similar to: AD authentication issue in Samba (kerberos errors)

Was hoping for a helping hand. Trying to set up Samba on a domain member server. The member server was previously joined to the kerberized domain using realm join and a system keytab file exists in the /etc. Subsequently I added samba along with winbind not being entirely sure if the latter was needed. This is a Redhat 7.4 server. My smb.conf appears as follows. [global] password server = *

Hello, my fileserver (Debian and samba packages 4.2.14+dfsg-0+deb8u9) connected to an AD with one Windows DC and one Samba DC does not renew the Kerberos ticket after 10 hours and I need to rejoin the domain.:( Another server (runs as print server with the same version) does not have this problem. Aug 10 20:03:37 bonn winbindd[14698]: kerberos_kinit_password BONN$@DOMAIN.DE failed:

Hi guys! I started to have the problem above last October, 2th. I don´t know why and how, because it was saturday. So, my file server stoped to authenticate against the Samba4 AD. Today, all shares was stopped and then i restarted my Samba4 AD and the file server. All became to work again. But it im afraid because the problem started by itself. Thanks! # MY CRONTAB 17 * * * * root cd /

Guys, I'm seeing the following error at my Samba4 Domain Member File Server: --- ==> /var/log/samba/log.wb-DOMAIN <== [2014/08/16 05:39:26.616878, 0] ../source3/libads/kerberos_util.c:74(ads_kinit_password) kerberos_kinit_password FILE-SERVER$@REALM.DOMAIN.COM failed: Client not found in Kerberos database [2014/08/16 05:39:26.616962, 1]

Hi guys! I started to have the problem above last October, 2th. I don´t know why and how, because it was saturday. So, my file server stoped to authenticate against the Samba4 AD. Today, all shares was stopped and then i restarted my Samba4 AD and the file server. All became to work again. But it im afraid because the problem started by itself. Thanks! # MY CRONTAB 17 * * * * root cd /

On Sat, 11 Aug 2018 14:56:46 +0200 Noël Köthe via samba <samba at lists.samba.org> wrote: > Hello, > > my fileserver (Debian and samba packages 4.2.14+dfsg-0+deb8u9) > connected to an AD with one Windows DC and one Samba DC does not renew > the Kerberos ticket after 10 hours and I need to rejoin the domain.:( > Another server (runs as print server with the same version)

When I sent the original note, I had it configured this way: [realms] HIJ.KLM.COM <http://hij.klm.com/> = { kdc = ad1.hij.klm.com kdc = ad2.hij.klm.com admin_server = ad.hij.klm.com default_domain = hij.klm.com } [domain_realm] .xyz.hij.klm.com = HIJ.KLM.COM <http://hij.klm.com/> .hij.klm.com = HIJ.KLM.COM <http://hij.klm.com/> But then after reading about kerberos on the

Rowland, Thank you, I'll try to implement your suggestions. But it definitely worked without winbind. On Wed, Mar 20, 2019 at 1:26 PM Rowland Penny via samba < samba at lists.samba.org> wrote: > On Wed, 20 Mar 2019 13:11:47 +0200 > "linux.il" <linux.il at gmail.com> wrote: > > > >> - There have been no configuration changes to the system > >

No ideas on this? Anybody? --Mark -----Original Message----- Date: Tue, 29 May 2018 09:27:36 -0400 Organization: Ohio Highway Patrol Retirement System To: samba at lists.samba.org Subject: [Samba] Why am I getting login failures for domain members? Every so often I get a message in /var/log/samba/log.samba as follows: 2018/05/26 13:44:25.172415, 2] authentication for user [HPRS/LABRAT$] FAILED

Hi , I have set up a 2-node CTDB cluster serving NFS and CIFS authenticating Windows and Linux users via Active Directory. The setup works fine, except only one server in the CTDB-cluster is able to join the AD domain at a given instance. If you manually add the other server into AD, the already connected server gets disconnected. There is no specific error message logged in /var/log/message or

