Displaying 20 results from an estimated 70 matches for "krb5_get_credentials".
2004 Feb 16
2
winbindd krb5_get_credentials errors
.... Otherwise I'll need to have service records for all our DC's in all 6 domains in every DNS server in the forest which is not practical!?!
thanks in advance, Andy.
> can you explain the many instances (against different
> server) of errors of the type from winbindd?,
>
> krb5_get_credentials failed for bbcdev1002$@DSD-PILOT.CORE.BBC.CO.UK
> (Cannot find KDC for requested realm)
KDC's must either be able to be found in DNS (using the SRV records etc)
or be in /etc/krb5.conf.
Andrew Bartlett
2007 Mar 04
1
net ads join to w2k3 hangs, every encryption type fails
..._tkt_enctypes = des3-hmac-sha1 des-cbc-crc des-cbc-md5 aes256-cts arcfour-hmac-md5
# default_tgs_enctypes = des3-hmac-sha1 des-cbc-crc des-cbc-md5 aes256-cts arcfour-hmac-md5
clockskew = 300
[2007/03/04 12:21:47, 5] libads/kerberos.c:get_service_ticket(367)
get_service_ticket: krb5_get_credentials for BLANKENSHIP6$@BLANKENSHIP.LOCAL enctype 18 failed: KDC has no support for
encryption type
[2007/03/04 12:21:47, 3] libads/kerberos.c:kerberos_derive_salting_principal_for_enctype(552)
verify_service_password: get_service_ticket failed: KDC has no support for encryption type
[2007/03/04 12:22...
2005 Jan 13
0
getent passwd problem
...b/clikrb5.c:ads_krb5_mk_req(269)
> krb5_cc_get_principal failed (No credentials cache found)
> [2005/01/14 04:03:20, 1]
> nsswitch/winbindd_util.c:add_trusted_domains(207)
> scanning trusted domain list
> [2005/01/14 04:03:21, 1] libsmb/clikrb5.c:ads_krb5_mk_req(276)
> krb5_get_credentials failed for singdc03$@SING.I-FLEX.COM (Cannot
> find KDC for requested realm)
> [2005/01/14 04:03:22, 1]
> nsswitch/winbindd_util.c:add_trusted_domain(150)
> Added domain SING sing.i-flex.com
> S-1-5-21-1390067357-1214440339-725345543
> [2005/01/14 04:03:22, 1] libsmb/clik...
2003 Dec 17
0
krb5_get_credentials failed
...D=1 3 6 1 4 1 311 2 2 10
[2003/12/17 14:37:30, 3] libsmb/cliconnect.c:cli_session_setup_spnego(697)
got principal=pdc$@REALM
[2003/12/17 14:37:30, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(509)
Doing kerberos session setup
[2003/12/17 14:37:30, 1] libsmb/clikrb5.c:ads_krb5_mk_req(276)
krb5_get_credentials failed for pdc$@REALM (Ticket expired)
[2003/12/17 14:37:30, 4] nsswitch/winbindd_cm.c:cm_open_connection(185)
failed kerberos session setup with NT_STATUS_UNSUCCESSFUL
[2003/12/17 14:37:30, 5] nsswitch/winbindd_cm.c:cm_open_connection(219)
anonymous connection attempt to pdc from fileserver...
2005 Jan 13
2
samba3+ADS
...X.COM
[2005/01/14 04:03:18, 1] libsmb/clikrb5.c:ads_krb5_mk_req(269)
krb5_cc_get_principal failed (No credentials cache found)
[2005/01/14 04:03:20, 1]
nsswitch/winbindd_util.c:add_trusted_domains(207)
scanning trusted domain list
[2005/01/14 04:03:21, 1] libsmb/clikrb5.c:ads_krb5_mk_req(276)
krb5_get_credentials failed for singdc03$@SING.I-FLEX.COM (Cannot find
KDC for requested realm)
[2005/01/14 04:03:22, 1]
nsswitch/winbindd_util.c:add_trusted_domain(150)
Added domain SING sing.i-flex.com
S-1-5-21-1390067357-1214440339-725345543
[2005/01/14 04:03:22, 1] libsmb/clikrb5.c:ads_krb5_mk_req(276)
krb5_get...
