search for: krb5_get_credenti

.... Otherwise I'll need to have service records for all our DC's in all 6 domains in every DNS server in the forest which is not practical!?! thanks in advance, Andy. > can you explain the many instances (against different > server) of errors of the type from winbindd?, > > krb5_get_credentials failed for bbcdev1002$@DSD-PILOT.CORE.BBC.CO.UK > (Cannot find KDC for requested realm) KDC's must either be able to be found in DNS (using the SRV records etc) or be in /etc/krb5.conf. Andrew Bartlett

..._tkt_enctypes = des3-hmac-sha1 des-cbc-crc des-cbc-md5 aes256-cts arcfour-hmac-md5 # default_tgs_enctypes = des3-hmac-sha1 des-cbc-crc des-cbc-md5 aes256-cts arcfour-hmac-md5 clockskew = 300 [2007/03/04 12:21:47, 5] libads/kerberos.c:get_service_ticket(367) get_service_ticket: krb5_get_credentials for BLANKENSHIP6$@BLANKENSHIP.LOCAL enctype 18 failed: KDC has no support for encryption type [2007/03/04 12:21:47, 3] libads/kerberos.c:kerberos_derive_salting_principal_for_enctype(552) verify_service_password: get_service_ticket failed: KDC has no support for encryption type [2007/03/04 12...

...b/clikrb5.c:ads_krb5_mk_req(269) > krb5_cc_get_principal failed (No credentials cache found) > [2005/01/14 04:03:20, 1] > nsswitch/winbindd_util.c:add_trusted_domains(207) > scanning trusted domain list > [2005/01/14 04:03:21, 1] libsmb/clikrb5.c:ads_krb5_mk_req(276) > krb5_get_credentials failed for singdc03$@SING.I-FLEX.COM (Cannot > find KDC for requested realm) > [2005/01/14 04:03:22, 1] > nsswitch/winbindd_util.c:add_trusted_domain(150) > Added domain SING sing.i-flex.com > S-1-5-21-1390067357-1214440339-725345543 > [2005/01/14 04:03:22, 1] libsmb/c...

...D=1 3 6 1 4 1 311 2 2 10 [2003/12/17 14:37:30, 3] libsmb/cliconnect.c:cli_session_setup_spnego(697) got principal=pdc$@REALM [2003/12/17 14:37:30, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(509) Doing kerberos session setup [2003/12/17 14:37:30, 1] libsmb/clikrb5.c:ads_krb5_mk_req(276) krb5_get_credentials failed for pdc$@REALM (Ticket expired) [2003/12/17 14:37:30, 4] nsswitch/winbindd_cm.c:cm_open_connection(185) failed kerberos session setup with NT_STATUS_UNSUCCESSFUL [2003/12/17 14:37:30, 5] nsswitch/winbindd_cm.c:cm_open_connection(219) anonymous connection attempt to pdc from fileserver...

...X.COM [2005/01/14 04:03:18, 1] libsmb/clikrb5.c:ads_krb5_mk_req(269) krb5_cc_get_principal failed (No credentials cache found) [2005/01/14 04:03:20, 1] nsswitch/winbindd_util.c:add_trusted_domains(207) scanning trusted domain list [2005/01/14 04:03:21, 1] libsmb/clikrb5.c:ads_krb5_mk_req(276) krb5_get_credentials failed for singdc03$@SING.I-FLEX.COM (Cannot find KDC for requested realm) [2005/01/14 04:03:22, 1] nsswitch/winbindd_util.c:add_trusted_domain(150) Added domain SING sing.i-flex.com S-1-5-21-1390067357-1214440339-725345543 [2005/01/14 04:03:22, 1] libsmb/clikrb5.c:ads_krb5_mk_req(276) krb5_...

...ckages/samba-3.0.0beta3/source # bin/net ads join -U administrator@DOMAIN.com administrator@DOMAIN.com password: [2003/08/13 13:04:14, 1] libsmb/clikrb5.c:ads_krb5_mk_req(267) krb5_cc_get_principal failed (No such file or directory) [2003/08/13 13:04:14, 1] libsmb/clikrb5.c:ads_krb5_mk_req(274) krb5_get_credentials failed for ads-server$@DOMAIN.COM (Unknown error -1765328343) [2003/08/13 13:04:14, 1] utils/net_ads.c:ads_startup(176) ads_connect: Server is unavailable Now, the fix for the same problem under BSD (thanks to WIll Froning) is to compile kerberos with ldap support, which is why I'm not su...

# smbclient -k -L //radius/music$ krb5_get_credentials failed for radius$@SBRC.LOCAL (Unknown error -1765328352) spnego_gen_negTokenTarg failed: Unknown error -1765328352 session setup failed: NT_STATUS_OK # wbinfo -u Error looking up domain users log: [2004/03/26 10:48:30, 1] libsmb/clikrb5.c:ads_krb5_mk_req(276) krb5_get_credentials failed for...

