search for: termsrv

...rote: > > > On Tue, 7 Aug 2018 12:51:33 +0100 > > Rowland Penny via samba <samba at lists.samba.org> wrote: > > > > > > > > Failed to modify SPNs on CN=db1,CN=Computers,DC=mydom,DC=lan: > > > > > > acl: spn validation failed for spn[TERMSRV/DB1.MYDOM] > > > > > > uac[0x1000] account[db1$] hostname[(null)] nbname[mydom] > > > > > > ntds[(null)] forest[mydom.lan] domain[mydom.lan] > > > > > > > > > > > > At first I thought it was about missing SPN entries, but >...

Hi Rowland, On Tue, 7 Aug 2018 09:46:24 +0100 Rowland Penny via samba <samba at lists.samba.org> wrote: > > Failed to modify SPNs on CN=db1,CN=Computers,DC=mydom,DC=lan: acl: > > spn validation failed for spn[TERMSRV/DB1.MYDOM] uac[0x1000] > > account[db1$] hostname[(null)] nbname[mydom] ntds[(null)] > > forest[mydom.lan] domain[mydom.lan] > > > > At first I thought it was about missing SPN entries, but adding these > > did not resolve the problem: > > > > # samba-too...

On Tue, 7 Aug 2018 12:51:33 +0100 Rowland Penny via samba <samba at lists.samba.org> wrote: > > > > Failed to modify SPNs on CN=db1,CN=Computers,DC=mydom,DC=lan: acl: > > > > spn validation failed for spn[TERMSRV/DB1.MYDOM] uac[0x1000] > > > > account[db1$] hostname[(null)] nbname[mydom] ntds[(null)] > > > > forest[mydom.lan] domain[mydom.lan] > > > > > > > > At first I thought it was about missing SPN entries, but adding > > > > these did not res...

Hello, I've got some log entries like these on our DCs: Failed to modify SPNs on CN=db1,CN=Computers,DC=mydom,DC=lan: acl: spn validation failed for spn[TERMSRV/DB1.MYDOM] uac[0x1000] account[db1$] hostname[(null)] nbname[mydom] ntds[(null)] forest[mydom.lan] domain[mydom.lan] At first I thought it was about missing SPN entries, but adding these did not resolve the problem: # samba-tool spn list db1$ db1$ User CN=db1,CN=Computers,DC=mydom,DC=lan has the...

...d Penny via samba <samba at lists.samba.org> wrote: > > > > > > > > > > > > Failed to modify SPNs on > > > > > > > > CN=db1,CN=Computers,DC=mydom,DC=lan: acl: spn validation > > > > > > > > failed for spn[TERMSRV/DB1.MYDOM] uac[0x1000] > > > > > > > > account[db1$] hostname[(null)] nbname[mydom] ntds[(null)] > > > > > > > > forest[mydom.lan] domain[mydom.lan] > > > > > > > > > > > > > > > > At first I thought it...

...> > > Rowland Penny via samba <samba at lists.samba.org> wrote: > > > > > > > > > > Failed to modify SPNs on > > > > > > > CN=db1,CN=Computers,DC=mydom,DC=lan: acl: spn validation > > > > > > > failed for spn[TERMSRV/DB1.MYDOM] uac[0x1000] > > > > > > > account[db1$] hostname[(null)] nbname[mydom] ntds[(null)] > > > > > > > forest[mydom.lan] domain[mydom.lan] > > > > > > > > > > > > > > At first I thought it was about missing S...

...t;samba at lists.samba.org> wrote: > On Tue, 7 Aug 2018 12:51:33 +0100 > Rowland Penny via samba <samba at lists.samba.org> wrote: > > > > > > Failed to modify SPNs on CN=db1,CN=Computers,DC=mydom,DC=lan: > > > > > acl: spn validation failed for spn[TERMSRV/DB1.MYDOM] > > > > > uac[0x1000] account[db1$] hostname[(null)] nbname[mydom] > > > > > ntds[(null)] forest[mydom.lan] domain[mydom.lan] > > > > > > > > > > At first I thought it was about missing SPN entries, but > > > > >...

