search for: name_to_fqdn

...:172(auth3_generate_session_info_pac) >> Failed to map kerberos pac to server info (NT_STATUS_UNSUCCESSFUL) > > I get this all over and can't connect from systems that worked yesterday. > > pls advise more logs: [2017/07/11 09:11:00.926522, 1] ../source3/lib/util.c:1960(name_to_fqdn) getaddrinfo: Zu diesem Hostnamen gehört keine Adresse [2017/07/11 09:11:01.012504, 1] ../source3/lib/util.c:1960(name_to_fqdn) getaddrinfo: Zu diesem Hostnamen gehört keine Adresse [2017/07/11 09:11:01.061100, 1] ../source3/lib/util.c:1960(name_to_fqdn) getaddrinfo: Zu diesem Hostnamen geh...

Am 2017-07-10 um 12:08 schrieb Rowland Penny via samba: > I would change /etc/hosts to this: > > 127.0.0.1 localhost > 127.0.1.1 pre01svdeb01.my.tld pre01svdeb01 > > ::1 localhost ip6-localhost ip6-loopback > ff02::1 ip6-allnodes > ff02::2 ip6-allrouters > > But replace '127.0.0.1' with the real ipaddress of pre01svdeb01.my.tld > if

...u're trying to add. 3. For me, I had a second line in /etc/hosts that was messing things up. 127.0.0.1 had the right samba1.domain.com name, but a secondary interface just had samba1. 4. add "-d 10" to the command line to print debugging information. I found the following line: name_to_fqdn: lookup for SAMBA1 -> SAMBA1. INSTEAD OF: name_to_fqdn: lookup for SAMBA1 -> SAMBA1.domain.com. Which was my clue that even though hostname --fqdn was returning the right thing (samba1.domain.com), the name_to_fqdn function was getting a different fqdn returned. 5. I also had to mess wi...

...s not. Found something around hardened UNC paths, applied some GPO, dunno if that is necessary or helps (I still have to check where to apply that GPO, computer or user ...). While debugging that I find in log.smbd on the member server: [2017/07/10 11:22:20.290018, 1] ../source3/lib/util.c:1974(name_to_fqdn) WARNING: your /etc/hosts file may be broken! Full qualified domain names (FQDNs) should not be specified as an alias in /etc/hosts. FQDN should be the first name prior to any aliases. [2017/07/10 11:23:15.561739, 1] ../source3/lib/util.c:1974(name_to_fqdn) WARNING: your /etc...

...AD. ?Please do so manually. Failed to join domain: Type or value exists This creates the entry for the machine in AD ("net ads status" shows it) but doesn't populate the dNSHostName or servicePrincipalName attributes. Running "net ads join" with "-d 10" shows: ??name_to_fqdn(): lookup for YETANOTHERTEST1 failed If I add the netbios name to my /etc/hosts then name_to_fqdn() succeeds and returns the FQDN - but the join still fails with the same message. If I run wireshark during an attempted join, then I can see that an ldapmodify operation on the existing machine entry...

.../05/11 20:13:20, 5] lib/util.c:(484) [2009/05/11 20:13:20, 5] lib/util.c:(494) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2050 smb_pid=2945 smb_uid=2050 smb_mid=12 smt_wct=0 smb_bcc=0 [2009/05/11 20:13:20, 10] lib/util.c:(2957) name_to_fqdn: lookup for HOST -> HOST.domain.com [2009/05/11 20:13:20, 3] libads/ldap.c:(2471) ads_domain_func_level: 2 [2009/05/11 20:13:20, 3] libads/kerberos.c:(337) kerberos_secrets_store_des_salt: Storing salt "host/host.domain.com@DOMAIN.COM" [2009/05/11 20:13:21, 2] libads/kerberos_keyta...

...dened UNC paths, applied some GPO, dunno if > that is necessary or helps (I still have to check where to apply that > GPO, computer or user ...). > > While debugging that I find in log.smbd on the member server: > > [2017/07/10 11:22:20.290018, > 1] ../source3/lib/util.c:1974(name_to_fqdn) WARNING: your /etc/hosts > file may be broken! Full qualified domain names (FQDNs) should not be > specified as an alias in /etc/hosts. FQDN should be the first name > prior to any aliases. > [2017/07/10 11:23:15.561739, > 1] ../source3/lib/util.c:1974(name_to_fqdn) WARNING: y...

