search for: not_defined_in_rfc4178

Hello, We're having trouble joining an AD domain with 3.6.5 This message when running net join looks fishy : "got principal=not_defined_in_RFC4178 at please_ignore" OS : Solaris 10 x64 Kerberos : MIT krb5 1.10.1 DC servers are running Windows 2008 The error message is : ./net join -U aranskis Enter aranskis's password: Failed to join domain: failed to lookup DC info for domain 'CORP.NET' over rpc: Logon failure ADS join did...

...ying to use DFS. Using smbclient 3.4.7 (distributed with Lucid) and windows servers with both 2008sp2 and 2003sp2. Smbclient successfully lookups up our DCC's. If the first in the DNS reply is a 2003 server it works but if I get a 2008 it doesn't. The main differences is that I get a "not_defined_in_RFC4178 at please_ignore" principal in the SMB Negotiate Protocol Response from a 2008.

...ng samba 3.0.25b, testing to join to a Windows 2008 domain using ADS security with kerberos and it doesn't seem to work. Anybody else tried this combination? Same configuration worked joining to a Windows 2003 R2 domain. I'm not a samba expert but looking at the log it looks like the not_defined_in_RFC4178@please_ignore have something to do with it? Output from "net ads join" [2007/07/04 08:02:12, 3] libads/ldap.c:ads_connect(394) Connected to LDAP server 192.168.x.x [2007/07/04 08:02:12, 4] libads/ldap.c:ads_current_time(2414) time offset is 0 seconds [2007/07/04 08:02:12, 4] libads...

...er list: ", 192.168.50.12" get_dc_list: preferred server list: ", 192.168.50.12" Doing spnego session setup (blob length=136) got OID=1 3 6 1 4 1 311 2 2 30 ---Second:--- The working AD shows this: got principal=ad1$@MS.MYDOMAIN.COM The non-working AD shows this: got principal=not_defined_in_RFC4178 at please_ignore cli_session_setup_spnego: got a bad server principal, trying to guess ... cli_session_setup_spnego: guessed server principal=AD4$@MS.MYDOMAIN.COM ---Third:--- The working AD shows this: got principal=ad1$@MS.MYDOMAIN.COM Doing kerberos session setup ads_cleanup_expired_creds: Tick...

...0.0.1 bcast=127.255.255.255 netmask=255.0.0.0 Registered MSG_REQ_POOL_USAGE Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED Connecting to ::1 at port 445 Doing spnego session setup (blob length=96) got OID=1.2.840.48018.1.2.2 got OID=1.2.840.113554.1.2.2 got OID=1.3.6.1.4.1.311.2.2.10 got principal=not_defined_in_RFC4178 at please_ignore Got challenge flags: Got NTLMSSP neg_flags=0x60898215 NTLMSSP: Set final flags: Got NTLMSSP neg_flags=0x60088215 NTLMSSP Sign/Seal - Initialising with flags: Got NTLMSSP neg_flags=0x60088215 GENSEC backend 'gssapi_spnego' registered GENSEC backend 'gssapi_krb5' regi...

...server resolution selected and no WINS servers listed. resolve_hosts: Attempting host lookup for name localhost<0x20> Connecting to ::1 at port 445 Doing spnego session setup (blob length=96) got OID=1.2.840.48018.1.2.2 got OID=1.2.840.113554.1.2.2 got OID=1.3.6.1.4.1.311.2.2.10 got principal=not_defined_in_RFC4178 at please_ignore GENSEC backend 'gssapi_spnego' registered GENSEC backend 'gssapi_krb5' registered GENSEC backend 'gssapi_krb5_sasl' registered GENSEC backend 'spnego' registered GENSEC backend 'schannel' registered GENSEC backend 'naclrpc_as_system'...

...st socket option SO_SNDTIMEO. Could not test socket option SO_RCVTIMEO. TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 session request ok Doing spnego session setup (blob length=96) got OID=1.2.840.48018.1.2.2 got OID=1.2.840.113554.1.2.2 got OID=1.3.6.1.4.1.311.2.2.10 got principal=not_defined_in_RFC4178 at please_ignore GENSEC backend 'gssapi_spnego' registered GENSEC backend 'gssapi_krb5' registered GENSEC backend 'gssapi_krb5_sasl' registered GENSEC backend 'spnego' registered GENSEC backend 'schannel' registered GENSEC backend 'naclrpc_as_system'...

