search for: nbname

....1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xb5e9 (correct) Source: 192.168.1.102 (192.168.1.102) Destination: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: nbname (137), Dst Port: nbname (137) Source port: nbname (137) Destination port: nbname (137) Length: 58 Checksum: 0xe683 (correct) NetBIOS Name Service Transaction ID: 0x10ba Flags: 0x0110 (Name query) 0... .... .... .... = Query .000 0... .... .... = Name query...

Sambaserver is not accessible I have a problem connecting to SAMBA from Windows/ME systems (using samba--2.2.2 on Red hat Linux 7.1) What I would like to know is - What can I change to get this to work properly? SETUP I have a simple network - three Windows/ME systems and 1 Red Hat Linux 7.1 system all on the same subnet. There is a linksys router on the same subnet that provides WAN

...sql server windows machine join the domain, It shows error in samba : Failed to modify SPNs on CN=SEC-CON03,CN=Computers,DC=domain,DC=com: acl: spn validation failed for spn[E3514235-4B06-11D1-AB04-00C04FC2DCD2-ADAM/SEC-CON03:389] uac[0x1000] account[SEC-CON03$] hostname[SEC-Con03.domain.com] nbname[DOMAIN] ntds[(null)] forest[domain.com] domain[domain.com] There was a discussion on this issue in 2018, but no conclusion was given. https://lists.samba.org/archive/samba/2018-August/217570.html Is there any solution to this problem now? -- yours Adam

Hello, I've got some log entries like these on our DCs: Failed to modify SPNs on CN=db1,CN=Computers,DC=mydom,DC=lan: acl: spn validation failed for spn[TERMSRV/DB1.MYDOM] uac[0x1000] account[db1$] hostname[(null)] nbname[mydom] ntds[(null)] forest[mydom.lan] domain[mydom.lan] At first I thought it was about missing SPN entries, but adding these did not resolve the problem: # samba-tool spn list db1$ db1$ User CN=db1,CN=Computers,DC=mydom,DC=lan has the following servicePrincipalName: TERMSRV/db1...

...Rowland, On Tue, 7 Aug 2018 09:46:24 +0100 Rowland Penny via samba <samba at lists.samba.org> wrote: > > Failed to modify SPNs on CN=db1,CN=Computers,DC=mydom,DC=lan: acl: > > spn validation failed for spn[TERMSRV/DB1.MYDOM] uac[0x1000] > > account[db1$] hostname[(null)] nbname[mydom] ntds[(null)] > > forest[mydom.lan] domain[mydom.lan] > > > > At first I thought it was about missing SPN entries, but adding these > > did not resolve the problem: > > > > # samba-tool spn list db1$ > > db1$ > > User CN=db1,CN=Computers,DC=my...

...rsuapi/writespn.c:235(dcesrv_drsuapi_DsWriteAccountSpn) Jul 11 17:16:25 pre01svdeb02 samba[4657]: Failed to modify SPNs on CN=PC-2016-03,OU=secret-Computer,DC=secret,DC=at: acl: spn validation failed for spn[TERMSRV/PC-2016-03.secret.at] uac[0x1000] account[PC-2016-03$] hostname[PC-2016-03.BUERO] nbname[BUERO] ntds[(null)] forest[secret.at] domain[secret.at] Could that be related? On another PC that user works correctly. We try a rejoin now ... Everything else *seems* to look good now ...

...ba : > > > > Failed to modify SPNs on > CN=SEC-CON03,CN=Computers,DC=domain,DC=com: > > acl: spn validation failed for > > spn[E3514235-4B06-11D1-AB04-00C04FC2DCD2-ADAM/SEC-CON03:389] > > uac[0x1000] > > account[SEC-CON03$] hostname[SEC-Con03.domain.com] nbname[DOMAIN] > > ntds[(null)] forest[domain.com] domain[domain.com] > > > > There was a discussion on this issue in 2018, but no > > conclusion was given. > > > > https://lists.samba.org/archive/samba/2018-August/217570.html > > > > Is there any solut...

