[Samba] s3 connect to s4 ads woes, need guidance..

Aaron E. ssureshot at gmail.com
Wed May 9 07:37:43 MDT 2012 

The problem came right back after I posted that it was fixed after being 
compiled... I've been doing much more troubleshooting trial and error 
with options in smb.conf.. Here is a debug of the machine..

Machine Details Samba4 Domain,, Samba3 Print server, Windows 2008 R2


[2012/05/09 09:18:56,  3] smbd/oplock.c:911(init_oplocks)
   init_oplocks: initializing messages.
[2012/05/09 09:18:56,  3] smbd/oplock_linux.c:223(linux_init_kernel_oplocks)
   Linux kernel oplocks enabled
[2012/05/09 09:18:56,  3] smbd/process.c:1459(process_smb)
   Transaction 0 of length 159 (0 toread)
[2012/05/09 09:18:56,  3] smbd/process.c:1273(switch_message)
   switch message SMBnegprot (pid 1852) conn 0x0
[2012/05/09 09:18:56,  3] smbd/sec_ctx.c:310(set_sec_ctx)
   setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/05/09 09:18:56,  3] smbd/negprot.c:567(reply_negprot)
   Requested protocol [PC NETWORK PROGRAM 1.0]
[2012/05/09 09:18:56,  3] smbd/negprot.c:567(reply_negprot)
   Requested protocol [LANMAN1.0]
[2012/05/09 09:18:56,  3] smbd/negprot.c:567(reply_negprot)
   Requested protocol [Windows for Workgroups 3.1a]
[2012/05/09 09:18:56,  3] smbd/negprot.c:567(reply_negprot)
   Requested protocol [LM1.2X002]
[2012/05/09 09:18:56,  3] smbd/negprot.c:567(reply_negprot)
   Requested protocol [LANMAN2.1]
[2012/05/09 09:18:56,  3] smbd/negprot.c:567(reply_negprot)
   Requested protocol [NT LM 0.12]
[2012/05/09 09:18:56,  3] smbd/negprot.c:567(reply_negprot)
   Requested protocol [SMB 2.002]
[2012/05/09 09:18:56,  3] smbd/negprot.c:567(reply_negprot)
   Requested protocol [SMB 2.???]
[2012/05/09 09:18:56,  3] smbd/negprot.c:387(reply_nt1)
   using SPNEGO
[2012/05/09 09:18:56,  3] smbd/negprot.c:672(reply_negprot)
   Selected protocol NT LM 0.12
[2012/05/09 09:18:56,  3] smbd/process.c:1459(process_smb)
   Transaction 1 of length 1764 (0 toread)
[2012/05/09 09:18:56,  3] smbd/process.c:1273(switch_message)
   switch message SMBsesssetupX (pid 1852) conn 0x0
[2012/05/09 09:18:56,  3] smbd/sec_ctx.c:310(set_sec_ctx)
   setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/05/09 09:18:56,  3] smbd/sesssetup.c:1404(reply_sesssetup_and_X)
   wct=12 flg2=0xc807
[2012/05/09 09:18:56,  3] 
smbd/sesssetup.c:1160(reply_sesssetup_and_X_spnego)
   Doing spnego session setup
[2012/05/09 09:18:56,  3] 
smbd/sesssetup.c:1202(reply_sesssetup_and_X_spnego)
   NativeOS=[] NativeLanMan=[] PrimaryDomain=[]
[2012/05/09 09:18:56,  3] smbd/sesssetup.c:786(reply_spnego_negotiate)
   reply_spnego_negotiate: Got secblob of size 1619
[2012/05/09 09:18:56,  0] 
libads/kerberos_verify.c:72(ads_dedicated_keytab_verify_ticket)
   krb5_rd_req failed (Wrong principal in request)
[2012/05/09 09:18:56,  3] libads/kerberos_verify.c:568(ads_verify_ticket)
   ads_verify_ticket: krb5_rd_req with auth failed (Wrong principal in 
request)
[2012/05/09 09:18:56,  1] smbd/sesssetup.c:342(reply_spnego_kerberos)
   Failed to verify incoming ticket with error NT_STATUS_LOGON_FAILURE!
[2012/05/09 09:18:56,  3] smbd/error.c:60(error_packet_set)
   error packet at smbd/sesssetup.c(344) cmd=115 (SMBsesssetupX) 
NT_STATUS_LOGON_FAILURE
[2012/05/09 09:18:56,  3] smbd/process.c:1459(process_smb)
   Transaction 2 of length 1764 (0 toread)
[2012/05/09 09:18:56,  3] smbd/process.c:1273(switch_message)
   switch message SMBsesssetupX (pid 1852) conn 0x0
[2012/05/09 09:18:56,  3] smbd/process.c:1273(switch_message)
   switch message SMBsesssetupX (pid 1852) conn 0x0
[2012/05/09 09:18:56,  3] smbd/sec_ctx.c:310(set_sec_ctx)
   setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/05/09 09:18:56,  3] smbd/sesssetup.c:1404(reply_sesssetup_and_X)
   wct=12 flg2=0xc807
[2012/05/09 09:18:56,  3] 
smbd/sesssetup.c:1160(reply_sesssetup_and_X_spnego)
   Doing spnego session setup
[2012/05/09 09:18:56,  3] 
smbd/sesssetup.c:1202(reply_sesssetup_and_X_spnego)
   NativeOS=[] NativeLanMan=[] PrimaryDomain=[]
[2012/05/09 09:18:56,  3] smbd/sesssetup.c:786(reply_spnego_negotiate)
