similar to: kinit succeeded but ads_sasl_spnego_krb5_bind failed: The context has expired : Success

12.08.2015 15:22, Rowland Penny пишет: > On 12/08/15 12:17, Dmitry MiksIr wrote: > > Hi, I think your kerberos ticket is expiring, but don't really know why. > > As Louis as said, you don't need these lines in krb5.conf: > > ticket_lifetime = 24h > renew_lifetime = 7d > Ok, i will try to remove. Lets see. > You also don't need these lines in smb.conf:

On 12/08/15 12:17, Dmitry MiksIr wrote: > Samba4 as AD controller. Same samba as domain members. Winbind. > Periodically (once in few days) after subject message in winbind logs > its stop working and only restart of winbindd helps. > Error message: > [2015/08/10 13:31:14.410866, 0] > ../source3/libads/sasl.c:1025(ads_sasl_spnego_bind) > kinit succeeded but

Hai, i compaired your config with my own.. Looks the same and correct to me. try it without these 2 in krb5.conf: >ticket_lifetime = 24h >renew_lifetime = 7d and in smb.conf i dont have > idmap cache time = 5 > idmap negative cache time = 5 > winbind cache time = 5 so i suggest first remove the 2 lines in krb5.conf and test. then if needed the other 2. and your did

Hi, I've successfully joined a CentOS server to our AD domain: AD: Windows Server 2008 RC2 with Windows Services for UNIX AD member: CentOS 6.6, sernet-samba-4.1.14-9, authentication via Kerberos and Winbind >From time to time the following entries show up in the messages file: Apr 2 11:54:15 barbarella nss_wins[4254]: [2015/04/02 11:54:15.339983, 0]

BODY { font-family:Arial, Helvetica, sans-serif;font-size:12px; }Hi, I've seen many people complain about this error message by Googling around, but I've never found a satisfactory explanation as to the cause and resolution. I'm hoping someone on the list will be able to point me in the right direction? I'm attempting to get a RHEL 5.5 client configured to use winbind auth

I have configured samba to use ADS and we need to configure strong authentication with client ldap sasl wrapping = seal or sign . Samba version is 3.2.4 We are using openladp latest version Any idea what is wrong ? [2008/10/10 08:56:40, 0] libads/sasl.c:ads_sasl_spnego_gsskrb5_bind(593) ads_setup_sasl_wrapping() failed: NT_STATUS_NOT_SUPPORTED [2008/10/10 08:56:40, 0]

I am trying to setup a Samba4 as Domain Member to Samba 4 AD DC. The OS is Centos 7 and the samba is sernet samba 4.3 When I run the following command net ads join -U Administrator -S solae.local I take the following message: kinit succeeded but ads_sasl_spnego_krb5_bind failed: Miscellaneous failure (see text) : Server (ldap/solae.local at SOLAE.LOCAL) unknown Failed to join domain: failed

Hi all, I'm having trouble joining samba to active directory. My samba version is 3.0.28a-35 and krb is 1.6.1-17.el5. It's running on centos 5, kernel version 2.6.18-53.1.14.el5. It's running on vmware server by the way if that is of any significance. The specific error that I get are as follows: when testjoining the domain: [2008/03/18 04:34:07, 0]

The avahi is turned off on all unix mashines. I have allready taking a look https://wiki.samba.org/index.php/Setup_Samba_as_an_AD_Domain_Member but I have this problem kinit succeeded but ads_sasl_spnego_krb5_bind failed. any idea? On 09/04/16 08:22, Lists wrote: > I am trying to setup a Samba4 as Domain Member to Samba 4 AD DC. > The OS is Centos 7 and the samba is sernet samba 4.3

Hello All, Having some trouble connecting to my Windows domain with my Solaris server. Some details included below that might give you an idea of what is going on here. I have tried setting allow weak crypto in the krb5.conf, I have tried specifying the encryption types and leaving it blank to use the defaults all to no avail... bash-3.2# kinit me at DOMAIN.LOCAL Password for me at DOMAIN.LOCAL:

On 09/04/16 08:22, Lists wrote: > I am trying to setup a Samba4 as Domain Member to Samba 4 AD DC. > The OS is Centos 7 and the samba is sernet samba 4.3 > When I run the following command > > net ads join -U Administrator -S solae.local > > I take the following message: > > kinit succeeded but ads_sasl_spnego_krb5_bind failed: Miscellaneous failure (see text) : Server

On 27 January 2016 at 08:24, Rowland penny <rpenny at samba.org> wrote: > On 26/01/16 20:54, Henry McLaughlin wrote: > >> [root at centos7member ~]# net rpc rights list accounts >> -U'TESTING\administrator' >> Enter TESTING\administrator's password: >> Could not connect to server 127.0.0.1 >> Connection failed: NT_STATUS_CONNECTION_REFUSED

On 09/04/16 11:30, Lists wrote: > Ok I am sorry was a test I send you again the smb.conf > > # Global parameters > [global] > netbios name = SOLFS > security = ADS > workgroup = SOLAE > realm = SOLAE.LOCAL > > log file = /var/log/samba/%m.log > log level = 1 > > dedicated keytab file = /etc/krb5.keytab

Taking this back on list where it belongs: On 09/04/16 10:31, Lists wrote: >> Are you 100% sure it is off, even better would be to remove it (or >> change '.local' to something else) > yes I am. > > systemctl list-unit-files | grep avahi > avahi-daemon.service disabled > avahi-daemon.socket disabled > OK

I am try to setup a Samba4 Domain member to Samba4 AC DC here is the smb.cfg # Global parameters [global] netbios name = SOLAD workgroup = SOLAE realm = SOLAE.LOCAL security = ADS server role = member server idmap config SOLAE : backend = rid # idmap config SOLAE :schema_mode = rfc2307 idmap config SOLAE : range = 10000-9999999 idmap config * : backend = tdb idmap config * : range =

On 09/04/16 11:55, Lists wrote: > nop, the same message. > > I made all change, the tests are success but the same message. > > ----- Αρχικό μήνυμα ----- > Από: "Rowland penny" <rpenny at samba.org> > Προς: "samba" <samba at lists.samba.org> > Απεσταλμένα: Σάββατο, Απρίλιος 9, 2016 1:40:50 μ.μ. > Θέμα: Re: [Samba] kinit succeeded but

On 09/04/16 11:09, Lists wrote: > First at all the ip of Samba AD DC is 10.0.0.22 and the smb.conf of this ad server is the following: > [global] > workgroup = SOLAE > realm = SOLAE.LOCAL > #security = ads > # Use password server option only with security = server > #password server = solad.solae.local > netbios name = SOLAD > server role = active directory domain

Hello, I have a samba server set up as a member server in a native 2003 domain. Its ubuntu server 8.4.02 LTS. Any idea what causes this when I try to leave the domain? > user@dordal:/home/backups$ sudo net ads leave -U administrator@DOMAIN.COM > administrator@DOMAIN.COM's password: > [2009/03/17 17:41:02, 0] libads/sasl.c:ads_sasl_spnego_bind(330) > kinit succeeded but

Am 03.11.2015 um 16:44 schrieb buhorojo: > On 03/11/15 10:56, Ole Traupe wrote: >> >>>> I mean, putting the key in the keytab looks like a security risk to >>>> me. >>> In what way does it appear any more of a risk than having the keys >>> which you have there already? Even if someone steals the keytab, >>> they're gonna be hard

Thanks Rowland, I am trying to setup an AD member server. I followed the wiki (https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server). I am on Fedora 21. The domain join succeeded But wbinfo fails: $ wbinfo -u Error looking up domain users I tried to increase windbind log verbosity to 10, but I can see no trace when issuing wbinfo: /etc/smb.conf log level = winbind:10