...linux, configured as domain member to a microsoft AD (windows server 2012 R2). All services (samba, winbind) are in automatic, started with linux start, and should always remained started. In winbindd.log, there are many entries like : [2020/04/27 08:20:14.167335, 1] ../source3/lib/util.c:1700(name_to_fqdn) getaddrinfo: ?chec temporaire dans la r?solution du nom On my Centos 7 samba server, the DNS resolution works only for fulled qualified name : ping workstation1 ping: workstation1 : ?chec temporaire dans la r?solution du nom but ping workstation1.mydomain.fr 64 bytes from workstation1!.myd...

...ds_krb5_mk_req(408) ads_krb5_mk_req: Ticket (xxx3$@XXX.LAN) in ccache (FILE:/tmp/krb5cc_0) is valid until: (Sat, 18 Jun 2005 04:24:29 GMT - 1119065069) [2005/06/17 18:41:55, 10] libsmb/clikrb5.c:get_krb5_smb_session_key(510) Got KRB5 session key of length 16 [2005/06/17 18:41:55, 10] lib/util.c:name_to_fqdn(2623) name_to_fqdn: lookup for yyyyyy -> yyyyyy.xxx.lan. [2005/06/17 18:41:55, 0] libads/ldap.c:ads_add_machine_acct(1512) Warning: ads_set_machine_sd: Unexpected information received [2005/06/17 18:41:55, 5] libads/ldap_utils.c:ads_do_search_retry(56) Search for (objectclass=*) gave 1 rep...

...@XXX.NET <mailto:sjcpdc03$@XXX.NET> ) in ccache (MEMORY:net_ads) is valid until: (Fri, 28 Jul 2006 17:18:12 GMT - 1154132292) [2006/07/28 07:18:12, 10, pid=5128] libsmb/clikrb5.c:get_krb5_smb_session_key(528) Got KRB5 session key of length 16 [2006/07/28 07:18:12, 10, pid=5128] lib/util.c:name_to_fqdn(2860) name_to_fqdn: lookup for sjcpfs03 -> sjcpfs03.xxx.net. [2006/07/28 07:18:12, 0, pid=5128] libads/ldap.c:ads_add_machine_acct(1419) ads_add_machine_acct: Host account for sjcpfs03 already exists - modifying old account [2006/07/28 07:18:12, 5, pid=5128] libads/ldap_utils.c:ads_do_search...

...)^M ads_krb5_mk_req: Ticket (ads-prod-dc$@ADS.ECU.EDU.AU) in ccache (MEMORY:net_ads) is valid until: (Tue, 12 Apr 2005 03:02:36 GMT - 1113246156)^M [2005/04/11 17:02:36, 10] libsmb/clikrb5.c:get_krb5_smb_session_key(510)^M Got KRB5 session key of length 16^M [2005/04/11 17:02:36, 10] lib/util.c:name_to_fqdn(2626)^M name_to_fqdn: lookup for banana -> banana.ads.ecu.edu.au.^M [2005/04/11 17:02:36, 0] libads/ldap.c:ads_add_machine_acct(1368)^M ads_add_machine_acct: Host account for banana already exists - modifying old account^M [2005/04/11 17:02:36, 5] libads/ldap_utils.c:ads_do_search_retry(56)^...

...147) lang_tdb_init: loading /usr/local/samba/var/locks/lang_da_DK.UTF-8.tdb [2009/01/14 20:28:10, 10] libads/kerberos.c:kerberos_kinit_password_ext(217) kerberos_kinit_password: as MAIL$@UNDERVISNING.LOCAL using [MEMORY:net_ads] as ccache and config [(null)] [2009/01/14 20:28:10, 10] lib/util.c:name_to_fqdn(2953) name_to_fqdn: lookup for MAIL -> MAIL.birke-gym.dk. [2009/01/14 20:28:10, 2] lib/interface.c:add_interface(337) added interface eth4 ip=fe80::218:f3ff:fe52:e93%eth4 bcast=fe80::ffff:ffff:ffff:ffff%eth4 netmask=ffff:ffff:ffff:ffff:: [2009/01/14 20:28:10, 2] lib/interface.c:add_interfa...

...ate(444) Got OID 1 2 840 48018 1 2 2 [2008/08/01 10:40:05, 3] smbd/sesssetup.c:reply_spnego_negotiate(447) Got secblob of size 1438 [2008/08/01 10:40:05, 10] passdb/secrets.c:secrets_named_mutex(702) secrets_named_mutex: got mutex for replay cache mutex [2008/08/01 10:40:05, 10] lib/util.c:name_to_fqdn(2626) name_to_fqdn: lookup for LAGOS -> LAGOS.Stanford.EDU. Here's an excerpt from the packet containing the data block Samba can't parse (captured by wireshark); I think the problem is the section labeled "Padding" and "reqFlags" inside the security blob: SMB...

