Displaying 1 result from an estimated 1 matches for "p002556".
2017 Nov 23
2
auth audit log question
...that I
don't understand, happening across our samba-DCs.
Things work without issues, but I'm just being curious. :-)
> [2017/11/23 04:47:32.166753, 2] ../auth/auth_log.c:760(log_authentication_event_human_readable)
> Auth: [Kerberos KDC,ENC-TS Pre-authentication] user [(null)]\[P002556$@SAMBA.COMPANY.COM] at [Thu, 23 Nov 2017 04:47:32.166711 CET] with [arcfour-hmac-md5] status [NT_STATUS_WRONG_PASSWORD] workstation [(null)] remote host [ipv4:1.2.3.30:62827] mapped to [WRKGRP]\[P002556$]. local host [NULL]
> [2017/11/23 04:47:32.170564, 3] ../auth/auth_log.c:760(log_authentic...