search for: samlogon

...t/subunit | /usr/bin/python -u /var/tmp/samba-4.2.1/selftest/format-subunit --prefix=./st --immediate ERROR: test failed with exit code 1 make: *** [quicktest] Error 1 the "summary" file reads: = Failed tests = == samba3.rpc.schannel(s3dc) == envlog: SMBD LOG of: LOCALS3DC2 _netr_LogonSamLogonEx: client smbd not using schannel for netlogon _netr_LogonSamLogonEx: client smbd not using schannel for netlogon _netr_LogonSamLogonEx: client smbd not using schannel for netlogon _netr_LogonSamLogonEx: client smbd not using schannel for netlogon _netr_LogonSamLogonEx: client smbd not using schann...

Hi, This is just curiosity. We are monitoring failed logons, and there seem to be three types: - LDAP,simple bind/TLS (obious, failed ldap logons) and these two: - SamLogon,network - Kerberos KDC,ENC-TS Pre-authentication Could someone explain what (the difference between) these two types is? Google doesn't really seem to help. MJ

On Mon, 2018-03-26 at 09:08 +0200, mj via samba wrote: > Hi, > > No one knows..? > > My guess is: > - SamLogon,network is an interactive logon, so a user typing a password > on a windows domain joined workstation No, that would be SamLogon,interactive. SamLogon,network is NTLM authentication accessing another server in the domain (in general). > - Kerberos KDC,ENC-TS Pre-authentication is somethi...

...d >> > Still nothing. I also restarted samba on AD machine and winbind on > first machine (member) > There was a pause when running getent passwd but 'foo' is still returned. > > Ok, found it. I did lsof on winbind and found 'foo' entry in /var/cache/samba/netsamlogon_cache.tdb with tdbtool. Next I do: net cache samlogon list net cache samlogon delete <SID> Now getent passwd returns new name. The difference between two unix members was I connected to share o the first one (where the problem was) and did not connect on second node, so there was no old...

...ocess_name_query_request: Name query from 10.8.7.254 on subnet UNICAST_SUBNET for name ADAMSTEST<1c> [2008/02/12 12:06:42, 3] nmbd/nmbd_incomingrequests.c:process_name_query_request(569) OK [2008/02/12 12:06:42, 3] nmbd/nmbd_processlogon.c:process_logon_packet(358) process_logon_packet: SAMLOGON sidsize 0 ntv 11 [2008/02/12 12:06:42, 3] nmbd/nmbd_processlogon.c:process_logon_packet(358) process_logon_packet: SAMLOGON sidsize 0 ntv 11 [2008/02/12 12:06:46, 3] nmbd/nmbd_processlogon.c:process_logon_packet(358) process_logon_packet: SAMLOGON sidsize 0 ntv 11 [2008/02/12 12:06:46, 3] nmbd/...

...name query for name MEDICAL<1c> returning first IP 10.0.0.10. [2005/05/31 17:49:37, 1] nmbd/nmbd_processlogon.c:process_logon_packet(69) process_logon_packet: Logon from 10.0.0.3: code = 0x12 [2005/05/31 17:49:37, 3] nmbd/nmbd_processlogon.c:process_logon_packet(210) process_logon_packet: SAMLOGON sidsize 24, len = 112 [2005/05/31 17:49:37, 3] nmbd/nmbd_processlogon.c:process_logon_packet(217) process_logon_packet: len = 112 PTR_DIFF(q, buf) = 104 [2005/05/31 17:49:37, 3] nmbd/nmbd_processlogon.c:process_logon_packet(237) process_logon_packet: SAMLOGON sidsize 24 ntv 1 [2005/05/31 17:49:...

...e PDC's shares (with net view) and authenticate user (with net logon user passwd /domain:domainname). On the other side, I fell into timeout when running smbclient -L member from the PDC. Here is a log.nmbd loglevel 10 from PDC as there is no other log generation. It seems to be located around SAMLOGON calls. On member side, I can extract that AS/U is unable to locate a domain controller even if it is well defined on NetBIOS layer : AS/U Logs : DATE: 12/13/05 EVENT ID: 5719 TIME: 05:16:07PM SOURCE: NETLOGON USER: N/A TYPE:...

Hi everyone. I just got a copy of Win2k in and have been messing with it. Have a question, and have searched the archives for the answer, but didn't find it. Can Win2k domain logon to a pre-3.0.0 samba server? Or di I need to get TNG running? I can get NT4.0 boxes to authenticate and login fine (Samba pre-3.0.0), but Win2k keeps complaining: "The following error occurred validating

...;1c> IP 10.9.1.97 for \MAILSLOT\NET\NETLOGON of type 18 len=116 [2004/10/05 11:14:48, 4] nmbd/nmbd_processlogon.c:process_logon_packet(95) process_logon_packet: Logon from 10.9.1.97: code = 0x12 [2004/10/05 11:14:48, 5] nmbd/nmbd_processlogon.c:process_logon_packet(315) process_logon_packet: SAMLOGON sidsize 24, len = 116 [2004/10/05 11:14:48, 5] nmbd/nmbd_processlogon.c:process_logon_packet(322) process_logon_packet: len = 116 PTR_DIFF(q, buf) = 108 [2004/10/05 11:14:48, 3] nmbd/nmbd_processlogon.c:process_logon_packet(347) process_logon_packet: SAMLOGON sidsize 24 ntv 11 [2004/10/05 11:14...