Hello! My smb.conf [global] workgroup = <DOMAIN> realm = <SUBDOMAIN.DOMAIN.COM.BR> security = ADS idmap config * : backend = rid idmap config * : range = 100000-999999 client schannel = no allow trusted domains = yes winbind use default domain = yes winbind refresh tickets = Yes winbind

Hi, I am have compiled samba 3.0.23b (MIT Kerberos 1.5.1) on Solaris 10. I am unable to join the ads domain. net ads testjoin returns the following output... [2006/09/01 17:25:17, 0] libads/kerberos.c:ads_kinit_password(208) kerberos_kinit_password ARTEMISIA$@UNIMELB.EDU.AU failed: Preauthentication failed [2006/09/01 17:25:17, 0] libads/kerberos.c:ads_kinit_password(208)

On Wed, 6 Jun 2018 15:39:22 -0400 lingpanda101 <lingpanda101 at gmail.com> wrote: > > On 6/6/2018 1:48 PM, Mark Foley via samba wrote: > > No ideas on this? Anybody? > > > > --Mark > > > > -----Original Message----- > > Date: Tue, 29 May 2018 09:27:36 -0400 > > Organization: Ohio Highway Patrol Retirement System > > To: samba at

Hello! I do not use sssd use winbind. When I mentioned in the lines workgroup and realm, they are like this (for example) Workgroup = INTRNAL Realm = INTERNAL.TESTE.COM.BR I do not know if that was what caused the confusion .... Thanks Em 08-01-2017 20:28, Rowland Penny via samba escreveu: > On Sun, 8 Jan 2017 20:04:41 -0200 > "Carlos A. P. Cunha" <carlos.hollow at

Hello, I'm trying to join a samba server to a w2k domain. Now I have removed all samba and kerberos software from the machine to reset configuration. Then I have executed "net ads testjoin" to see what happened (I have already joined the machine to the domain). It returned the following messages: [2007/07/04 09:14:44, 0] libads/kerberos.c:ads_kinit_password(208)

On 3/20/19 9:40 AM, Rowland Penny via samba wrote: > On Wed, 20 Mar 2019 17:22:36 +0200 > "linux.il via samba" <samba at lists.samba.org> wrote: >> Rowland, >> Thank you, I'll try to implement your suggestions. >> But it definitely worked without winbind. >> >> Then your 'Samba' problem isn't a Samba problem :-) >> >>

Interesting. So would having the account I'm creating it with in the same subdomain fix the potential trust issues, or is samba's function in a subdomain in general in question? On Tue, Nov 17, 2015 at 3:25 PM Rowland Penny <rowlandpenny241155 at gmail.com> wrote: > On 17/11/15 19:32, Schuyler Bishop wrote: > > Hi Rowland, > > > > Thanks for the response. I

Can anyone suggest how to get around the following? [2009/09/05 00:32:55, 3] libads/sasl.c:ads_sasl_spnego_bind(300) ads_sasl_spnego_bind: got server principal name = exdc1$@domain.example.com [2009/09/05 00:32:55, 3] libsmb/clikrb5.c:ads_krb5_mk_req(593) ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache found) [2009/09/05 00:32:56, 0]

We are having problems joining onto our 2003 server domain. This is strange in that other linux clients on our network are NOT having problems. It appears that the domain will not allow new linux machines to join the domain, even when allowing existing machines that have the exact same configuration, to authenticate from the domain. In order to test this I have taken a stripped down debian box

On 18/11/15 18:08, Schuyler Bishop wrote: > When I sent the original note, I had it configured this way: > > [realms] > HIJ.KLM.COM <http://hij.klm.com/> = { > kdc = ad1.hij.klm.com > kdc = ad2.hij.klm.com > admin_server = ad.hij.klm.com > default_domain = hij.klm.com > } > > [domain_realm] > .xyz.hij.klm.com = HIJ.KLM.COM <http://hij.klm.com/> >