search for: vno

...on Jun 25 14:29:33 EDT 2012 Maximum ticket life: 0 days 10:00:00 Maximum renewable life: 0 days 20:00:00 Last modified: Fri Mar 16 14:29:33 EDT 2012 (root/admin at TESTKDC) Last successful authentication: [never] Last failed authentication: [never] Failed password attempts: 0 Number of keys: 6 Key: vno 1, aes256-cts-hmac-sha1-96, no salt Key: vno 1, aes128-cts-hmac-sha1-96, no salt Key: vno 1, des3-cbc-sha1, no salt Key: vno 1, arcfour-hmac, no salt Key: vno 1, des-hmac-sha1, no salt Key: vno 1, des-cbc-md5, no salt MKey: vno 1 Attributes: Policy: NewUser [root at hpctest-krb2 ~]# kinit testuser...

Hello everyone, I have a FreeNAS server (9.10 running samba 4.3.11-GIT-UNKNOWN) that's recently started emitting this error: gss_accept_sec_context failed with [ Miscellaneous failure (see text): Failed to find cifs/nas01 at EXAMPLE.COM(kvno 4) in keytab MEMORY:cifs_srv_keytab (arcfour-hmac-md5)] I've looked at bug 12262 [1], which is why I've cc'd Stefan Metzmacher. I don't think this is is the same as that bug, and I will explain why. I've looked at a lot of mailing list/forum posts, and the problem either &quot...

for example: a data.frame data V1 V2 V3 1 2 3 4 5 6 If I want to calculate the V2 I can get data$V2 But now I want to calculate the dimension name and then analysis the data. for example No=3*x ;x=1,2,3,...n anadata=data$VNo How could I do? -- TANG Jie [[alternative HTML version deleted]]

...0x502 Password: Verifying - Password: >From what I've read, I should be able to see the ticket information such as expiration dates, but I don't see this information. freebsd# klist Ticket file: /tmp/tkt0 klist: No ticket file (tf_util) freebsd# ktutil list FILE:/etc/krb5.keytab: Vno Type Principal 0 des-cbc-md5 host/freebsd.template.state.company.com@DOMAIN.LOCAL krb4:/etc/srvtab: Vno Type Principal When I try to authenticate with the kinit command I get an error: freebsd# kinit administrator@DOMAIN.LOCAL FreeBSD Inc. (freebsd.template.state.company.com) Ker...

...tkey query failed: GSSAPI error: Major = Unspecified GSS failure. Minor code may provide more information, Minor = No credentials found with supported encryption types (filename: /tmp/dhcp-dyndns.cc). Here is my keytab file: ktutil -k /etc/dhcpduser.keytab list /etc/dhcpduser.keytab: Vno Type Principal Aliases 2 aes256-cts-hmac-sha1-96 dhcpduser at PROD.CORP.INT <mailto:dhcpduser at PROD.CORP.INT> 2 aes128-cts-hmac-sha1-96 dhcpduser at PROD.CORP.INT <mailto:dhcpduser at PROD.CORP.INT> 2 arcfour-hmac-md5 dhcpdus...

...ds] [Bytes in flight: 1361] [Bytes sent since last PSH flag: 1361] [PDU Size: 1361] Kerberos Record Mark: 1357 bytes 0... .... .... .... .... .... .... .... = Reserved: Not set .000 0000 0000 0000 0000 0101 0100 1101 = Record Length: 1357 tgs-req pvno: 5 msg-type: krb-tgs-req (12) padata: 2 items PA-DATA PA-TGS-REQ padata-type: kRB5-PADATA-TGS-REQ (1) padata-value: 6e8204603082045ca003020105a10302010ea20703050000... ap-req pvno: 5...

