search for: krb5_wrap

When trying to build 4.1.0, we got an error that our krb5 was not up to date. It was 1.8-3 and needed to be 1.9 or greater. So we decided to try the latest 1.12 version from MIT. Now when we try to build we get: ../lib/krb5_wrap/krb5_samba.c -c -o default/lib/krb5_wrap/krb5_samba_1.o cc1: warning: include location "/usr/local/include" is unsafe for cross-compilation ../lib/krb5_wrap/krb5_samba.c: In function 'get_krb5_smb_session_key': ../lib/krb5_wrap/krb5_samba.c:763: warning: 'krb5_auth_con_getremo...

...;Servers/Unix Servers" -U svc-accountOU at domain.net<mailto:svc-accountOU at domain.net> -d 8? I see a constant loop of: ads_get_kvno: Searching for account HOSTNAME$ ads_get_kvno: Using: CN=HOSTNAME,OU=UXServers,OU=Servers,DC=domain,DC=net ads_get_kvno: Looked Up KVNO of: 9 ../../lib/krb5_wrap/krb5_samba.c:1692: Will try to delete old keytab entries ../../lib/krb5_wrap/krb5_samba.c:1771: Found old entry for principal: restrictedkrbhost/hostname.domain.net at DOMAIN.NET<mailto:restrictedkrbhost/gvlac231.dolgen.net at DOLGEN.NET>(kvno 1) - trying to remove it. ../../lib/krb5_wrap/krb...

...st returns without any output and getent passwd just shows the default centos7 users.   Even with debugging the only strange thing might be that the log.wb-DOMAIN seems to state an immediate (!!!) timeout on wbinfo -u   [2016/04/14 12:17:26.558350,  3, pid=2873, effective(0, 0), real(0, 0)] ../lib/krb5_wrap/krb5_samba.c:2502(kerberos_get_principal_from_service_hostname)   kerberos_get_principal_from_service_hostname: cannot get realm from, desthost host.domain.de or default ccache. Using default smb.conf realm DOMAIN.DE [2016/04/14 12:17:26.591090,  3, pid=2873, effective(0, 0), real(0, 0)] ../source3...

...l/lib/krb5/principal.c:84 #3 0x00007ffff79856c4 in krb5_kt_free_entry (context=0x0, entry=entry at entry=0x7fffffffdb70) at ../source4/heimdal/lib/krb5/keytab.c:709 #4 0x00007ffff3cc08e5 in smb_krb5_kt_free_entry (context=<optimized out>, kt_entry=kt_entry at entry=0x7fffffffdb70) at ../lib/krb5_wrap/krb5_samba.c:1247 #5 0x00007ffff6384c6d in ads_keytab_create_default (ads=<optimized out>) at ../source3/libads/kerberos_keytab.c:750 #6 0x0000555555596190 in net_ads_keytab_create (c=0x55555584e5b0, argc=<optimized out>, argv=<optimized out>) at ../source3/utils/net_ads.c:2507...

...Samba4 on RHEL 5.3 which didn't have Python on it. I've downloaded Python-2.6.5.tar from http://ftp.samba.org/pub/tridge/python/. I get the following error during the compile : .......................................... ........................................... [3285/3758] Compiling lib/krb5_wrap/enctype_convert.c [3286/3758] Linking default/lib/util/libutil_setid.so [3287/3758] Linking default/lib/talloc/libtalloc.so [3288/3758] Linking default/lib/talloc/libpytalloc-util.so /usr/bin/ld: /usr/local/lib/libpython2.6.a(cobject.o): relocation R_X86_64_32S against `PyCObject_Type' can not...

On 01/12/14 00:08, ?? wrote: > Rowland Penny,??: > I test id Administrator as the wiki. > I run > chown Administrator(or other DomainUser) file I got > invalid User :Administrator > > ------------------ > ?? > 2014-12-01 > > ------------------------------------------------------------- > ????Rowland Penny > ?????2014-11-28 17:59:18 > ?????? >

...2015/04/15 16:22:19.625415, 3, pid=9576, effective(0, 0), real(0, 0)] ../source3/libads/sasl.c:972(ads_sasl_spnego_bind) ads_sasl_spnego_bind: got server principal name = not_defined_in_RFC4178 at please_ignore [2015/04/15 16:22:19.625600, 3, pid=9576, effective(0, 0), real(0, 0)] ../lib/krb5_wrap/krb5_samba.c:266(ads_cleanup_expired_creds) ads_cleanup_expired_creds: Ticket in ccache[MEMORY:winbind_ccache] expiration Thu, 16 Apr 2015 02:22:19 EDT [2015/04/15 16:22:19.625695, 10, pid=9576, effective(0, 0), real(0, 0)] ../lib/krb5_wrap/krb5_samba.c:533(ads_krb5_mk_req) ads_krb5_mk_re...

