search for: kerberos_util

...n.hourly) Oct 2 05:17:01 fs1 CRON[23847]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Oct 2 06:17:01 fs1 CRON[24055]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Oct 2 06:17:01 fs1 winbindd[31235]: [2016/10/02 06:17:01.425284, 0] ../source3/libads/kerberos_util.c:74(ads_kinit_password) Oct 2 06:17:01 fs1 winbindd[31235]: kerberos_kinit_password FS1$@DOMAIN.LOCAL failed: Preauthentication failed Oct 2 06:17:01 fs1 winbindd[31235]: [2016/10/02 06:17:01.549878, 0] ../source3/libads/kerberos_util.c:74(ads_kinit_password) Oct 2 06:17:01 fs1 winbindd[3123...

...n.hourly) Oct 2 05:17:01 fs1 CRON[23847]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Oct 2 06:17:01 fs1 CRON[24055]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Oct 2 06:17:01 fs1 winbindd[31235]: [2016/10/02 06:17:01.425284, 0] ../source3/libads/kerberos_util.c:74(ads_kinit_password) Oct 2 06:17:01 fs1 winbindd[31235]: kerberos_kinit_password FS1$@DOMAIN.LOCAL failed: Preauthentication failed Oct 2 06:17:01 fs1 winbindd[31235]: [2016/10/02 06:17:01.549878, 0] ../source3/libads/kerberos_util.c:74(ads_kinit_password) Oct 2 06:17:01 fs1 winbindd[3123...

Guys, I'm seeing the following error at my Samba4 Domain Member File Server: --- ==> /var/log/samba/log.wb-DOMAIN <== [2014/08/16 05:39:26.616878, 0] ../source3/libads/kerberos_util.c:74(ads_kinit_password) kerberos_kinit_password FILE-SERVER$@REALM.DOMAIN.COM failed: Client not found in Kerberos database [2014/08/16 05:39:26.616962, 1] ../source3/winbindd/winbindd_ads.c:122(ads_cached_connection_connect) ads_connect for domain DOMAIN failed: Client not found in Kerberos...

...changing those to true and commenting all the realm and domain_realm stuff out, I could still do a kinit of my domain account and login to the server using kerberos but still have issues with the testjoin and starting smbd gives me errors such as: [2015/11/17 20:16:58.660864, 0] ../source3/libads/kerberos_util.c:74(ads_kinit_password) kerberos_kinit_password THIS$@HIJ.KLM.COM failed: Cannot contact any KDC for requested realm On Wed, Nov 18, 2015 at 3:03 AM L.P.H. van Belle <belle at bazuin.nl> wrote: > Hai, > > From the logs. > > ads_krb5_mk_req: krb5_cc_get_principal failed (No...

...ally/notably smb.conf) in 3+ weeks - AD and SSSD continue to work fine within the operating system itself (SSH to the server works, can query AD for group information via ‘getent group GROUP’, etc.). I do see some Kerberos errors into Samba logs: [2019/03/20 09:43:48.594230, 0] ../source3/libads/kerberos_util.c:74(ads_kinit_password) kerberos_kinit_password LINUX$@EXAMPLE.COM failed: Preauthentication failed As far as I see from forum suggestions, linux box re-join to the domain should fix this issue, but I'm really don't like such manual workaround.

Hmmm...not quite sure where to go to fix this up. Samba 4 PDC, 1 W2K3R2, 1 W2K8R2 additional DC's. samba.log perpetually spewing: [Fri Jun 11 14:47:42 2010 PDT, 0 librpc/rpc/dcerpc_util.c:619:dcerpc_pipe_auth_recv()] Failed to bind to uuid e3514235-4b06-11d1-ab04-00c04fc2dcd2 - NT_STATUS_INVALID_PARAMETER [Fri Jun 11 14:47:42 2010 PDT, 0

...ready: STATUS=daemon 'smbd' finished starting up and ready to serve connections Aug 30 17:23:48 server1.domain.com systemd[1]: Started Samba SMB Daemon. Aug 30 17:23:49 server1.domain.com smbd[40996]: [2019/08/30 17:23:49.228538, 0, pid=40996, effective(0, 0), real(0, 0)] ../source3/libads/kerberos_util.c:74(ads_kinit_password) Aug 30 17:23:49 server1.domain.com smbd[40996]: kerberos_kinit_password SERVER1$@DOMAIN.COM failed: Preauthentication failed Aug 30 17:23:49 server1.domain.com smbd[40996]: [2019/08/30 17:23:49.228990, 0, pid=40996, effective(0, 0), real(0, 0)] ../source3/printing/nt_pri...

...st 20 [2018/08/11 06:15:01.669552, 4] ../source3/winbindd/winbindd_dual.c:1387(child_handler) child daemon request 59 [2018/08/11 06:15:01.669624, 3] ../source3/winbindd/winbindd_ads.c:1392(sequence_number) ads: fetch sequence_number for BFDI [2018/08/11 06:15:02.481002, 0] ../source3/libads/kerberos_util.c:74(ads_kinit_password) kerberos_kinit_password BONN$@DOMAIN.DE failed: Preauthentication failed [2018/08/11 06:15:02.481487, 1] ../source3/winbindd/winbindd_ads.c:135(ads_cached_connection_connect) ads_connect for domain DOMAIN failed: Preauthentication failed [2018/08/11 06:15:02.482231, 4...

