Displaying 8 results from an estimated 8 matches for "snamestr".
Did you mean:
namestr
2017 Mar 18
0
kerberos issue (SPN not found) with windows Hyper-V ( samba 4.5.3 AD)
...ticket
realm: MYDOMAIN.COM.XYZ
sname
name-type: kRB5-NT-SRV-INST (2)
sname-string: 2 items
SNameString: krbtgt
SNameString: MYDOMAIN.COM.XYZ
enc-part
etype: eTYPE-ARCFOUR-HMAC-MD5 (23)
authenticator
etype: eTYPE-ARCFOUR-HMAC-M...
2017 Mar 18
2
kerberos issue (SPN not found) with windows Hyper-V ( samba 4.5.3 AD)
...empt but same issue, this time when
trying to start live migration from BM-SRV-5 to BMSRV-WIN10):
req-body
Padding: 0
kdc-options: 40810000 (forwardable, renewable, canonicalize)
realm: MYDOMAIN.COM.XYZ
sname
name-type: kRB5-NT-SRV-INST (2)
sname-string: 2 items
SNameString: Microsoft Virtual System Migration Service
SNameString: BMSRV-WIN10
till: 2037-09-13 02:48:05 (UTC)
nonce: 17847174
etype: 5 items
enc-authorization-data
error:
krb-error
pvno: 5
msg-type: krb-error (30)
ctime: 2017-03-16 08:01:23 (UTC)
cusec: 128...
2017 Mar 19
1
kerberos issue (SPN not found) with windows Hyper-V ( samba 4.5.3 AD)
...ticket
realm: MYDOMAIN.COM.XYZ
sname
name-type: kRB5-NT-SRV-INST (2)
sname-string: 2 items
SNameString: krbtgt
SNameString: MYDOMAIN.COM.XYZ
enc-part
etype: eTYPE-ARCFOUR-HMAC-MD5 (23)
authenticator
etype: eTYPE-ARCFOUR-HMAC-M...
2017 May 25
0
Windows 2012 s4u2self followed by s4u2proxy fails against samba
...tkt-vno: 5
realm: TESTDOMAIN.LAN
sname
name-type: kRB5-NT-SRV-INST (2)
sname-string: 2 items
SNameString: krbtgt
SNameString: TESTDOMAIN.LAN
enc-part
etype: eTYPE-AES256-CTS-HMAC-SHA1-96 (18)
kvno: 1
cipher:
133e0664961c5...
2018 Jun 22
2
Domain trust and browsing users and groups problem
...evant part):
The krb5 req packet:
US -> EU - KRB5 TGS-REQ
Kerberos
tgs-req
pvno: 5
msg-type: krb-tgs-req (12)
req-body
kdc-options: 40810000 (forwardable, renewable, canonicalize)
realm: SPREADSHIRT.PRIVATE
sname
name-type: kRB5-NT-SRV-INST (2)
sname-string: 3 items
SNameString: ldap
SNameString: ad07.spreadshirt.private
SNameString: spreadshirt.private
etype: 5 items
ENCTYPE: eTYPE-AES256-CTS-HMAC-SHA1-96 (18)
ENCTYPE: eTYPE-AES128-CTS-HMAC-SHA1-96 (17)
ENCTYPE: eTYPE-ARCFOUR-HMAC-MD5 (23)
ENCTYPE: eTYPE-ARCFOUR-HMAC-MD5-56 (24)
ENCTYP...
2020 May 17
2
GSSAPI authentication issue with samba as AD DC.
...to authenticate with GSSAPI, it fails.
I captured the Kerberos5 communication between member and DC with wireshark.
Part of the dump of TGS-REQ packets from member to DC was:
* req-body
realm: OIKUMENE.UKEHI.NET
* sname
name-type: KRB5-NT-PRINCIPAL
* sname-string
SNameString: imap
SNameString: nowhere.oikumene.ukehi.net
The authentication step from member to DC seems OK.
But, DC returns:
KRB Error: KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN
where valid TGS-REP is expected.
Here, I am stacked. What can I do to make DC return TGS-REP and make
GSSAPI authenticati...
2019 Dec 16
2
Failed to find [principal](kvno 4) in keytab MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
...st" from my
machine, and an unsuccessful request from User A's machine. In both cases,
the GSSAPI->SPNEGO->Kerberos AP-REQ ticket looked the same:
ticket:
tkt-vno: 5
realm: EXAMPLE.COM
sname:
name-type: kRB5-NT-SRV-INST (2)
sname-string: 2 items
SNameString: cifs
SNameString: nas01.example.com
enc-part:
etype: eTYPE-ARCFOUR-HMAC-MD5 (23)cifs
kvno: 4
cipher: [random]
Since both "good" and "bad" requests have the same principal, that implies that
the MEMORY:cifs_srv_keytab keytab ends up with differe...
2017 Mar 16
0
kerberos issue (SPN not found) with windows Hyper-V (samba 4.5.3 AD)
...sue, this time when
trying to start live migration from BM-SRV-5 to BMSRV-WIN10):
req-body
Padding: 0
kdc-options: 40810000 (forwardable, renewable, canonicalize)
realm: MYDOMAIN.COM.XYZ
sname
name-type: kRB5-NT-SRV-INST (2)
sname-string: 2 items
SNameString: Microsoft Virtual System Migration Service
SNameString: BMSRV-WIN10
till: 2037-09-13 02:48:05 (UTC)
nonce: 17847174
etype: 5 items
enc-authorization-data
error:
krb-error
pvno: 5
msg-type: krb-error (30)
ctime: 2017-03-16 08:01:23 (UTC)
cus...