   reply_spnego_negotiate: Got secblob of size 1619
[2012/05/09 09:18:56,  0] 
libads/kerberos_verify.c:72(ads_dedicated_keytab_verify_ticket)
   krb5_rd_req failed (Wrong principal in request)
[2012/05/09 09:18:56,  3] libads/kerberos_verify.c:568(ads_verify_ticket)
   ads_verify_ticket: krb5_rd_req with auth failed (Wrong principal in 
request)
[2012/05/09 09:18:56,  1] smbd/sesssetup.c:342(reply_spnego_kerberos)
   Failed to verify incoming ticket with error NT_STATUS_LOGON_FAILURE!
[2012/05/09 09:18:56,  3] smbd/error.c:60(error_packet_set)
   error packet at smbd/sesssetup.c(344) cmd=115 (SMBsesssetupX) 
NT_STATUS_LOGON_FAILURE
[2012/05/09 09:18:56,  3] smbd/process.c:1459(process_smb)
   Transaction 3 of length 1764 (0 toread)
[2012/05/09 09:18:56,  3] smbd/process.c:1273(switch_message)
   switch message SMBsesssetupX (pid 1852) conn 0x0
[2012/05/09 09:18:56,  3] smbd/sec_ctx.c:310(set_sec_ctx)
   setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/05/09 09:18:56,  3] smbd/sesssetup.c:1404(reply_sesssetup_and_X)
   wct=12 flg2=0xc807
[2012/05/09 09:18:56,  3] 
smbd/sesssetup.c:1160(reply_sesssetup_and_X_spnego)
   Doing spnego session setup
[2012/05/09 09:18:56,  3] 
smbd/sesssetup.c:1202(reply_sesssetup_and_X_spnego)
   NativeOS=[] NativeLanMan=[] PrimaryDomain=[]
[2012/05/09 09:18:56,  3] smbd/sesssetup.c:786(reply_spnego_negotiate)
   reply_spnego_negotiate: Got secblob of size 1619
[2012/05/09 09:18:56,  0] 
libads/kerberos_verify.c:72(ads_dedicated_keytab_verify_ticket)
   krb5_rd_req failed (Wrong principal in request)
[2012/05/09 09:18:56,  3] libads/kerberos_verify.c:568(ads_verify_ticket)
   ads_verify_ticket: krb5_rd_req with auth failed (Wrong principal in 
request)
[2012/05/09 09:18:56,  1] smbd/sesssetup.c:342(reply_spnego_kerberos)
   Failed to verify incoming ticket with error NT_STATUS_LOGON_FAILURE!
[2012/05/09 09:18:56,  3] smbd/error.c:60(error_packet_set)
   error packet at smbd/sesssetup.c(344) cmd=115 (SMBsesssetupX) 
NT_STATUS_LOGON_FAILURE
[2012/05/09 09:18:56,  3] smbd/process.c:1459(process_smb)
   Transaction 4 of length 1764 (0 toread)
[2012/05/09 09:18:56,  3] smbd/process.c:1273(switch_message)
   switch message SMBsesssetupX (pid 1852) conn 0x0
[2012/05/09 09:18:56,  3] smbd/sec_ctx.c:310(set_sec_ctx)
   setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/05/09 09:18:56,  3] smbd/sesssetup.c:1404(reply_sesssetup_and_X)
   wct=12 flg2=0xc807
[2012/05/09 09:18:56,  3] 
smbd/sesssetup.c:1160(reply_sesssetup_and_X_spnego)
   Doing spnego session setup
[2012/05/09 09:18:56,  3] 
smbd/sesssetup.c:1202(reply_sesssetup_and_X_spnego)
   NativeOS=[] NativeLanMan=[] PrimaryDomain=[]
[2012/05/09 09:18:56,  3] smbd/sesssetup.c:786(reply_spnego_negotiate)
   reply_spnego_negotiate: Got secblob of size 1619
[2012/05/09 09:18:56,  0] 
libads/kerberos_verify.c:72(ads_dedicated_keytab_verify_ticket)
   krb5_rd_req failed (Wrong principal in request)
[2012/05/09 09:18:56,  3] libads/kerberos_verify.c:568(ads_verify_ticket)
   ads_verify_ticket: krb5_rd_req with auth failed (Wrong principal in 
request)
[2012/05/09 09:18:56,  1] smbd/sesssetup.c:342(reply_spnego_kerberos)
   Failed to verify incoming ticket with error NT_STATUS_LOGON_FAILURE!
[2012/05/09 09:18:56,  3] smbd/error.c:60(error_packet_set)
   error packet at smbd/sesssetup.c(344) cmd=115 (SMBsesssetupX) 
NT_STATUS_LOGON_FAILURE
[2012/05/09 09:19:09,  0] lib/util_sock.c:539(read_fd_with_timeout)
[2012/05/09 09:19:09,  0] lib/util_sock.c:1498(get_peer_addr_internal)
   getpeername failed. Error was Transport endpoint is not connected
   read_fd_with_timeout: client 0.0.0.0 read error = Connection reset by 
peer.
[2012/05/09 09:19:09,  3] smbd/sec_ctx.c:310(set_sec_ctx)
   setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/05/09 09:19:09,  3] smbd/connection.c:31(yield_connection)
   Yielding connection to
[2012/05/09 09:19:09,  3] smbd/server.c:849(exit_server_common)
   Server exit (failed to receive smb request)
~ 

~

More information about the samba mailing list