Rowland Penny,??: When I run wbinfo -i TEST\\test I got the log: [2014/12/04 15:39:50.169934, 3] ../source3/libads/sasl.c:964(ads_sasl_spnego_bind) ads_sasl_spnego_bind: got server principal name = not_defined_in_RFC4178 at please_ignore [2014/12/04 15:39:50.171240, 3] ../lib/krb5_wrap/krb5_samba.c:499(ads_krb5_mk_req) ads_krb5_mk_req: krb5_cc_get_principal failed (No such file or directory) [2014/12/04 15:39:50.188252, 3] ../lib/krb5_wrap/krb5_samba.c:266(ads_cleanup_expired_creds) ads_cleanup_expired_creds: Ticket in ccache[MEMORY:winbind_ccache] expiration Fri, 05 Dec 201...

...015/04/03 22:55:59.325527, 3, effective(0, 0), real(0, 0)] ../source3/libads/sasl.c:964(ads_sasl_spnego_bind) >>> ads_sasl_spnego_bind: got server principal name = not_defined_in_RFC4178 at please_ignore >>> [2015/04/03 22:55:59.325655, 3, effective(0, 0), real(0, 0)] ../lib/krb5_wrap/krb5_samba.c:499(ads_krb5_mk_req) >>> ads_krb5_mk_req: krb5_cc_get_principal failed (No such file or directory) >>> [2015/04/03 22:55:59.333493, 3, effective(0, 0), real(0, 0)] ../lib/krb5_wrap/krb5_samba.c:266(ads_cleanup_expired_creds) >>> ads_cleanup_expired_c...

...3 22:55:59.325527, 3, effective(0, 0), real(0, 0)] ../source3/libads/sasl.c:964(ads_sasl_spnego_bind) >>>> ads_sasl_spnego_bind: got server principal name = not_defined_in_RFC4178 at please_ignore >>>> [2015/04/03 22:55:59.325655, 3, effective(0, 0), real(0, 0)] ../lib/krb5_wrap/krb5_samba.c:499(ads_krb5_mk_req) >>>> ads_krb5_mk_req: krb5_cc_get_principal failed (No such file or directory) >>>> [2015/04/03 22:55:59.333493, 3, effective(0, 0), real(0, 0)] ../lib/krb5_wrap/krb5_samba.c:266(ads_cleanup_expired_creds) >>>> ads_clean...

...11.2.2.10 > [2015/04/03 22:55:59.325527, 3, effective(0, 0), real(0, 0)] ../source3/libads/sasl.c:964(ads_sasl_spnego_bind) > ads_sasl_spnego_bind: got server principal name = not_defined_in_RFC4178 at please_ignore > [2015/04/03 22:55:59.325655, 3, effective(0, 0), real(0, 0)] ../lib/krb5_wrap/krb5_samba.c:499(ads_krb5_mk_req) > ads_krb5_mk_req: krb5_cc_get_principal failed (No such file or directory) > [2015/04/03 22:55:59.333493, 3, effective(0, 0), real(0, 0)] ../lib/krb5_wrap/krb5_samba.c:266(ads_cleanup_expired_creds) > ads_cleanup_expired_creds: Ticket in ccache[MEM...

.../principal.c:84 > #3 0x00007ffff79856c4 in krb5_kt_free_entry (context=0x0, entry=entry at entry=0x7fffffffdb70) at ../source4/heimdal/lib/krb5/keytab.c:709 > #4 0x00007ffff3cc08e5 in smb_krb5_kt_free_entry (context=<optimized out>, kt_entry=kt_entry at entry=0x7fffffffdb70) at ../lib/krb5_wrap/krb5_samba.c:1247 > #5 0x00007ffff6384c6d in ads_keytab_create_default (ads=<optimized out>) at ../source3/libads/kerberos_keytab.c:750 > #6 0x0000555555596190 in net_ads_keytab_create (c=0x55555584e5b0, argc=<optimized out>, argv=<optimized out>) at ../source3/utils/net_a...