...OS name lookups work in the config file? I mean the %m macro. What is the command I can test it with? Because I have a feeling that this macro works only sometimes. For example I have a setting of log file = /var/log/samba/%m.log, and there are log files with netbios names and ip addresses too. (nbname.log, x.x.x.x.log). Any ideas would be appreciated... Kolos

...12:51:33 +0100 Rowland Penny via samba <samba at lists.samba.org> wrote: > > > > Failed to modify SPNs on CN=db1,CN=Computers,DC=mydom,DC=lan: acl: > > > > spn validation failed for spn[TERMSRV/DB1.MYDOM] uac[0x1000] > > > > account[db1$] hostname[(null)] nbname[mydom] ntds[(null)] > > > > forest[mydom.lan] domain[mydom.lan] > > > > > > > > At first I thought it was about missing SPN entries, but adding > > > > these did not resolve the problem: > > > > > > > > # samba-tool spn list...

...t;samba at lists.samba.org> wrote: > > > > > > > > Failed to modify SPNs on CN=db1,CN=Computers,DC=mydom,DC=lan: > > > > > > acl: spn validation failed for spn[TERMSRV/DB1.MYDOM] > > > > > > uac[0x1000] account[db1$] hostname[(null)] nbname[mydom] > > > > > > ntds[(null)] forest[mydom.lan] domain[mydom.lan] > > > > > > > > > > > > At first I thought it was about missing SPN entries, but > > > > > > adding these did not resolve the problem: > > > > &gt...

...> > > > Failed to modify SPNs on > > > > > > > > CN=db1,CN=Computers,DC=mydom,DC=lan: acl: spn validation > > > > > > > > failed for spn[TERMSRV/DB1.MYDOM] uac[0x1000] > > > > > > > > account[db1$] hostname[(null)] nbname[mydom] ntds[(null)] > > > > > > > > forest[mydom.lan] domain[mydom.lan] > > > > > > > > > > > > > > > > At first I thought it was about missing SPN entries, but > > > > > > > > adding these did not reso...

Am 22.07.19 um 10:39 schrieb Stefan G. Weichinger via samba: > Am 20.07.19 um 11:54 schrieb Joachim Lindenberg via samba: >> I figured it out myself. The kerberos configuration on the old dc cobra was bad ? no clue why it worked at all until yesterday. >> >> After fixing it, testing with kinit, and restarting the dc processes it resumed replication. > > pls show how you

Good morning Stefan. Your welkom. I see everything worked out now. Great !! Well done, you made it happen. :-) What i suggest now, at least these are the steps i always do to make sure the DC's are having a exact same setup. First, i clear all my logs and reboot one server. Wait 15-30 min, then go through all you logs, fix every warning/error. Make it perfect. Reboot again, repeat

...ogue box being displayed showing: Contacting server: \\<server-name> \share Workstations: Windows 10 Application: MS Office 2016 I would appreciate if anyone has suggestions to getting past this hurdle. Here is a sanitized copy of smb.conf. # Global parameters [globals] netbios name = NBNAME server string = %L workgroup = DOMAIN_NAME browsable = no local master = no allow hosts = 127.0.0.1 aaa.bbb.10. aaa.bbb.dd. aaa.bbb.cc.1kk/255.255.255.192 aaa.bbb.cc.ll/255.255.255.224 aaa.bbb.cc.69 aaa.bbb.18.1/255.255.255.224 aaa.bbb.18.30 10.0.2.15 aaa.bbb .116.0/23...