2003 Aug 13
2
samba v3b3, SuSE 8.0 enterprise, heimdal 0.6, openssl ADS issues
...ckages/samba-3.0.0beta3/source # bin/net ads join -U
administrator@DOMAIN.com
administrator@DOMAIN.com password:
[2003/08/13 13:04:14, 1] libsmb/clikrb5.c:ads_krb5_mk_req(267)
krb5_cc_get_principal failed (No such file or directory)
[2003/08/13 13:04:14, 1] libsmb/clikrb5.c:ads_krb5_mk_req(274)
krb5_get_credentials failed for ads-server$@DOMAIN.COM (Unknown error
-1765328343)
[2003/08/13 13:04:14, 1] utils/net_ads.c:ads_startup(176)
ads_connect: Server is unavailable
Now, the fix for the same problem under BSD (thanks to WIll Froning) is
to compile kerberos with ldap support, which is why I'm not sure...
2004 Mar 26
2
kerberos problem
# smbclient -k -L //radius/music$
krb5_get_credentials failed for radius$@SBRC.LOCAL (Unknown
error -1765328352)
spnego_gen_negTokenTarg failed: Unknown error -1765328352
session setup failed: NT_STATUS_OK
# wbinfo -u
Error looking up domain users
log:
[2004/03/26 10:48:30, 1] libsmb/clikrb5.c:ads_krb5_mk_req(276)
krb5_get_credentials failed for sh...
2004 Feb 04
0
RE: RE: winbindd panic daemon dies
...timated CPU clock rate is 1797 MHz
==25463== For more details, rerun with: -v
==25463==
winbindd version 3.0.2rc1 started.
Copyright The Samba Team 2000-2004
Added domain WORLDWIDE worldwide.bbc.co.uk S-1-5-21-842925246-920026266-1801674531
krb5_cc_get_principal failed (No credentials cache found)
krb5_get_credentials failed for bbcdc1106$@CORE.BBC.CO.UK (Cannot find KDC for requested realm)
spnego_gen_negTokenTarg failed: Cannot find KDC for requested realm
Added domain CORE core.bbc.co.uk S-1-5-21-1645522239-1647877149-1801674531
Added domain BBCLONDONWW S-1-5-21-450833596-1891573605-709122288
Added domain BB...
2007 Jul 03
2
ADS Join on Windows 2008 domain not working in 3.0.25b?
...pnego_bind: got server principal name =
not_defined_in_RFC4178@please_ignore
[2007/07/04 08:02:12, 3] libsmb/clikrb5.c:ads_krb5_mk_req(593)
ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache found)
[2007/07/04 08:02:13, 1] libsmb/clikrb5.c:ads_krb5_mk_req(602)
ads_krb5_mk_req: krb5_get_credentials failed for
not_defined_in_RFC4178@please_ignore (Server not found in Kerberos database)
[2007/07/04 08:02:13, 1] utils/net_ads.c:net_ads_join(1470)
error on ads_startup: Server not found in Kerberos database
Failed to join domain: Improperly formed account name
Output from "net ads testj...
2009 Sep 23
2
winbind and smb tries to auth as pdc$ rather than local name when using ADS
...;ve been successful to join the server in the domain, wbinfo and
kinit responds as one wants it to but when upon samba and winbind
starting I'm seeing the following in the logs which I'm guessing is
the cause for me being unable to authenticate any users:
log.wb-PRESIDIO
ads_krb5_mk_req: krb5_get_credentials failed for pdc$@PRESIDIO
(Cannot find KDC for requested realm)
[2009/09/23 10:54:31, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(624)
cli_session_setup_kerberos: spnego_gen_negTokenTarg failed: Cannot
find KDC for requested realm
[2009/09/23 10:54:31, 0] rpc_client/cli_pipe.c:cli_pipe_ver...
2006 Feb 16
1
kerberos error when users in trusted win2k domain try to browse samba server
...trust is fine. Samba version is 3.0.21b on RH Linux ES
3.