...h.c:478(auth_check_password_recv) > auth_check_password_recv: NO_METHOD authentication for user > [TESTHV\mtest] FAILED with error NT_STATUS_NO_SUCH_USER, authoritative=0 > [2018/09/10 18:18:57.227909, 2] > ../auth/auth_log.c:476(log_authentication_event_human_readable) > Auth: [SamLogon,network] user [TESTHV]\[mtest] at [Mon, 10 Sep 2018 > 18:18:57.227901 NZST] with [NTLMv2] status [NT_STATUS_NO_SUCH_USER] > workstation [TESTHV-DC1] remote host [ipv4:192.168.179.229:50070] mapped > to [TESTHV]\[mtest]. local host [ipv4:192.168.179.226:49153] NETLOGON > computer [VM000...

...ocess_name_query_request: Name query from 192.168.1.100 on subnet UNICAST_SUBNET for name MYDOMAIN<1c> [2009/03/07 10:28:16, 3] nmbd/nmbd_incomingrequests.c:process_name_query_request(569) OK [2009/03/07 10:28:16, 3] nmbd/nmbd_processlogon.c:process_logon_packet(358) process_logon_packet: SAMLOGON sidsize 0 ntv 11 [2009/03/07 10:28:21, 3] nmbd/nmbd_processlogon.c:process_logon_packet(358) process_logon_packet: SAMLOGON sidsize 0 ntv 11 [2009/03/07 10:28:21, 3] nmbd/nmbd_processlogon.c:process_logon_packet(358) process_logon_packet: SAMLOGON sidsize 0 ntv 11 [2009/03/07 10:28:21, 3] nmbd/...

...ed samba on AD machine and winbind on >> first machine (member) >> There was a pause when running getent passwd but 'foo' is still >> returned. >> >> > Ok, found it. > > I did lsof on winbind and found 'foo' entry in > /var/cache/samba/netsamlogon_cache.tdb with tdbtool. > > Next I do: > > net cache samlogon list > net cache samlogon delete <SID> > > Now getent passwd returns new name. > > The difference between two unix members was I connected to share o the > first one (where the problem was) and did no...

On 18/07/2019 20:20, ?ukasz Michalski via samba wrote: > W dniu 2019-07-18 o?18:46, Rowland penny via samba pisze: >> On 18/07/2019 17:36, Kris Lou via samba wrote: >>> Might have something to do with this bug: >>> https://bugzilla.samba.org/show_bug.cgi?id=11482 >>> >>> You can find and make the relevant changes with ADSI Edit. >>>

..._Discovery_Team_Meetings exists in AD, >>>> but I don?t see it using getent. >>> re-login that user over SMB. >>> >>> >>> -slow >>> >> I do not think that will help, ... > if the user has logged in before over SMB, there will be a netsamlogon > cache entry containing the user's groups as passed to us by a DC as part > of the PAC. Samba will use this cached group info until the user logs in > again (over SMB) which will tell us the updated groups from AD. > > -slow > It shouldn't matter if the user is logged in...

...ent XP machines. I have turned loglevel 3 and see the following during this time: The samba log for the NMBD shows (Shows a 5-minute lag with no activty): [2002/12/28 14:11:03, 3, pid=1570, effective(0, 0), real(0, 0)] nmbd/nmbd_processlogon.c:process_logon_packet(253) process_logon_packet: SAMLOGON request from MOE(192.168.0.3) for , returning logon svr \\LINUXNB domain HEYWORTH code 13 token=ffff [2002/12/28 14:11:23, 3, pid=1570, effective(0, 0), real(0, 0)] nmbd/nmbd_sendannounce.c:send_local_master_announcement(175) send_local_master_announcement: type c9b0b for name LINUXNB on subnet 1...

.../auth_domain.c:domain_client_validate(199) domain_client_validate: unable to validate password for user [my user] in domain [my domain] to Domain controller \\[my server]. Error was NT_STATUS_WRONG_PASSWORD. On the domain controller side, the following event is logged: 09/15 11:25:56 [LOGON] SamLogon: Transitive Network logon of [my domain]\[my user] from \\[my client] (via [my server]) Entered 09/15 11:25:56 [LOGON] SamLogon: Transitive Network logon of [my domain]\[my user] from \\[my client] (via [my server]) Returns 0xC000006A However, if I map \\samba\dfs first OR if I use \\samba.full...

...s running on Scientific linux 4.3 (redhat enterprise 4.3), and here is the smb.conf. http://www.asiaa.sinica.edu.tw/~cschen/smb.conf and here is the log messages when the error message window pops [2006/10/30 05:22:16, 3] nmbd/nmbd_processlogon.c:process_logon_packet(347) process_logon_packet: SAMLOGON sidsize 24 ntv 11 [2006/10/30 05:22:16, 3] nmbd/nmbd_processlogon.c:process_logon_packet(347) process_logon_packet: SAMLOGON sidsize 24 ntv 11 Thanks in advance Regards, Joshua

...I suppose it is some call in kerberos_kinit_password_ext that returns with error , but I have not found which one . The question is what argument is invalid, tcpdump gives some info on Unknown encryption types 0x11 and 0x12, and failed preauthentication. Login succeeds eventually, but this is samlogon. Does anyone have a hint about this or how to troubleshoot it further. /Anders

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greetings! I run samba 3 since several years in a domain with more than 10000 users and multiple departments. We have a central Domain running a PDC and some domains in the departments. The domains in the departments are connected to the central domain via interdomain trusts. All PDCs are samba 3 using the same LDAP backends (very fast SunONE LDAP

...e past but nowhere solved, so I' hoping there's simple fix. >> Can anyone provide insight? > > Users who we have seen a login for (and so have cached the full name) > will get it, others we omit it due to the cost to obtain those for a > full domain. > > The the 'samlogon cache' as a keyword to understand this more. I have populated the 'gecos' attribute in my directory and that seems to be reported in the 'getent passwd' output regardles of whether the user has logged in to the system. dn: CN=James Dingwall,OU=Users,DC=example,DC=com objectCla...