...e //|winbind|//entry to the NSS //|shadow|//database. This can cause the //|wbinfo|//utility fail./" Is that still true ? But now, I cannot connect to the share at all with winbind instead of sss in nsswitch.conf I log, I get : */[2019/06/18 09:51:44.511561,? 1] ../source3/lib/util.c:1699(name_to_fqdn)/**/ /**/? getaddrinfo: temporary failure in name resolution/* However, I well join my linux station to MYDOMAIN with "realm join" command and # realm list mydomain.local ? type: kerberos ? realm-name: MYDOMAIN.LOCAL ? domain-name: mydomain.local ? configured: kerberos-member ? se...

...rb5_mk_req(411) ads_krb5_mk_req: Ticket (ADSserver$@ADS.LOCAL) in ccache (MEMORY:net_ads) is valid until: (Thu, 25 Aug 2005 23:15:15 GMT - 1125026115) [2005/08/25 13:14:38, 10] libsmb/clikrb5.c:get_krb5_smb_session_key(512) Got KRB5 session key of length 16 [2005/08/25 13:14:38, 10] lib/util.c:name_to_fqdn(2669) name_to_fqdn: lookup for wks024 -> wks024.ADS.LOCAL. [2005/08/25 13:14:38, 0] libads/ldap.c:ads_add_machine_acct(1400) ads_add_machine_acct: Host account for wks024 already exists - modifying old a ccount [2005/08/25 13:14:38, 5] libads/ldap_utils.c:ads_do_search_retry(56) Search fo...

...ed as domain member to a microsoft AD (windows server 2012 R2). > All services (samba, winbind) are in automatic, started with linux start, and should always remained started. > > In winbindd.log, there are many entries like : > [2020/04/27 08:20:14.167335, 1] ../source3/lib/util.c:1700(name_to_fqdn) > getaddrinfo: ?chec temporaire dans la r?solution du nom > > On my Centos 7 samba server, the DNS resolution works only for fulled qualified name : > ping workstation1 > ping: workstation1 : ?chec temporaire dans la r?solution du nom > but > ping workstation1.mydomain.fr >...

.../database. > This can cause the //|wbinfo|//utility fail./" > Is that still true ? > > But now, I cannot connect to the share at all with winbind instead of > sss in nsswitch.conf > > I log, I get : > */[2019/06/18 09:51:44.511561,? 1] > ../source3/lib/util.c:1699(name_to_fqdn)/**/ > /**/? getaddrinfo: temporary failure in name resolution/* > > However, I well join my linux station to MYDOMAIN with "realm join" > command > > and > > # realm list > mydomain.local > ? type: kerberos > ? realm-name: MYDOMAIN.LOCAL > ? domain-na...

Hello, I can't get Kerberos authentication works with my Linux clients. Server : samba 4.1.4 (compiled from source) Client : Debian Wheezy with sernet-samba 4.0.17-8 Without Kerberos authentication, everything works : -> the domain users can log with pam_winbind (with ssh, gdm ....). -> "kinit myuser at MYREALM" works fine. -> "wbinfo -K MYDOM\\myuser" works.

..., and 'use kerberos keytab = yes'. I have set up pam_krb5 and I get TGTs that works with my ssh servers. But, when I try to authenticate using smbclient -k -L server I get: "session setup failed: Call returned zero bytes (EOF)". Running smbd -i -d 10 ends up in this backtrace: name_to_fqdn: lookup for DAISY -> daisy. krb5_rd_req succeeded for principal daisy$@LOCALDOMAIN secrets_named_mutex: released mutex for replay cache mutex Got KRB5 session key of length 16 =============================================================== INTERNAL ERROR: Signal 11 in pid 4077 (3.0.9-Debian) Pl...

...ads_krb5_mk_req(409) ads_krb5_mk_req: Ticket (visual1$@XYZ.COM) in ccache (MEMORY:net_ads) is valid until: (Thu, 18 Nov 2004 06:09:58 GMT - 1100776198) [2004/11/17 20:11:24, 10] libsmb/clikrb5.c:get_krb5_smb_session_key(511) Got KRB5 session key of length 16 [2004/11/17 20:11:24, 10] lib/util.c:name_to_fqdn(2506) name_to_fqdn: lookup for filesrv1 -> filesrv1.XYZ.com. [2004/11/17 20:11:24, 0] libads/ldap.c:ads_add_machine_acct(1366) ads_add_machine_acct: Host account for filesrv1 already exists - modifying old account [2004/11/17 20:11:24, 5] libads/ldap_utils.c:ads_do_search_retry(56) Search...