similar to: Samba 4 GA upgrade - auth failing

Hi , I have set up a 2-node CTDB cluster serving NFS and CIFS authenticating Windows and Linux users via Active Directory. The setup works fine, except only one server in the CTDB-cluster is able to join the AD domain at a given instance. If you manually add the other server into AD, the already connected server gets disconnected. There is no specific error message logged in /var/log/message or

Hi, I am have compiled samba 3.0.23b (MIT Kerberos 1.5.1) on Solaris 10. I am unable to join the ads domain. net ads testjoin returns the following output... [2006/09/01 17:25:17, 0] libads/kerberos.c:ads_kinit_password(208) kerberos_kinit_password ARTEMISIA$@UNIMELB.EDU.AU failed: Preauthentication failed [2006/09/01 17:25:17, 0] libads/kerberos.c:ads_kinit_password(208)

Hello, my fileserver (Debian and samba packages 4.2.14+dfsg-0+deb8u9) connected to an AD with one Windows DC and one Samba DC does not renew the Kerberos ticket after 10 hours and I need to rejoin the domain.:( Another server (runs as print server with the same version) does not have this problem. Aug 10 20:03:37 bonn winbindd[14698]: kerberos_kinit_password BONN$@DOMAIN.DE failed:

We have been using Samba for many years. The company has just switched from an NT domain to an Active Directory domain. The new server is running Windows Server 2003. We are having trouble configuring our Solaris 8 server so it can join the domain as a server. Just getting Samba to compile and link was interesting enough. This included downloading and compiling a new version of the BerkeleyDB,

Can anyone suggest how to get around the following? [2009/09/05 00:32:55, 3] libads/sasl.c:ads_sasl_spnego_bind(300) ads_sasl_spnego_bind: got server principal name = exdc1$@domain.example.com [2009/09/05 00:32:55, 3] libsmb/clikrb5.c:ads_krb5_mk_req(593) ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache found) [2009/09/05 00:32:56, 0]

Hi all, I'm having trouble joining samba to active directory. My samba version is 3.0.28a-35 and krb is 1.6.1-17.el5. It's running on centos 5, kernel version 2.6.18-53.1.14.el5. It's running on vmware server by the way if that is of any significance. The specific error that I get are as follows: when testjoining the domain: [2008/03/18 04:34:07, 0]

I have CENTOS7 box with Samba 4.8.3-4 and SSSD 1.16.2-13, authentication against MS Win domain. - Recently, Active Directory authentication stopped working within Samba - Users who try to connect to reach the point of being prompted for AD credentials; failures happen afterward. - All flavors of client OS are affected: Windows, Mac and Linux (via smbclient). - There have been no configuration

Hi guys! I started to have the problem above last October, 2th. I don´t know why and how, because it was saturday. So, my file server stoped to authenticate against the Samba4 AD. Today, all shares was stopped and then i restarted my Samba4 AD and the file server. All became to work again. But it im afraid because the problem started by itself. Thanks! # MY CRONTAB 17 * * * * root cd /

Hi guys! I started to have the problem above last October, 2th. I don´t know why and how, because it was saturday. So, my file server stoped to authenticate against the Samba4 AD. Today, all shares was stopped and then i restarted my Samba4 AD and the file server. All became to work again. But it im afraid because the problem started by itself. Thanks! # MY CRONTAB 17 * * * * root cd /

Was hoping for a helping hand. Trying to set up Samba on a domain member server. The member server was previously joined to the kerberized domain using realm join and a system keytab file exists in the /etc. Subsequently I added samba along with winbind not being entirely sure if the latter was needed. This is a Redhat 7.4 server. My smb.conf appears as follows. [global] password server = *

We are having problems joining onto our 2003 server domain. This is strange in that other linux clients on our network are NOT having problems. It appears that the domain will not allow new linux machines to join the domain, even when allowing existing machines that have the exact same configuration, to authenticate from the domain. In order to test this I have taken a stripped down debian box

Yohoo! We want to authenticate our Cisco admins to freeradius. This should authenticate to our running AD (W2003Srv). Googling for freeradius and AD tells me to use ntlm_auth. For ntlm_auth I need a running winbindd. And kerberos. And there's my problem. Status: I configured the /etc/krb5.conf "kinit admin@MY.DOMAIN" asks for the password and gives me a ticket for one week.

Hello, I'm trying to join a samba server to a w2k domain. Now I have removed all samba and kerberos software from the machine to reset configuration. Then I have executed "net ads testjoin" to see what happened (I have already joined the machine to the domain). It returned the following messages: [2007/07/04 09:14:44, 0] libads/kerberos.c:ads_kinit_password(208)

This used to work ... root at workhorse:/var/log/samba# wbinfo -t checking the trust secret via RPC calls failed error code was NT_STATUS_ACCESS_DENIED (0xc0000022) Could not check secret root at workhorse:/var/log/samba# net ads info LDAP server: 10.0.0.60 LDAP server name: dim-win2300.DaCrib.local Realm: DACRIB.LOCAL Bind Path: dc=DACRIB,dc=LOCAL LDAP port: 389 Server time: Sat, 24 Apr 2010

I am in the process of getting samba working again with Activer Directory. Recently our IT department upgraded their windows server to 2008. I am following the approach described here: http://www.surlyjake.com/linux/samba/join-debian-lenny-to-active-directory-using-samba/ I am able to get kerberos to issue a ticket, but where I am running into a wall is with the net join ads part...

Hello! I am having these messages in syslog Kerberos_kinit_password SERVER$@<MY-DOMAIN> failed: Preauthentication failed With this, my winbind is not working, so I need to restart winbind cache (net cache flush), this is happening every 24 hours. Any idea ? Server: Ubuntu 14.04.3 LTS Version 4.4.4 Client: Ubuntu 16.04.1 LTS Version 4.3.11-Ubuntu Thanks

Hello folks, I have been able to successfully compile (MIT) kerberos (1.5.4) and samba (3.0.28a) on a Solaris 9 (Kernel version: SunOS 5.9 Generic 122300-31 Aug 2008) host. I was able to successfully join this host to a DEVDOMAIN This is the smb.conf file that I used: [global] # If there are no settings here, Samba uses the default values for all global settings security = ads

I running 3.0.25c on OpenSolaris. I can succesfully do a kinit and see the ticket via klist, but am unable to join the domain. /usr/sfw/sbin/net -d 5 ads join -U user@DOMAIN.LOCAL gives the following error... [2007/08/29 15:49:24, 3] libsmb/clikrb5.c:(593) ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache file found) [2007/08/29 15:49:24, 0] libads/kerberos.c:(228)

Hello from Buenos Aires. I am getting the following error when I do the net ads join command: get_service_ticket: kerberos_kinit_password ULISES$@SYSTEMMASTER.COM.AR@SYSTEMMASTER.COM.AR failed: Preauthentication failed I am running Debian, kernel 2.4.18 (geez, I should upgrade). I searched everywhere for this error but I can?t find any solution. Wbinfo -u works fine. kinit

On Sat, 11 Aug 2018 14:56:46 +0200 Noël Köthe via samba <samba at lists.samba.org> wrote: > Hello, > > my fileserver (Debian and samba packages 4.2.14+dfsg-0+deb8u9) > connected to an AD with one Windows DC and one Samba DC does not renew > the Kerberos ticket after 10 hours and I need to rejoin the domain.:( > Another server (runs as print server with the same version)