...) TGS-REP KDC -> HOST A tgs-rep msg-type: krb-tgs-rep (13) crealm: MYDOMAIN.COM.XYZ cname name-type: kRB5-NT-ENTERPRISE-PRINCIPAL (10) cname-string: 1 item CNameString: kacper_wirski ticket tkt-vno: 5 realm: MYDOMAIN.COM.XYZ sname name-type: kRB5-NT-PRINCIPAL (1) sname-string: 1 item SNameString: bmsrv4-hyperv$ enc-part etype: eTYPE-ARCFOUR-HMAC-MD5 (23) kvno: 1...

...krb5_blob: 6082092706092A864886F71201020201006E82... KRB5 OID: 1.2.840.113554.1.2.2 (KRB5 - Kerberos 5) krb5_tok_id: KRB5_AP_REQ (0x0001) Kerberos AP-REQ Pvno: 5 MSG Type: AP-REQ (14) Padding: 0 APOptions: 20000000 (Mutual required) .0.. .... = Use Session Key: Do NOT use ..1. .......

hello, today the following problem occurred: [2019/10/08 09: 57: 23.568282, 1] ../../source3/librpc/crypto/gse.c:660(gse_get_server_auth_token) gss_accept_sec_context failed with [Miscellaneous failure (see text): Failed to find cifs/fs-share at dom.corp (kvno 109) in keytab MEMORY: cifs_srv_keytab (arcfour-hmac-md5)] in my smb.conf I have the lines: kerberos method = dedicated keytab dedicated keytab file = /etc/samba/fs.keytab # net ads keytab list Vno Type Principal 108 arcfour-hmac-md5 cifs/fs-sahre at dom.corp 108 des-cbc-md5 cifs/fs-sahre at...

...ast explanatory of all samba errors...) Here follow my tries: --------------SCHNIPP------------------------ linux-router:~ # kinit --use-keytab -t /etc/krb5.keytab kinit: krb5_get_init_creds: Additional pre-authentication required linux-router:~ # ktutil -k /etc/krb5.keytab list /etc/krb5.keytab: Vno Type Principal 1 des-cbc-crc host/linux-router.linux.xxxxx.local@LINUX.XXXXX.LOCAL linux-router:~ # kinit -k host/linux-router.linux.xxxxxx.local kinit: krb5_get_init_creds: Additional pre-authentication required #linux-router:~ # kinit host/linux-router.linux.ermer.local host/linux-ro...

Hi everyone, I am looking for a way to check which mailbox an email is being delivered to in a global sieve filter. After not being able to find some kind of variable that is populated by dovecot automatically, I tried to use the `Delivered-To` header. I tried a check like this: header :is "delivered-to" "<user at domain.org>" Unfortunately, this does not only

...imdap config AD : backend = rid idmap config AD : range = 100000-999999 idmap config * : backend = autorid idmap config * : range = 1000000-9999999 idmap config * : rangesize = 100000 The keytab itself looks OK to me: root at wrn-radtest:~# net ads keytab list Vno Type Principal 2 des-cbc-crc host/wrn-radtest.ad.example.net at AD.EXAMPLE.NET 2 des-cbc-md5 host/wrn-radtest.ad.example.net at AD.EXAMPLE.NET 2 aes128-cts-hmac-sha1-96 host/wrn-radtest.ad.example.net at AD.EXAMPLE.NET 2 aes256-cts-hmac-sha1-9...

...har *host_princ_s, krb5_data password, krb5_enctype *enctypes, krb5_keytab *keytab, char *keytab_name) { krb5_keytab_entry entry; krb5_kvno kvno = 1; krb5_error_code ret; krb5_keyblock *key; int i; [... lines deleted ...] entry.keyblock = *key; The problem is that the structure member name is key, not keyblock. >From krb5.h typedef struct krb5_keytab_entry_st { krb5_magic magic;...

.../06/30 23:17:31.605837, 1] ../source3/librpc/crypto/gse.c:649(gse_get_server_auth_token) gss_accept_sec_context failed with [Unspecified GSS failure. Minor code may provide more information: Request ticket server cifs/U1customer.customer.intra at customer.INTRA not found in keytab (ticket kvno 277)] (same as before) # net ads keytab list Vno Type Principal 2 DES cbc mode with CRC-32 host/u1customer.customer.intra at customer.INTRA 2 DES cbc mode with CRC-32 host/SAMBA at customer.INTRA 2 DES cbc mode with RSA-MD5...