...5(dcesrv_drsuapi_DsWriteAccountSpn) > Jul 11 17:16:25 pre01svdeb02 samba[4657]: Failed to modify SPNs on > CN=PC-2016-03,OU=secret-Computer,DC=secret,DC=at: acl: spn validation > failed for spn[TERMSRV/PC-2016-03.secret.at] uac[0x1000] > account[PC-2016-03$] hostname[PC-2016-03.BUERO] nbname[BUERO] > ntds[(null)] forest[secret.at] domain[secret.at] > > Could that be related? > > On another PC that user works correctly. > > We try a rejoin now ... > > Everything else *seems* to look good now ... Try running 'net cache flush' Rowland

...n.c:235(dcesrv_drsuapi_DsWriteAccountSpn)   Failed to modify SPNs on CN=tz115,CN=Computers,DC=testzentrum,DC=uni-frankfurt,DC=de: acl: spn validation failed for spn[MSSQLSvc/tz115.testzentrum.uni-frankfurt.de:SQLEXPRESS] uac[0x1000] account[tz115$] hostname[tz115.testzentrum.uni-frankfurt.de] nbname[TESTZENTRUM] ntds[(null)] forest[testzentrum.uni-frankfurt.de] domain[testzentrum.uni-frankfurt.de] [2018/05/03 14:48:13.368969,  0] ../source4/rpc_server/drsuapi/writespn.c:235(dcesrv_drsuapi_DsWriteAccountSpn)   Failed to modify SPNs on CN=foo,CN=Users,DC=testzentrum,DC=uni-frankfurt,DC=de:...

...2018 09:46:24 +0100 > Rowland Penny via samba <samba at lists.samba.org> wrote: > > > > Failed to modify SPNs on CN=db1,CN=Computers,DC=mydom,DC=lan: acl: > > > spn validation failed for spn[TERMSRV/DB1.MYDOM] uac[0x1000] > > > account[db1$] hostname[(null)] nbname[mydom] ntds[(null)] > > > forest[mydom.lan] domain[mydom.lan] > > > > > > At first I thought it was about missing SPN entries, but adding > > > these did not resolve the problem: > > > > > > # samba-tool spn list db1$ > > > db1$ >...

...error in samba : >> >> Failed to modify SPNs on CN=SEC-CON03,CN=Computers,DC=domain,DC=com: >> acl: spn validation failed for >> spn[E3514235-4B06-11D1-AB04-00C04FC2DCD2-ADAM/SEC-CON03:389] >> uac[0x1000] account[SEC-CON03$] hostname[SEC-Con03.domain.com] >> nbname[DOMAIN] ntds[(null)] forest[domain.com] domain[domain.com] > > You could have a bigger problem here, > 'E3514235-4B06-11D1-AB04-00C04FC2DCD2-ADAM' probably means AD LDS, > which means no global catalogue. Not sure this is meant to work, so > what Windows DC is this ? >...

...t; the domain, It shows error in samba : > > Failed to modify SPNs on CN=SEC-CON03,CN=Computers,DC=domain,DC=com: > acl: spn validation failed for > spn[E3514235-4B06-11D1-AB04-00C04FC2DCD2-ADAM/SEC-CON03:389] > uac[0x1000] > account[SEC-CON03$] hostname[SEC-Con03.domain.com] nbname[DOMAIN] > ntds[(null)] forest[domain.com] domain[domain.com] > > There was a discussion on this issue in 2018, but no > conclusion was given. > > https://lists.samba.org/archive/samba/2018-August/217570.html > > Is there any solution to this problem now? > > --...

...y do work, and they express my understanding of samba server network communication. ## SAMBA RULES ## iptables -P INPUT DROP iptables -P FORWARD DROP iptables -P OUTPUT ACCEPT ANY='0.0.0.0/0' # RPC mapper iptables -A INPUT -s $ANY -p udp --dport 135 -j ACCEPT # NetBIOS Name Service (nbname)/Datagram Service (nbdatagram) iptables -A INPUT -s $ANY -p udp --dport 137:138 -j ACCEPT # NetBIOS Session Service (nbsession) iptables -A INPUT -s $ANY -p tcp --dport 139 -j ACCEPT # TCP Connection - establish 3-way handshake iptables -A INPUT -s $ANY -p tcp --dport 445 -j ACCEPT # Kerberos...