...mmenting all the realm and domain_realm > stuff out, I could still do a kinit of my domain account and login to the > server using kerberos but still have issues with the testjoin and starting > smbd gives me errors such as: > > [2015/11/17 20:16:58.660864, 0] > ../source3/libads/kerberos_util.c:74(ads_kinit_password) > kerberos_kinit_password THIS$@HIJ.KLM.COM failed: Cannot contact any KDC > for requested realm > > OK, it would seem that you really only need this in krb5.conf: [libdefaults] default_realm = HIJ.KLM.COM Now as long as your /etc/resolv.conf cont...

...06:15:01.669552, > 4] ../source3/winbindd/winbindd_dual.c:1387(child_handler) child > daemon request 59 [2018/08/11 06:15:01.669624, > 3] ../source3/winbindd/winbindd_ads.c:1392(sequence_number) ads: > fetch sequence_number for BFDI [2018/08/11 06:15:02.481002, > 0] ../source3/libads/kerberos_util.c:74(ads_kinit_password) > kerberos_kinit_password BONN$@DOMAIN.DE failed: Preauthentication > failed [2018/08/11 06:15:02.481487, > 1] ../source3/winbindd/winbindd_ads.c:135(ads_cached_connection_connect) > ads_connect for domain DOMAIN failed: Preauthentication failed There is that d...

No ideas on this? Anybody? --Mark -----Original Message----- Date: Tue, 29 May 2018 09:27:36 -0400 Organization: Ohio Highway Patrol Retirement System To: samba at lists.samba.org Subject: [Samba] Why am I getting login failures for domain members? Every so often I get a message in /var/log/samba/log.samba as follows: 2018/05/26 13:44:25.172415, 2] authentication for user [HPRS/LABRAT$] FAILED

...times twice in the same day. I checked the syslog as you suggested and there is an interesting correlation. At the same time the Samba AD/DC logs the message shown in my post, I get the following in syslog: Jun 4 18:47:02 ccarter winbindd[1359]: [2018/06/04 18:47:02.059311, 0] ../source3/libads/kerberos_util.c:74(ads_kinit_password) Jun 4 18:47:02 ccarter winbindd[1359]: kerberos_kinit_password CCARTER$@HPRS.LOCAL failed: Preauthentication failed Interestingly, ahead of these two message are the following: Jun 4 18:43:08 ccarter winbindd[1359]: [2018/06/04 18:43:08.051810, 0] ../source3/libsmb...

Interesting. So would having the account I'm creating it with in the same subdomain fix the potential trust issues, or is samba's function in a subdomain in general in question? On Tue, Nov 17, 2015 at 3:25 PM Rowland Penny <rowlandpenny241155 at gmail.com> wrote: > On 17/11/15 19:32, Schuyler Bishop wrote: > > Hi Rowland, > > > > Thanks for the response. I

...xx.xxxx.com' DNS Update for xxxxx.xxxx.xx.xxxxxxx.com failed: ERROR_DNS_UPDATE_FAILED DNS update failed! since then it keeps giving me error: - [2012/09/04 21:43:10.299657, 0] smbd/server.c:1109(main) standard input is not a socket, assuming -D option [2012/09/04 21:43:10.606915, 0] libads/kerberos_util.c:101(ads_kinit_password) kerberos_kinit_password XXXXX$@XXX.XX.XXXXXX.COM failed: Preauthentication failed [2012/09/04 21:43:10.608476, 0] printing/nt_printing.c:102(nt_printing_init) nt_printing_init: error checking published printers: WERR_ACCESS_DENIED moving on to other instance: - [20...

..._errors.c Compiling libsmb/samlogon_cache.c Compiling libsmb/namequery_dc.c Compiling libsmb/trustdom_cache.c Compiling libsmb/trusts_util.c Compiling libsmb/dsgetdcname.c Compiling libads/ldap.c Compiling libads/sasl.c Compiling libads/sasl_wrapping.c Compiling libads/krb5_setpw.c Compiling libads/kerberos_util.c Compiling libads/ldap_user.c Compiling libads/ads_struct.c Compiling libads/kerberos_keytab.c Compiling libads/disp_sec.c Compiling libads/ldap_utils.c Compiling libads/ldap_schema.c Compiling libads/util.c Compiling libads/ndr.c Compiling libads/kerberos_verify.c Compiling libads/authdata.c Comp...

...ction ?cli_credentials_set_machine_account?: auth/credentials/credentials_files.c:355: warning: ?event_context_find? is deprecated (declared at ./lib/events/events.h:6) Compiling auth/credentials/credentials_ntlm.c Compiling auth/credentials/credentials_krb5.c Compiling auth/credentials/../kerberos/kerberos_util.c Partially linking bin/mergedobj/credentials.o Compiling heimdal/lib/gssapi/spnego/init_sec_context.c Compiling heimdal/lib/gssapi/spnego/external.c heimdal/lib/gssapi/spnego/external.c:46: warning: cast discards qualifiers from pointer target type heimdal/lib/gssapi/spnego/external.c:97: warning:...