....XYZ sname name-type: kRB5-NT-SRV-INST (2) sname-string: 2 items SNameString: Microsoft Virtual System Migration Service SNameString: BMSRV-WIN10 till: 2037-09-13 02:48:05 (UTC) nonce: 17847174 etype: 5 items enc-authorization-data error: krb-error pvno: 5 msg-type: krb-error (30) ctime: 2017-03-16 08:01:23 (UTC) cusec: 128 stime: 2017-03-16 08:01:23 (UTC) susec: 66964 error-code: eRR-S-PRINCIPAL-UNKNOWN (7) realm: <unspecified realm> sname name-type: kRB5-NT-UNKNOWN (0) sname-string: 0 items Same...

...) TGS-REP KDC -> HOST A tgs-rep msg-type: krb-tgs-rep (13) crealm: MYDOMAIN.COM.XYZ cname name-type: kRB5-NT-ENTERPRISE-PRINCIPAL (10) cname-string: 1 item CNameString: kacper_wirski ticket tkt-vno: 5 realm: MYDOMAIN.COM.XYZ sname name-type: kRB5-NT-PRINCIPAL (1) sname-string: 1 item SNameString: bmsrv4-hyperv$ enc-part etype: eTYPE-ARCFOUR-HMAC-MD5 (23) kvno: 1...

On Sat, 30 Jun 2018 21:02:57 +0200 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > > additional: > > the krb5.conf from the former admin, I assume it could or should be > boiled down: > # cat /etc/krb5.conf The standard one for Samba is just this: [libdefaults] default_realm = CUSTOMER.INTRA dns_lookup_realm = false

...Destination Protocol Length Info 1 0.000000 192.168.0.115 192.168.6.6 KRB5 241 AS-REQ Frame 1: 241 bytes on wire (1928 bits), 241 bytes captured (1928 bits) User Datagram Protocol, Src Port: 55231 (55231), Dst Port: kerberos (88) Kerberos AS-REQ Pvno: 5 MSG Type: AS-REQ (10) KDC_REQ_BODY Padding: 0 KDCOptions: 00000010 (Renewable OK) Client Name (Service and Host): root/host.example.com Name-type: Service and Host (3) Name: root Name: host.example.com Realm: EXAMPLE.COM...

...creates the two des and ArcFour with HMAC/md5 enctypes, no AES enctypes are listed. The Domain admins can use tools on their side to create SPNs and keytabs that have AES and we would prefer them over DES/ArcFour except in special circumstances.: # klist -ke Keytab name: WRFILE:/etc/krb5.keytab KVNO Principal - ---- - -------------------------------------------------------------------------- 5 host/iu-itps-rhel6ad.ads.iu.edu at ADS.IU.EDU (DES cbc mode with CRC-32) 5 host/iu-itps-rhel6ad.ads.iu.edu at ADS.IU.EDU (DES cbc mode with RSA-MD5) 5 host/iu-itps-rhel6ad.ads.iu.edu at ADS.IU.E...

..._LOGON_FAILURE - [2018/06/30 20:53:32.297500, 1] ../source3/librpc/crypto/gse.c:649(gse_get_server_auth_token) gss_accept_sec_context failed with [Unspecified GSS failure. Minor code may provide more information: Request ticket server cifs/U1mycustomer.mycustomer.intra at mycustomer.INTRA kvno 277 not found in keytab; keytab is likely out of date] [2018/06/30 20:53:32.372971, 1] ../source3/librpc/crypto/gse.c:649(gse_get_server_auth_token) gss_accept_sec_context failed with [Unspecified GSS failure. Minor code may provide more information: Request ticket server cifs/U1mycustomer...