On 03/04/15 19:33, Andrey Repin wrote: > Greetings, Rowland Penny! > >>>>>> I'm trying to get the former PDC back into domain after performing a >>>>> classic >>>>>> migration. >>>>>> AD DC is running fine... if you can call it that. >>>>>> I've edited the smb.conf and nsswitch.conf as suggested in

...ID=1.3.6.1.4.1.311.2.2.10 [2015/04/03 22:55:59.325527, 3, effective(0, 0), real(0, 0)] ../source3/libads/sasl.c:964(ads_sasl_spnego_bind) ads_sasl_spnego_bind: got server principal name = not_defined_in_RFC4178 at please_ignore [2015/04/03 22:55:59.325655, 3, effective(0, 0), real(0, 0)] ../lib/krb5_wrap/krb5_samba.c:499(ads_krb5_mk_req) ads_krb5_mk_req: krb5_cc_get_principal failed (No such file or directory) [2015/04/03 22:55:59.333493, 3, effective(0, 0), real(0, 0)] ../lib/krb5_wrap/krb5_samba.c:266(ads_cleanup_expired_creds) ads_cleanup_expired_creds: Ticket in ccache[MEMORY:winbind_ccach...

...9.325527, 3, effective(0, 0), real(0, 0)] ../source3/libads/sasl.c:964(ads_sasl_spnego_bind) >>>>> ads_sasl_spnego_bind: got server principal name = not_defined_in_RFC4178 at please_ignore >>>>> [2015/04/03 22:55:59.325655, 3, effective(0, 0), real(0, 0)] ../lib/krb5_wrap/krb5_samba.c:499(ads_krb5_mk_req) >>>>> ads_krb5_mk_req: krb5_cc_get_principal failed (No such file or directory) >>>>> [2015/04/03 22:55:59.333493, 3, effective(0, 0), real(0, 0)] ../lib/krb5_wrap/krb5_samba.c:266(ads_cleanup_expired_creds) >>>>>...

Hi All, Whe tryin to use: net ads keytab create, I get the following segfault: Program received signal SIGSEGV, Segmentation fault. 0x00007fffef9d3f69 in free_PrincipalName () from /usr/lib/x86_64-linux-gnu/samba/libasn1-samba4.so.8 I am using samba 4.2.10 from Debian. Deb8u3 package Anyone knows how to fix this?

...REALM instead of the DOMAIN. * BUG 13427: Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP NTLM2 packet check failed due to invalid signature!). o Christof Schmitt <cs at samba.org> * BUG 13446: smbd: Flush dfree memcache on service reload. * BUG 13478: krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries. o Andreas Schneider <asn at samba.org> * BUG 13369: Looking up the user using the UPN results in user name with the REALM instead of the DOMAIN. * BUG 13437: Fix building Samba with gcc 8.1. * BUG 13440: s3:utils:...

On 14/04/15 20:59, Adam Tauno Williams wrote: > On Tue, 2015-04-14 at 15:20 +0100, Rowland Penny wrote: >> On 14/04/15 14:59, Adam Tauno Williams wrote: >>> On Thu, 2014-10-30 at 13:41 -0300, Horacio G. de Oro wrote: >>>> Hi! I'm trying to add a member to be used as fileserver, following the >>>> guides at: >>>> -

...REALM instead of the DOMAIN. * BUG 13427: Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP NTLM2 packet check failed due to invalid signature!). o Christof Schmitt <cs at samba.org> * BUG 13446: smbd: Flush dfree memcache on service reload. * BUG 13478: krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries. o Andreas Schneider <asn at samba.org> * BUG 13369: Looking up the user using the UPN results in user name with the REALM instead of the DOMAIN. * BUG 13437: Fix building Samba with gcc 8.1. * BUG 13440: s3:utils:...

...rent position in the dns name was not advanced past the '.' character. o Stefan Metzmacher <metze at samba.org> * BUG 13308: samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA. o Christof Schmitt <cs at samba.org> * BUG 13478: krb5_wrap: Fix keep_old_entries logic for older kerberos libraries. o Andreas Schneider <asn at samba.org> * BUG 13437: Fix building Samba with gcc 8.1. o Martin Schwenke <martin at meltin.net> * BUG 13499: Don't use CTDB_BROADCAST_VNNMAP. * BUG 13500: ctdb-daemon: Only cons...