Displaying 20 results from an estimated 754 matches for "spn".
Did you mean:
spin
2016 Sep 14
4
Exporting keytab for SPN failure
Experts—
I’m attempting to export a keytab for a created SPN on the AD DC machine but I’m receiving an error:
ERROR(runtime): uncaught exception - Key table entry not found
File "/usr/lib64/python2.6/site-packages/samba/netcmd/__init__.py", line 175, in _run
return self.run(*args, **kwargs)
File "/usr/lib64/python2.6/site-packages/sam...
2016 Aug 29
5
set UPN / SPN from samba-tool.
...dont applie to squid kerberos helpers only. )
samba-tool setup for squid i used, was as followed.
samba-tool user create squid1-service --description="Unprivileged user for SQUID1-Proxy Services" --random-password
samba-tool user setexpiry squid1-service –noexpiry
samba-tool spn add HTTP/proxy.internal.domain.tld squid1-service
Now this results in :
My UPN was set to the username at internal.domain.tld ( as it should ).
My SPN was set to HTTP/proxyserver.internal.domain.tld at REALM ( as is should )
samba-tool spn list squid1-service
squid1-service
User C...
2016 Sep 14
2
Exporting keytab for SPN failure
...n Sep 14, 2016, at 1:38 AM, Rowland Penny via samba <samba at lists.samba.org> wrote:
>
> On Tue, 13 Sep 2016 22:53:44 -0500
> Michael A Weber via samba <samba at lists.samba.org> wrote:
>
>> Experts—
>>
>> I’m attempting to export a keytab for a created SPN on the AD DC
>> machine but I’m receiving an error:
>>
>> ERROR(runtime): uncaught exception - Key table entry not found
>> File "/usr/lib64/python2.6/site-packages/samba/netcmd/__init__.py",
>> line 175, in _run return self.run(*args, **kwargs)
>> F...
2016 Sep 14
1
Exporting keytab for SPN failure
...lt;samba at lists.samba.org> wrote:
>>>
>>> On Tue, 13 Sep 2016 22:53:44 -0500
>>> Michael A Weber via samba <samba at lists.samba.org> wrote:
>>>
>>>> Experts—
>>>>
>>>> I’m attempting to export a keytab for a created SPN on the AD DC
>>>> machine but I’m receiving an error:
>>>>
>>>> ERROR(runtime): uncaught exception - Key table entry not found
>>>> File
>>>> "/usr/lib64/python2.6/site-packages/samba/netcmd/__init__.py",
>>>> line...
2016 Sep 14
5
Exporting keytab for SPN failure
> On Sep 14, 2016, at 10:44 AM, Achim Gottinger via samba <samba at lists.samba.org> wrote:
>
>
>
> Am 14.09.2016 um 05:53 schrieb Michael A Weber via samba:
>> Experts—
>>
>> I’m attempting to export a keytab for a created SPN on the AD DC machine but I’m receiving an error:
>>
>> ERROR(runtime): uncaught exception - Key table entry not found
>> File "/usr/lib64/python2.6/site-packages/samba/netcmd/__init__.py", line 175, in _run
>> return self.run(*args, **kwargs)
>> File...
2016 Aug 30
2
set UPN / SPN from samba-tool.
And reading last mails comforts me in believing the filter used by client
side to retrieve user is not correct, that filter should use SPN then you
won't need to set up SPN into UPN field.
2016-08-30 15:55 GMT+02:00 mathias dufresne <infractory at gmail.com>:
> Hi Louis,
>
>
> 2016-08-29 16:18 GMT+02:00 L.P.H. van Belle via samba <
> samba at lists.samba.org>:
>
>> Hai
>>
>>
>&g...
2016 Sep 14
1
Exporting keytab for SPN failure
...t;samba at lists.samba.org <mailto:samba at lists.samba.org>> wrote:
>>>
>>>
>>>
>>> Am 14.09.2016 um 05:53 schrieb Michael A Weber via samba:
>>>> Experts—
>>>>
>>>> I’m attempting to export a keytab for a created SPN on the AD DC machine but I’m receiving an error:
>>>>
>>>> ERROR(runtime): uncaught exception - Key table entry not found
>>>> File "/usr/lib64/python2.6/site-packages/samba/netcmd/__init__.py", line 175, in _run
>>>> return self.run(...
