process_single.c:114(single_terminate) single_terminate: reason[kdc_tcp_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED] [2015/05/27 10:09:07.642900, 3] ../auth/kerberos/kerberos_pac.c:386(kerberos_decode_pac) Found account name from PAC: Administrator [] [2015/05/27 10:09:07.660999, 3] ../source4/kdc/kpasswdd.c:375(kpasswd_process_request) KURSK\Administrator (S-1-5-21-1939327600-330022255-2124521309-500) is changing password of xviewsion at kursk.mtt [2015/05/27 10:09:07...