...13:02:26.911789, 3] libsmb/cliconnect.c:1019(cli_session_setup_spnego) got OID=1.2.840.48018.1.2.2 got OID=1.2.840.113554.1.2.2 got OID=1.2.840.113554.1.2.2.3 got OID=1.3.6.1.4.1.311.2.2.10 [2010/03/26 13:02:26.912033, 3] libsmb/cliconnect.c:1029(cli_session_setup_spnego) got principal=not_defined_in_RFC4178 at please_ignore [2010/03/26 13:02:26.912796, 3] libsmb/ntlmssp.c:1101(ntlmssp_client_challenge) Got challenge flags: [2010/03/26 13:02:26.912888, 3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x62898215 [2010/03/26 13:02:26.912973, 3] libsmb/ntlmssp.c:1123(ntlmssp_client...

...oin createcomputer="REG/CN/OU/Services/" Error: [2009/05/15 13:42:13, 3] libads/sasl.c:ads_sasl_spnego_bind(780) ads_sasl_spnego_bind: got OID=1 3 6 1 4 1 311 2 2 10 [2009/05/15 13:42:13, 3] libads/sasl.c:ads_sasl_spnego_bind(789) ads_sasl_spnego_bind: got server principal name = not_defined_in_RFC4178@please_ignore [2009/05/15 13:42:13, 3] libsmb/clikrb5.c:ads_krb5_mk_req(677) ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache found) [2009/05/15 13:42:13, 0] libads/kerberos.c:ads_kinit_password(362) kerberos_kinit_password admuser@DOM.REALM.CO.COM@DOM.REALM.CO.COM failed:...

On Thu, 10 Aug 2017 08:14:33 +0700 Vladimir Frelikh via samba <samba at lists.samba.org> wrote: > > >> > > >> <https://mail.google.com/mail/u/0/?ui=2&ik=7f6f030913&view= > > att&th=15dc2ba7d7a63129&attid=0.1&disp=safe&realattid=f_j63tfts50&zw> > > >> > > >> > > >> -- > > >> Best

...lo ip=127.0.0.1 bcast=127.255.255.255 netmask=255.0.0.0 Old SMB password: New SMB password: Retype new SMB password: Connecting to 127.0.0.1 at port 445 Doing spnego session setup (blob length=96) got OID=1.2.840.48018.1.2.2 got OID=1.2.840.113554.1.2.2 got OID=1.3.6.1.4.1.311.2.2.10 got principal=not_defined_in_RFC4178 at please_ignore Got challenge flags: Got NTLMSSP neg_flags=0x60898215 NTLMSSP: Set final flags: Got NTLMSSP neg_flags=0x60088215 NTLMSSP Sign/Seal - Initialising with flags: Got NTLMSSP neg_flags=0x60088215 GENSEC backend 'gssapi_spnego' registered GENSEC backend 'gssapi_krb5' regi...

...Kerberos works, I get credentials, but if I try to join the domain, it fails. The problem seems to be somwhere in this debug-output: 1. net ads join: Doing spnego session setup (blob length=96) got OID=1.2.840.48018.1.2.2 got OID=1.2.840.113554.1.2.2 got OID=1.3.6.1.4.1.311.2.2.10 got principal=not_defined_in_RFC4178 at please_ignore kerberos_kinit_password: as Administrator using [MEMORY:cliconnect] as ccache and config [(null)] cli_session_setup_spnego: using target hostname not SPNEGO principal cli_session_setup_spnego: guessed server principal=cifs/dc2.ad.dilken.eu at AD.DILKEN.EU Doing kerberos session set...

...differences (with common lines removed) are: You get: smbclient -L $(hostname -f) -UAdministrator -d3 Client started (version 4.5.8-Debian). Enter Administrator's password: Doing spnego session setup (blob length=96) got OID=1.2.840.113554.1.2.2 got OID=1.3.6.1.4.1.311.2.2.10 got principal=not_defined_in_RFC4178 at please_ignore Got challenge flags: Got NTLMSSP neg_flags=0x62898215 NTLMSSP: Set final flags: Got NTLMSSP neg_flags=0x62088215 NTLMSSP Sign/Seal - Initialising with flags: Got NTLMSSP neg_flags=0x62088215 SPNEGO login failed: An internal error occurred. session setup failed: NT_STATUS_INTERNAL_...