The winbindd log is giving me the following error:
[2006/02/16 08:28:50, 0] nsswitch/winbindd_dual.c:child_read_request(49)
Got invalid request length: 0
[2006/02/16 09:20:32, 1] libsmb/clikrb5.c:ads_krb5_mk_req(487)
ads_krb5_mk_req: krb5_get_credentials failed for
isd43m7pd21$@ONTARIOPD.ORG (Server not found in Kerberos database)
[2006/02/16 09:20:32, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(539)
spnego_gen_negTokenTarg failed: Server not found in Kerberos database
[2006/02/16 09:21:02, 1] libsmb/clikrb5.c:ads_krb5_mk_req(487)
ads_krb...
2005 Aug 12
0
Trusted domain issues
...7:08, 1]
nsswitch/winbindd_util.c:add_trusted_domain(180)
Added domain BUILTIN S-1-5-32
[2005/08/12 09:07:08, 1]
nsswitch/winbindd_util.c:add_trusted_domain(180)
Added domain FLOATER S-1-5-21-1519954005-851123223-2065552488
[2005/08/12 09:07:20, 1] libsmb/clikrb5.c:ads_krb5_mk_req(314)
krb5_get_credentials failed for usrd105$@CORP.ANACOMP.COM (Unknown
error -1765
328377)
[2005/08/12 09:07:20, 1]
libsmb/cliconnect.c:cli_session_setup_kerberos(541)
spnego_gen_negTokenTarg failed: Unknown error -1765328377
[2005/08/12 09:07:20, 1] libsmb/clikrb5.c:ads_krb5_mk_req(314)
krb5_get_credentials faile...
2009 May 28
0
wbinfo -K not working
...]
libsmb/cliconnect.c:cli_session_setup_kerberos(617)
May 28 19:12:07 mxln133738 winbindd[17228]: Doing kerberos session setup
May 28 19:12:07 mxln133738 winbindd[17228]: [2009/05/28 19:12:07, 1]
libsmb/clikrb5.c:ads_krb5_mk_req(686)
May 28 19:12:07 mxln133738 winbindd[17228]: ads_krb5_mk_req:
krb5_get_credentials failed for bindc01$@RES (Cannot resolve network
address for KDC in requested realm)
May 28 19:12:07 mxln133738 winbindd[17228]: [2009/05/28 19:12:07, 1]
libsmb/cliconnect.c:cli_session_setup_kerberos(624)
May 28 19:12:07 mxln133738 winbindd[17228]:
cli_session_setup_kerberos: spnego_gen_negTokenTa...
2002 Oct 31
2
Error joining Win2K domain: ads_connect: DSA is unavailable
...a server join our already in place Win2K ADS domain. I am able to 'kinit user@DOMAIN' and auth successfully, but upon attempting 'net ads join', I get the following:
# net ads join -Uadministrator
administrator password:
[2002/10/31 05:11:19, 1] libsmb/clikrb5.c:krb5_mk_req2(63)
krb5_get_credentials failed for mnu-server$@MNU.EDU (No credentials found with supported encryption types)
[2002/10/31 05:11:19, 1] utils/net_ads.c:ads_startup(148)
ads_connect: DSA is unavailable
Any suggestions?
-Matt
MNU Internet System Administrator
MNU Network Security Administrator
2009 May 29
0
solution: wbinfo -K not working
...c:cli_session_setup_kerberos(617)
>
> May 28 19:12:07 mxln133738 winbindd[17228]: Doing kerberos session setup
> May 28 19:12:07 mxln133738 winbindd[17228]: [2009/05/28 19:12:07, 1] libsmb/clikrb5.c:ads_krb5_mk_req(686)
> May 28 19:12:07 mxln133738 winbindd[17228]: ads_krb5_mk_req: krb5_get_credentials failed for bindc01$@RES (Cannot resolve network address for KDC in requested realm)
>
> May 28 19:12:07 mxln133738 winbindd[17228]: [2009/05/28 19:12:07, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(624)
> May 28 19:12:07 mxln133738 winbindd[17228]: cli_session_setup_kerberos: spne...