...t lists.samba.org> wrote: > Hi Rowland, > > > On Tue, 7 Aug 2018 09:46:24 +0100 > Rowland Penny via samba <samba at lists.samba.org> wrote: > > > > Failed to modify SPNs on CN=db1,CN=Computers,DC=mydom,DC=lan: acl: > > > spn validation failed for spn[TERMSRV/DB1.MYDOM] uac[0x1000] > > > account[db1$] hostname[(null)] nbname[mydom] ntds[(null)] > > > forest[mydom.lan] domain[mydom.lan] > > > > > > At first I thought it was about missing SPN entries, but adding > > > these did not resolve the problem: > &g...

..../../lib/ldb/ldb_key_value/ldb_kv_index.c:2413: duplicate attribute value >> in CN=SHOPOFFICE-20,CN=Computers,DC=kmg,DC=mydomain,DC=com for index on >> servicePrincipalName, duplicate of objectGUID >> bd1c4b7c-c573-444c-951e-ff932612a111 in >> @INDEX:SERVICEPRINCIPALNAME:TERMSRV/SHOPOFFICE-20.KMG.MYDOMAIN.COM >> completed re-index OK >> (vdc1 pts8) >> >> Does anyone know how to fix this? >> >> Regards, >> > First 'warning' != 'error', the 'completed re-index OK' shows this. Right I get that but I wo...

...ipalname=* serviceprincipalname > An extract from result concerning a lambda client: > # record 41 > dn: CN=win-client345,OU=Machines,DC=ad,DC=domain,DC=tld > servicePrincipalName: HOST/MB38W746-0009 > servicePrincipalName: HOST/MB38W746-0009.ad.domain.tld > servicePrincipalName: TERMSRV/MB38W746-0009.ad.domain.tld > servicePrincipalName: TERMSRV/MB38W746-0009 > An affected client: # record 6 dn: CN=MACHINE1,CN=Computers,DC=ad,DC=domain,DC=domain,DC=tld servicePrincipalName: HOST/ MACHINE1.ad.domain.domain.tld servicePrincipalName: RestrictedKrbHost/MACHINE1.ad.domain.domai...

...-tool dbcheck --reindex Re-indexing... ../../lib/ldb/ldb_key_value/ldb_kv_index.c:2413: duplicate attribute value in CN=SHOPOFFICE-20,CN=Computers,DC=kmg,DC=mydomain,DC=com for index on servicePrincipalName, duplicate of objectGUID bd1c4b7c-c573-444c-951e-ff932612a111 in @INDEX:SERVICEPRINCIPALNAME:TERMSRV/SHOPOFFICE-20.KMG.MYDOMAIN.COM completed re-index OK (vdc1 pts8) Does anyone know how to fix this? Regards, -- Tom me at tdiehl.org

...ing very basic which I'm not seeing right now. I have a Samba-server, which is running in security = domain, and it's a member of that domain (DOMAINA). The domain is a Win2003 domain. That domain has established a trust with another domain (DOMAINB). There's a Windows terminal server TERMSRV which is a member of DOMAINA, but a user from DOMAINB logged in (using the trust). The user wants to reach a share on the Samba-server. This is what happens (smbd -i -d 3 output): Got user=[MFABER] domain=[DOMAINB] workstation=[TERMSRV] len1=24 len2=24 check_ntlm_password: Checking password for u...

...ldbsearch -H $sam serviceprincipalname=* serviceprincipalname An extract from result concerning a lambda client: # record 41 dn: CN=win-client345,OU=Machines,DC=ad,DC=domain,DC=tld servicePrincipalName: HOST/MB38W746-0009 servicePrincipalName: HOST/MB38W746-0009.ad.domain.tld servicePrincipalName: TERMSRV/MB38W746-0009.ad.domain.tld servicePrincipalName: TERMSRV/MB38W746-0009 I would start checking rights using security tab of your client machine into ADUC tool to verify "SELF" is well configured (comparing with some other machine not generating these logs). When this kind of message hap...