2018 Aug 07
2
Failed to modify SPNs
...wrote:
> On Tue, 7 Aug 2018 14:55:24 +0200
> Henry Jensen via samba <samba at lists.samba.org> wrote:
>
> > On Tue, 7 Aug 2018 12:51:33 +0100
> > Rowland Penny via samba <samba at lists.samba.org> wrote:
> >
> > > > > > Failed to modify SPNs on CN=db1,CN=Computers,DC=mydom,DC=lan:
> > > > > > acl: spn validation failed for spn[TERMSRV/DB1.MYDOM]
> > > > > > uac[0x1000] account[db1$] hostname[(null)] nbname[mydom]
> > > > > > ntds[(null)] forest[mydom.lan] domain[mydom.lan]
> >...
2016 Aug 30
2
set UPN / SPN from samba-tool.
...s.samba.org>:
> On Tue, 30 Aug 2016 15:58:13 +0200
> mathias dufresne via samba <samba at lists.samba.org> wrote:
>
> > And reading last mails comforts me in believing the filter used by
> > client side to retrieve user is not correct, that filter should use
> > SPN then you won't need to set up SPN into UPN field.
> >
>
> I think the problem is the way Louis is creating the SPN, all the info
> I have found on the internet, seems to assume you will use a computer
> account and not a user account.
>
> Even Squids own page tells you t...
2016 Sep 14
0
Exporting keytab for SPN failure
...Gottinger via samba
>> <samba at lists.samba.org <mailto:samba at lists.samba.org>> wrote:
>>
>>
>>
>> Am 14.09.2016 um 05:53 schrieb Michael A Weber via samba:
>>> Experts—
>>>
>>> I’m attempting to export a keytab for a created SPN on the AD DC
>>> machine but I’m receiving an error:
>>>
>>> ERROR(runtime): uncaught exception - Key table entry not found
>>> File
>>> "/usr/lib64/python2.6/site-packages/samba/netcmd/__init__.py", line
>>> 175, in _run
>>...
2016 Aug 30
0
set UPN / SPN from samba-tool.
...>
>
> samba-tool setup for squid i used, was as followed.
>
>
>
> samba-tool user create squid1-service --description="Unprivileged user for
> SQUID1-Proxy Services" --random-password
>
> samba-tool user setexpiry squid1-service –noexpiry
>
> samba-tool spn add HTTP/proxy.internal.domain.tld squid1-service
>
>
>
> Now this results in :
>
> My UPN was set to the username at internal.domain.tld ( as it should ).
>
> My SPN was set to HTTP/proxyserver.internal.domain.tld at REALM ( as is
> should )
>
>
>
> samba-to...
2018 May 07
0
spn validation failed for spn MSSQLSvc
High there,
despite SPN - registration of MSSQLSvc - Service my samba-log is
littered with failures...
Please have a look about it:
Samba-Version: 4.5.16-SerNet-Debian-18.jessie
User foo and machine tz115 are registered in spn:
root at tz230:~# samba-tool spn list foo
foo
User CN=foo,CN=Users,DC=testzentrum,DC=uni-fran...
2018 Aug 07
2
Failed to modify SPNs
On Tue, 7 Aug 2018 12:51:33 +0100
Rowland Penny via samba <samba at lists.samba.org> wrote:
> > > > Failed to modify SPNs on CN=db1,CN=Computers,DC=mydom,DC=lan: acl:
> > > > spn validation failed for spn[TERMSRV/DB1.MYDOM] uac[0x1000]
> > > > account[db1$] hostname[(null)] nbname[mydom] ntds[(null)]
> > > > forest[mydom.lan] domain[mydom.lan]
> > > >
> > > &g...