...380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 Doing spnego session setup (blob length=96) got OID=1.2.840.48018.1.2.2 got OID=1.2.840.113554.1.2.2 got OID=1.3.6.1.4.1.311.2.2.10 got principal=not_defined_in_RFC4178 at please_ignore Got challenge flags: Got NTLMSSP neg_flags=0x60898215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_TARGET_INFO NTLMSSP_NEGOTIATE_128 NTLMSSP_N...

...= 0 >> SO_RCVTIMEO = 0 >> TCP_QUICKACK = 1 >> TCP_DEFER_ACCEPT = 0 >> Doing spnego session setup (blob length=96) >> got OID=1.2.840.48018.1.2.2 >> got OID=1.2.840.113554.1.2.2 >> got OID=1.3.6.1.4.1.311.2.2.10 >> got principal=not_defined_in_RFC4178 at please_ignore >> Got challenge flags: >> Got NTLMSSP neg_flags=0x60898215 >> NTLMSSP_NEGOTIATE_UNICODE >> NTLMSSP_REQUEST_TARGET >> NTLMSSP_NEGOTIATE_SIGN >> NTLMSSP_NEGOTIATE_NTLM >> NTLMSSP_NEGOTIATE_ALWAYS_SIGN >> NTLMSSP_NEGOTIATE_N...

...st socket option SO_SNDTIMEO. Could not test socket option SO_RCVTIMEO. TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 session request ok Doing spnego session setup (blob length=96) got OID=1.2.840.48018.1.2.2 got OID=1.2.840.113554.1.2.2 got OID=1.3.6.1.4.1.311.2.2.10 got principal=not_defined_in_RFC4178 at please_ignore cli_session_setup_spnego: using target hostname not SPNEGO principal cli_session_setup_spnego: guessed server principal=cifs/sambadc.rona.loc at RONA.LOC Kinit for Administrator to access cifs/sambadc.rona.loc at RONA.LOC failed: Preauthentication failed SPNEGO login failed: Preaut...

...380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 Doing spnego session setup (blob length=96) got OID=1.2.840.48018.1.2.2 got OID=1.2.840.113554.1.2.2 got OID=1.3.6.1.4.1.311.2.2.10 got principal=not_defined_in_RFC4178 at please_ignore Got challenge flags: Got NTLMSSP neg_flags=0x60898215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_TARGET_INFO NTLMSSP_NEGOTIATE_128 NTLMSSP_N...

...is 10, with ADS support. Domain join to a Windows 2008 domain works perfectly, having pre-created the servername in the appropriate OU. In my winbind logs, I see the following (domain name obfuscated): [2008/11/05 11:28:06, 3] libsmb/cliconnect.c:cli_session_setup_spnego(839) got principal=not_defined_in_RFC4178@please_ignore [2008/11/05 11:28:06, 3] libsmb/cliconnect.c:cli_session_setup_spnego(880) cli_session_setup_spnego: got a bad server principal, trying to guess ... [2008/11/05 11:28:06, 3] libsmb/cliconnect.c:cli_session_setup_spnego(908) cli_session_setup_spnego: guessed server princip...

...0 seconds Found SASL mechanism GSS-SPNEGO ads_sasl_spnego_bind: got OID=1.2.840.48018.1.2.2 ads_sasl_spnego_bind: got OID=1.2.840.113554.1.2.2 ads_sasl_spnego_bind: got OID=1.2.840.113554.1.2.2.3 ads_sasl_spnego_bind: got OID=1.3.6.1.4.1.311.2.2.10 ads_sasl_spnego_bind: got server principal name = not_defined_in_RFC4178 at please_ignore net: sha1 checksum failed I have tried getting a backtrace, but I only get garbage from both the core dump and when I run the program in gdb directly. If anyone could give me a hint how to get a meaningful backtrace, I would very much appreciate it. I have already built Samba,...

...5.0 Registered MSG_REQ_POOL_USAGE Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED Enter Administrator's password: Connecting to 127.0.0.1 at port 445 Doing spnego session setup (blob length=96) got OID=1.2.840.48018.1.2.2 got OID=1.2.840.113554.1.2.2 got OID=1.3.6.1.4.1.311.2.2.10 got principal=not_defined_in_RFC4178 at please_ignore Got challenge flags: Got NTLMSSP neg_flags=0x60898215 NTLMSSP: Set final flags: Got NTLMSSP neg_flags=0x60088215 NTLMSSP Sign/Seal - Initialising with flags: Got NTLMSSP neg_flags=0x60088215 Failed to grant privileges for HOME\Domain Admins (NT_STATUS_ACCESS_DENIED) rpc command fun...