2004 Apr 28
0
RE: winbind/wbinfo not pulling info from W2K AD PDC
...kerberos_kinit_password HOST/data-cl2a at UK.INFORMA.COM failed:
Preauthenticati
on failed
[2004/02/13 13:35:47, 1] nsswitch/winbindd_ads.c:ads_cached_connection(65)
ads_connect for domain INFORMA-UK failed: Preauthentication failed
[2004/02/13 13:35:47, 1] libsmb/clikrb5.c:ads_krb5_mk_req(276)
krb5_get_credentials failed for tele-root1$@INFORMA.COM (Cannot find KDC
for
requested realm)
[2004/02/13 13:35:47, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(516)
spnego_gen_negTokenTarg failed: Cannot find KDC for requested realm
[2004/02/13 13:35:47, 1] nsswitch/winbindd_util.c:add_trusted_domain(166)
Add...
2006 Jul 12
5
problem with winbind
...ib/libc.so.6(memcpy+0x1c) [0x18464c]
#5 /usr/lib/libkrb5.so.3(krb5_copy_principal+0x115) [0xb90ea5]
#6 /usr/lib/libkrb5.so.3(krb5_copy_creds+0x64) [0xb90a04]
#7 /usr/lib/libkrb5.so.3 [0xb86feb]
#8 /usr/lib/libkrb5.so.3(krb5_cc_store_cred+0x20) [0xb87b90]
#9 /usr/lib/libkrb5.so.3(krb5_get_credentials+0x1c3) [0xb94463]
#10 winbindd(cli_krb5_get_ticket+0x4b9) [0x529ed9]
#11 winbindd(spnego_gen_negTokenTarg+0x62) [0x52aef2]
#12 winbindd(cli_session_setup_spnego+0x6b6) [0x5220b6]
#13 winbindd [0x492d1d]
#14 winbindd(set_dc_type_and_flags+0x9c) [0x49425c]
#15 winbindd [0x481f...
2003 Feb 06
1
Net ADS JOIN error
...[2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93)
Conversion from CP850 to UTF8 not supported
[2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93)
Conversion from UTF8 to CP850 not supported
TRADE-Admin@OUR.DOMAIN.INT password:
[2003/02/06 15:09:08, 1] libsmb/clikrb5.c:krb5_mk_req2(234)
krb5_get_credentials failed for s-tnet1luxdc01$@OUR.DOMAIN.INT (No
credentials found with supported encryption types)
[2003/02/06 15:09:08, 0] libads/kerberos.c:ads_kinit_password(133)
kerberos_kinit_password TRADE-Admin@OUR.DOMAIN.INT failed:
Preauthentication failed
[2003/02/06 15:09:08, 1] utils/net_ads.c:ads_star...
2003 Oct 21
2
krb5_cc_get_principal failed (No such file or directory)
...ing messages:
2003/10/21 17:22:18, 3] libads/sasl.c:ads_sasl_spnego_bind(191) got
principal=dcserver$@NWTRADERS.COM
[2003/10/21 17:22:18, 1] libsmb/clikrb5.c:ads_krb5_mk_req(269)
krb5_cc_get_principal failed (No such file or directory)
[2003/10/21 17:22:34, 1] libsmb/clikrb5.c:ads_krb5_mk_req(276)
krb5_get_credentials failed for dcserver$@NWTRADERS.COM (Unknown
error -1765328343)
[2003/10/21 17:22:34, 1] utils/net_ads.c:ads_startup(181) ads_connect:
Operations error
[2003/10/21 17:22:34, 2] utils/net.c:main(758) return code = -1
It seems to me, that something is missing. But I don't no why.
At several pl...
2006 Oct 14
0
ADS authentication in disjointed, multiple forest
...to connect
to the dept.univ.edu domain but unable to connect to the cit.univ.edu
domain. The command "wbinfo -g --domain UNIV" now results in a "Error
looking up domain groups" error and
[2006/10/12 15:07:58, 1] libsmb/clikrb5.c:ads_krb5_mk_req(390)
ads_krb5_mk_req: krb5_get_credentials failed for dc1$@CIT.UNIV.EDU
(Server not found in Kerberos database)
[2006/10/12 15:07:58, 1]
libsmb/cliconnect.c:cli_session_setup_kerberos(544)
spnego_gen_negTokenTarg failed: Server not found in Kerberos database
[2006/10/12 15:07:58, 1] libsmb/clikrb5.c:ads_krb5_mk_req(390...