2017 Feb 26
1
net ads keytab add has no visible effects
> > Okay ... looks like this time it worked as expected in the first try.
>
> You sure about that ?
> You used samba-tool to add the SPN with 'NFS', yet the SPN's are shown
> with 'nfs'.
> This could just be down to using 'net to create the keytab, try
> 'samba-tool domain exportkeytab /etc/krb5.keytab' instead
Since AD comes from the Win-World I thought SPNs might not be case-sensitive
and...
2016 Sep 14
0
Exporting keytab for SPN failure
On Tue, 13 Sep 2016 22:53:44 -0500
Michael A Weber via samba <samba at lists.samba.org> wrote:
> Experts—
>
> I’m attempting to export a keytab for a created SPN on the AD DC
> machine but I’m receiving an error:
>
> ERROR(runtime): uncaught exception - Key table entry not found
> File "/usr/lib64/python2.6/site-packages/samba/netcmd/__init__.py",
> line 175, in _run return self.run(*args, **kwargs)
> File "/usr/lib64/p...
2016 Sep 14
0
Exporting keytab for SPN failure
Am 14.09.2016 um 05:53 schrieb Michael A Weber via samba:
> Experts—
>
> I’m attempting to export a keytab for a created SPN on the AD DC machine but I’m receiving an error:
>
> ERROR(runtime): uncaught exception - Key table entry not found
> File "/usr/lib64/python2.6/site-packages/samba/netcmd/__init__.py", line 175, in _run
> return self.run(*args, **kwargs)
> File "/usr/lib64/...
2017 Feb 26
3
net ads keytab add has no visible effects
Hi!
I think I ran into the same Problem.
What I tried so far:
1)
* Adopt SPNs on the DC with samba-tool spn
* Create keytab on Member with net ads keytab create
* Result:
** klist and net ads keytab list on Member match
** samba-tool spn list on DC doesn't
2)
* Clear SPNs from Member via net ads keytab flush
* Result:
** net ads keytab list on Member is empty
** samba-...
2019 Mar 13
1
SPN and case sensitivity on LMDB backend
...duplicate attribute value in
CN=WSTEST,OU=vm,OU=computers,OU=test,DC=ad,DC=test,DC=it for index on
servicePrincipalName, duplicate of objectGUID
4c723426-73f8-4991-bf95-88eb57840c2c in
@INDEX:SERVICEPRINCIPALNAME:TERMSRV/WSTEST.AD.TEST.IT
Looking at the computer entry, I indeed have thoses two SPN (notice the
case of hostname).
servicePrincipalName: TERMSRV/WSTEST.ad.test.it
servicePrincipalName: TERMSRV/wstest.ad.test.it
Looking at documentation from Microsoft: "Service Principal Names (SPNs)
are not case sensitive when used by Microsoft Windows-based computers.
However, an SPN ca...
2018 Aug 07
2
Failed to modify SPNs
Hi Rowland,
On Tue, 7 Aug 2018 09:46:24 +0100
Rowland Penny via samba <samba at lists.samba.org> wrote:
> > Failed to modify SPNs on CN=db1,CN=Computers,DC=mydom,DC=lan: acl:
> > spn validation failed for spn[TERMSRV/DB1.MYDOM] uac[0x1000]
> > account[db1$] hostname[(null)] nbname[mydom] ntds[(null)]
> > forest[mydom.lan] domain[mydom.lan]
> >
> > At first I thought it was about missing SPN ent...
2016 Sep 14
0
Exporting keytab for SPN failure
...samba
> > <samba at lists.samba.org> wrote:
> >
> > On Tue, 13 Sep 2016 22:53:44 -0500
> > Michael A Weber via samba <samba at lists.samba.org> wrote:
> >
> >> Experts—
> >>
> >> I’m attempting to export a keytab for a created SPN on the AD DC
> >> machine but I’m receiving an error:
> >>
> >> ERROR(runtime): uncaught exception - Key table entry not found
> >> File
> >> "/usr/lib64/python2.6/site-packages/samba/netcmd/__init__.py",
> >> line 175, in _run retur...