...timated CPU clock rate is 1797 MHz ==25463== For more details, rerun with: -v ==25463== winbindd version 3.0.2rc1 started. Copyright The Samba Team 2000-2004 Added domain WORLDWIDE worldwide.bbc.co.uk S-1-5-21-842925246-920026266-1801674531 krb5_cc_get_principal failed (No credentials cache found) krb5_get_credentials failed for bbcdc1106$@CORE.BBC.CO.UK (Cannot find KDC for requested realm) spnego_gen_negTokenTarg failed: Cannot find KDC for requested realm Added domain CORE core.bbc.co.uk S-1-5-21-1645522239-1647877149-1801674531 Added domain BBCLONDONWW S-1-5-21-450833596-1891573605-709122288 Added domain...

...pnego_bind: got server principal name = not_defined_in_RFC4178@please_ignore [2007/07/04 08:02:12, 3] libsmb/clikrb5.c:ads_krb5_mk_req(593) ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache found) [2007/07/04 08:02:13, 1] libsmb/clikrb5.c:ads_krb5_mk_req(602) ads_krb5_mk_req: krb5_get_credentials failed for not_defined_in_RFC4178@please_ignore (Server not found in Kerberos database) [2007/07/04 08:02:13, 1] utils/net_ads.c:net_ads_join(1470) error on ads_startup: Server not found in Kerberos database Failed to join domain: Improperly formed account name Output from "net ads te...

...;ve been successful to join the server in the domain, wbinfo and kinit responds as one wants it to but when upon samba and winbind starting I'm seeing the following in the logs which I'm guessing is the cause for me being unable to authenticate any users: log.wb-PRESIDIO ads_krb5_mk_req: krb5_get_credentials failed for pdc$@PRESIDIO (Cannot find KDC for requested realm) [2009/09/23 10:54:31, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(624) cli_session_setup_kerberos: spnego_gen_negTokenTarg failed: Cannot find KDC for requested realm [2009/09/23 10:54:31, 0] rpc_client/cli_pipe.c:cli_pipe_...

...trust is fine. Samba version is 3.0.21b on RH Linux ES 3. The winbindd log is giving me the following error: [2006/02/16 08:28:50, 0] nsswitch/winbindd_dual.c:child_read_request(49) Got invalid request length: 0 [2006/02/16 09:20:32, 1] libsmb/clikrb5.c:ads_krb5_mk_req(487) ads_krb5_mk_req: krb5_get_credentials failed for isd43m7pd21$@ONTARIOPD.ORG (Server not found in Kerberos database) [2006/02/16 09:20:32, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(539) spnego_gen_negTokenTarg failed: Server not found in Kerberos database [2006/02/16 09:21:02, 1] libsmb/clikrb5.c:ads_krb5_mk_req(487) ads_...

...7:08, 1] nsswitch/winbindd_util.c:add_trusted_domain(180) Added domain BUILTIN S-1-5-32 [2005/08/12 09:07:08, 1] nsswitch/winbindd_util.c:add_trusted_domain(180) Added domain FLOATER S-1-5-21-1519954005-851123223-2065552488 [2005/08/12 09:07:20, 1] libsmb/clikrb5.c:ads_krb5_mk_req(314) krb5_get_credentials failed for usrd105$@CORP.ANACOMP.COM (Unknown error -1765 328377) [2005/08/12 09:07:20, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(541) spnego_gen_negTokenTarg failed: Unknown error -1765328377 [2005/08/12 09:07:20, 1] libsmb/clikrb5.c:ads_krb5_mk_req(314) krb5_get_credentials fa...

...] libsmb/cliconnect.c:cli_session_setup_kerberos(617) May 28 19:12:07 mxln133738 winbindd[17228]: Doing kerberos session setup May 28 19:12:07 mxln133738 winbindd[17228]: [2009/05/28 19:12:07, 1] libsmb/clikrb5.c:ads_krb5_mk_req(686) May 28 19:12:07 mxln133738 winbindd[17228]: ads_krb5_mk_req: krb5_get_credentials failed for bindc01$@RES (Cannot resolve network address for KDC in requested realm) May 28 19:12:07 mxln133738 winbindd[17228]: [2009/05/28 19:12:07, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(624) May 28 19:12:07 mxln133738 winbindd[17228]: cli_session_setup_kerberos: spnego_gen_negToke...