...eryone, samba-tool dbcheck --reindex Re-indexing... ../ldb_tdb/ldb_index.c:2352: duplicate attribute value in CN=WSTEST,OU=vm,OU=computers,OU=test,DC=ad,DC=test,DC=it for index on servicePrincipalName, duplicate of objectGUID 4c723426-73f8-4991-bf95-88eb57840c2c in @INDEX:SERVICEPRINCIPALNAME:TERMSRV/WSTEST.AD.TEST.IT Looking at the computer entry, I indeed have thoses two SPN (notice the case of hostname). servicePrincipalName: TERMSRV/WSTEST.ad.test.it servicePrincipalName: TERMSRV/wstest.ad.test.it Looking at documentation from Microsoft: "Service Principal Names (SPNs) are not cas...

Just a though as I was passing in the neighbourhood: does your Terminal Server have related SPN (ServicePrincipalName) created on computer objects? servicePrincipalName: HOST/W7AD-02 servicePrincipalName: HOST/W7AD-02.ad.domain.tld servicePrincipalName: TERMSRV/W7AD-02.ad.domain.tld servicePrincipalName: TERMSRV/W7AD-02 HOST/<hostname> should exist on all computers, that's just to be thorough. TERMSRV/<hostname> should exist on Windows you want to access through RDP (if my little understanding regarding SPN is correct) 2016-11-18 10:20 G...

...C has 2 identical WSMAN records samba-tool  spn list m7-arhiv$ m7-arhiv$ User CN=M7-ARHIV,OU=Computers M07,DC=example,DC=ru has the following servicePrincipalName:      HOST/M7-ARHIV      HOST/m7-arhiv.example.ru      RestrictedKrbHost/M7-ARHIV      RestrictedKrbHost/m7-arhiv.example.ru      TERMSRV/M7-ARHIV      TERMSRV/m7-arhiv.example.ru      WSMAN/M7-ARHIV      WSMAN/m7-arhiv.example.ru      WSMAN/m7-arhiv 10.10.2018 11:16, Andrew Bartlett пишет: > On Wed, 2018-10-10 at 10:42 +0500, Шигапов Денис Вильданович via samba > wrote: >> Hi, >> In samba role DC, is the issu...

...: HOST/myhost.example.com > servicePrincipalName: RestrictedKrbHost/myhost.example.com > servicePrincipalName: HOST/MYHOST > servicePrincipalName: RestrictedKrbHost/BARTOK > servicePrincipalName: WSMAN/myhost.example.com > servicePrincipalName: WSMAN/myhost > servicePrincipalName: TERMSRV/myhost.example.com > servicePrincipalName: TERMSRV/MYHOST > One of which does match with the username in Tim's output, btw. I > have seen exactly the same username format while I was setting this > up around a month ago. > - Kees. So NTLM (and Kerberos client) authentication is n...

OK, Thanks for all. Regards; On 23/07/2019 12:06, Rowland penny via samba wrote: > On 23/07/2019 16:02, Carlos via samba wrote: >> I haven't more output log, because i need join in dc in last week, >> and i "resolved"(workaround) in used samba 4.6.X -> after -> 4.8.3. >> Sorry..... > > OK, it would have been nice to have the output, this is

Am 22.07.19 um 10:39 schrieb Stefan G. Weichinger via samba: > Am 20.07.19 um 11:54 schrieb Joachim Lindenberg via samba: >> I figured it out myself. The kerberos configuration on the old dc cobra was bad ? no clue why it worked at all until yesterday. >> >> After fixing it, testing with kinit, and restarting the dc processes it resumed replication. > > pls show how you

Hello, I'm getting replication errors of this type on the Samba (version 4.1.4) server (name=Roquefort): ##### ############################# ERROR(<class 'samba.drs_utils.drsException'>): DsReplicaSync failed - drsException: DsReplicaSync failed (8418, 'WERR_DS_DRA_SCHEMA_MISMATCH') File