Did not manage to negotiate mandetory feature SIGN for dcerpc auth_level 6
Taylor, Jonn
jonnt at taylortelephone.com
Thu Nov 29 11:15:31 MST 2012
Getting is error on startup. This is a 2003 domain on CentOS 5.8 x86_64.
[2012/11/27 16:51:33, 0] ../source4/smbd/server.c:369(binary_smbd_main)
samba version 4.1.0pre1-GIT-5f2edd1 started.
Copyright Andrew Tridgell and the Samba Team 1992-2012
[2012/11/27 16:51:34, 0] ../source4/smbd/server.c:475(binary_smbd_main)
samba: using 'standard' process model
[2012/11/27 16:51:40, 0] ../auth/gensec/gensec.c:247(gensec_update)
Did not manage to negotiate mandetory feature SIGN for dcerpc
auth_level 6
[2012/11/27 16:51:40, 0]
../source4/librpc/rpc/dcerpc_util.c:681(dcerpc_pipe_auth_recv)
Failed to bind to uuid e3514235-4b06-11d1-ab04-00c04fc2dcd2 for
e3514235-4b06-11d1-ab04-00c04fc2dcd2 at ncacn_ip_tcp:ed9ddc6b-ed45-4183-81ff-733bb675350a._msdcs.taylortelephone.com[1025,seal,krb5]
NT_STATUS_ACCESS_DENIED
[root at dc3 samba-master]# dig
ed9ddc6b-ed45-4183-81ff-733bb675350a._msdcs.taylortelephone.com
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.10.rc1.el6_3.3 <<>>
ed9ddc6b-ed45-4183-81ff-733bb675350a._msdcs.taylortelephone.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6761
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;ed9ddc6b-ed45-4183-81ff-733bb675350a._msdcs.taylortelephone.com. IN A
;; ANSWER SECTION:
ed9ddc6b-ed45-4183-81ff-733bb675350a._msdcs.taylortelephone.com. 600
IN CNAME dc1.taylortelephone.com.
dc1.taylortelephone.com. 3600 IN A 192.168.173.13
;; Query time: 4 msec
;; SERVER: 192.168.173.13#53(192.168.173.13)
;; WHEN: Thu Nov 29 12:06:26 2012
;; MSG SIZE rcvd: 115
[root at dc3 samba-master]# klist -e
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: administrator at TAYLORTELEPHONE.COM
Valid starting Expires Service principal
10/15/12 13:22:48 10/15/12 23:24:26
krbtgt/TAYLORTELEPHONE.COM at TAYLORTELEPHONE.COM
renew until 10/16/12 13:22:48, Etype (skey, tkt): arcfour-hmac,
arcfour-hmac
[root at dc3 samba-master]#
More information about the samba-technical
mailing list