...a server join our already in place Win2K ADS domain. I am able to 'kinit user@DOMAIN' and auth successfully, but upon attempting 'net ads join', I get the following: # net ads join -Uadministrator administrator password: [2002/10/31 05:11:19, 1] libsmb/clikrb5.c:krb5_mk_req2(63) krb5_get_credentials failed for mnu-server$@MNU.EDU (No credentials found with supported encryption types) [2002/10/31 05:11:19, 1] utils/net_ads.c:ads_startup(148) ads_connect: DSA is unavailable Any suggestions? -Matt MNU Internet System Administrator MNU Network Security Administrator

...c:cli_session_setup_kerberos(617) > > May 28 19:12:07 mxln133738 winbindd[17228]: Doing kerberos session setup > May 28 19:12:07 mxln133738 winbindd[17228]: [2009/05/28 19:12:07, 1] libsmb/clikrb5.c:ads_krb5_mk_req(686) > May 28 19:12:07 mxln133738 winbindd[17228]: ads_krb5_mk_req: krb5_get_credentials failed for bindc01$@RES (Cannot resolve network address for KDC in requested realm) > > May 28 19:12:07 mxln133738 winbindd[17228]: [2009/05/28 19:12:07, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(624) > May 28 19:12:07 mxln133738 winbindd[17228]: cli_session_setup_kerberos: s...

...kerberos_kinit_password HOST/data-cl2a at UK.INFORMA.COM failed: Preauthenticati on failed [2004/02/13 13:35:47, 1] nsswitch/winbindd_ads.c:ads_cached_connection(65) ads_connect for domain INFORMA-UK failed: Preauthentication failed [2004/02/13 13:35:47, 1] libsmb/clikrb5.c:ads_krb5_mk_req(276) krb5_get_credentials failed for tele-root1$@INFORMA.COM (Cannot find KDC for requested realm) [2004/02/13 13:35:47, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(516) spnego_gen_negTokenTarg failed: Cannot find KDC for requested realm [2004/02/13 13:35:47, 1] nsswitch/winbindd_util.c:add_trusted_domain(166)...

...ib/libc.so.6(memcpy+0x1c) [0x18464c] #5 /usr/lib/libkrb5.so.3(krb5_copy_principal+0x115) [0xb90ea5] #6 /usr/lib/libkrb5.so.3(krb5_copy_creds+0x64) [0xb90a04] #7 /usr/lib/libkrb5.so.3 [0xb86feb] #8 /usr/lib/libkrb5.so.3(krb5_cc_store_cred+0x20) [0xb87b90] #9 /usr/lib/libkrb5.so.3(krb5_get_credentials+0x1c3) [0xb94463] #10 winbindd(cli_krb5_get_ticket+0x4b9) [0x529ed9] #11 winbindd(spnego_gen_negTokenTarg+0x62) [0x52aef2] #12 winbindd(cli_session_setup_spnego+0x6b6) [0x5220b6] #13 winbindd [0x492d1d] #14 winbindd(set_dc_type_and_flags+0x9c) [0x49425c] #15 winbindd [0x4...

...[2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93) Conversion from CP850 to UTF8 not supported [2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93) Conversion from UTF8 to CP850 not supported TRADE-Admin@OUR.DOMAIN.INT password: [2003/02/06 15:09:08, 1] libsmb/clikrb5.c:krb5_mk_req2(234) krb5_get_credentials failed for s-tnet1luxdc01$@OUR.DOMAIN.INT (No credentials found with supported encryption types) [2003/02/06 15:09:08, 0] libads/kerberos.c:ads_kinit_password(133) kerberos_kinit_password TRADE-Admin@OUR.DOMAIN.INT failed: Preauthentication failed [2003/02/06 15:09:08, 1] utils/net_ads.c:ads_s...

...ing messages: 2003/10/21 17:22:18, 3] libads/sasl.c:ads_sasl_spnego_bind(191) got principal=dcserver$@NWTRADERS.COM [2003/10/21 17:22:18, 1] libsmb/clikrb5.c:ads_krb5_mk_req(269) krb5_cc_get_principal failed (No such file or directory) [2003/10/21 17:22:34, 1] libsmb/clikrb5.c:ads_krb5_mk_req(276) krb5_get_credentials failed for dcserver$@NWTRADERS.COM (Unknown error -1765328343) [2003/10/21 17:22:34, 1] utils/net_ads.c:ads_startup(181) ads_connect: Operations error [2003/10/21 17:22:34, 2] utils/net.c:main(758) return code = -1 It seems to me, that something is missing. But I don't no why. At several...

...to connect to the dept.univ.edu domain but unable to connect to the cit.univ.edu domain. The command "wbinfo -g --domain UNIV" now results in a "Error looking up domain groups" error and [2006/10/12 15:07:58, 1] libsmb/clikrb5.c:ads_krb5_mk_req(390) ads_krb5_mk_req: krb5_get_credentials failed for dc1$@CIT.UNIV.EDU (Server not found in Kerberos database) [2006/10/12 15:07:58, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(544) spnego_gen_negTokenTarg failed: Server not found in Kerberos database [2006/10/12 15:07:58, 1] libsmb/clikrb5.c:ads_krb5_mk_req(...