search for: krb5_mk_req2

...ing to have my samba server join our already in place Win2K ADS domain. I am able to 'kinit user@DOMAIN' and auth successfully, but upon attempting 'net ads join', I get the following: # net ads join -Uadministrator administrator password: [2002/10/31 05:11:19, 1] libsmb/clikrb5.c:krb5_mk_req2(63) krb5_get_credentials failed for mnu-server$@MNU.EDU (No credentials found with supported encryption types) [2002/10/31 05:11:19, 1] utils/net_ads.c:ads_startup(148) ads_connect: DSA is unavailable Any suggestions? -Matt MNU Internet System Administrator MNU Network Security Administrator

...repeating every 10 seconds. [root@asecl samba]# tail -f log.winbindd winbindd version 3.0alpha21 started. Copyright The Samba Team 2000-2001 [2003/03/27 10:39:08, 1] nsswitch/winbindd_util.c:add_trusted_domain(138) Added domain ASE-LRC-AD [2003/03/27 10:39:08, 1] libsmb/clikrb5.c:krb5_mk_req2(55) krb5_cc_get_principal failed (No credentials cache found) [2003/03/27 10:39:08, 0] libads/kerberos.c:ads_kinit_password(132) kerberos_kinit_password HOST/asecl@ASE-LRC-AD.AE.UTEXAS.EDU failed: Client not found in Kerberos database [2003/03/27 10:39:08, 1] nsswitch/winbindd_ads.c:ads_cac...

Hi all! In the var directory I noticed a log. file that contains: nsswithc/winbindd_util.c:parse_id_list(711) and windbind uid parameter missing (anyone know what parm is missing??) I noticed in the log.winbindd file there's broken pipe errors which I hope are related to the missing parm error. thx, john

...nvestigation, it seems that winbindd cannot locate my kerberos ticket. Or, at least this is what this log output from winbindd >[2002/11/29 07:04:17, 1] nsswitch/winbindd_util.c:init_domain_list(220) > Retrying startup domain sid fetch for JCNTV >[2002/11/29 07:04:17, 1] libsmb/clikrb5.c:krb5_mk_req2(56) > krb5_cc_get_principal failed (No credentials cache found) >[2002/11/29 07:04:17, 1] nsswitch/winbindd_ads.c:ads_cached_connection(72) > ads_connect for domain JCNTV failed: NT_STATUS_LOGON_FAILURE Am I correct? But I do have a kerberos ticket... isaiah:/usr# /usr/kerberos/bin/kl...

...ASCII not supported [2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93) Conversion from CP850 to UTF8 not supported [2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93) Conversion from UTF8 to CP850 not supported TRADE-Admin@OUR.DOMAIN.INT password: [2003/02/06 15:09:08, 1] libsmb/clikrb5.c:krb5_mk_req2(234) krb5_get_credentials failed for s-tnet1luxdc01$@OUR.DOMAIN.INT (No credentials found with supported encryption types) [2003/02/06 15:09:08, 0] libads/kerberos.c:ads_kinit_password(133) kerberos_kinit_password TRADE-Admin@OUR.DOMAIN.INT failed: Preauthentication failed [2003/02/06 15:09:08,...

...my system is a member of the domain, but in starting winbindd, winbindd reports this: winbindd version 3.0alpha21 started. Copyright The Samba Team 2000-2001 [2002/11/29 07:04:07, 1] nsswitch/winbindd_util.c:add_trusted_domain(140) Added domain JCNTV [2002/11/29 07:04:07, 1] libsmb/clikrb5.c:krb5_mk_req2(56) krb5_cc_get_principal failed (No credentials cache found) [2002/11/29 07:04:07, 1] nsswitch/winbindd_ads.c:ads_cached_connection(72) ads_connect for domain JCNTV failed: NT_STATUS_LOGON_FAILURE [2002/11/29 07:04:17, 1] nsswitch/winbindd_util.c:init_domain_list(220) Retrying startup domain...

...fied user to the bst I'm attempting to join. That domain, of course, cannot find the user and I receive an "Invalid credentials" error. Here is an example: ESPN-IQ-1# net ads join -S bst.company.com -U CORP.company.com/domainadmin Password: [2006/02/16 12:20:42, 1] libsmb/clikrb5.c:krb5_mk_req2(56) krb5_cc_get_principal failed (No credentials cache found) [2006/02/16 12:20:42, 0] libads/kerberos.c:ads_kinit_password(133) kerberos_kinit_password CORP.company.com/domainadmin@BST.company.com failed: Client not found in Kerberos database [2006/02/16 12:20:42, 1] utils/net_ads.c:ads_...

Hi, I build an alpha23 samba3.0 system in win2k AD domain. Just a few days ago, it works very well. But in recent, I find it cannot work. I am sure it is the reason for kerberos authority. When I kinit a ticket successfully, it fails to run "smbclient \\Win2K-server\c$ -k", the error message will be as blow: Doing spnego session setup (blob length=109) Doing kerberos session setup

...raded my Samba alpha 21 to alpha 22 and the clients stoped accessing the shares. As I have experienced this before, I started the debugging process, until I reached the part of joining the win2k Domain. Thats where things crash with the following message: [2003/03/18 11:13:59, 1] libsmb/clikrb5.c:krb5_mk_req2(256) krb5_cc_get_principal failed (No credentials cache found) [2003/03/18 11:13:59, 0] libads/ldap.c:ads_join_realm(1349) Host account for aulas already exists - deleting old account Segmentation fault Of course wbinfo -u and -g don't work, neither I see the windows users and groups when...

...nt to browse a share I setup on my Linux box and it prompted me for a username and password. This did not work but I found this in the log.winbind [2003/05/13 16:15:56, 1] nsswitch/winbindd_util.c:rescan_trusted_domains(168) scanning trusted domain list [2003/05/13 16:15:56, 1] libsmb/clikrb5.c:krb5_mk_req2(267) krb5_cc_get_principal failed (No credentials cache found) [2003/05/13 16:15:57, 0] libads/kerberos.c:ads_kinit_password(133) kerberos_kinit_password HOST/demarc@CORP.DELINEA.COM failed: Preauthentication failed [2003/05/13 16:15:57, 1] nsswitch/winbindd_ads.c:ads_cached_connection(69) ad...

...d domain list [2003/04/16 16:20:06, 0] nsswitch/winbindd_idmap.c:winbindd_idmap_init(435) winbindd_idmap_init: Unable to open idmap database [2003/04/16 16:23:30, 1] nsswitch/winbindd_util.c:add_trusted_domain(140) Added domain ***Pre-W2K Domain Name*** [2003/04/16 16:23:30, 1] libsmb/clikrb5.c:krb5_mk_req2(267) krb5_cc_get_principal failed (No credentials cache found) [2003/04/16 16:23:40, 1] nsswitch/winbindd_util.c:rescan_trusted_domains(168) scanning trusted domain list [2003/04/16 16:23:40, 1] nsswitch/winbindd_util.c:add_trusted_domain(140) Added domain ***Trusted NT4 Domain1*** S-1-5-21-1...