[Samba] Fwd: Winbind Preauthentication failed

Edson Tadeu Almeida da Silveira edson.tadeu at gmail.com
Tue Oct 4 12:09:39 UTC 2016 

Hi guys!

I started to have the problem above last October, 2th.

I don´t know why and how, because it was saturday. So, my file server
stoped to authenticate against the Samba4 AD.

Today, all shares was stopped and then i restarted my Samba4 AD and the
file server.

All became to work again.

But it im afraid because the problem started by itself.

Thanks!



# MY CRONTAB
17 * * * * root    cd / && run-parts --report /etc/cron.hourly



Oct  1 23:17:01 fs1 CRON[22440]: (root) CMD (   cd / && run-parts --report
/etc/cron.hourly)
Oct  1 23:59:01 fs1 CRON[22623]: (root) CMD (/usr/sbin/ntpdate domain.local)
Oct  1 23:59:01 fs1 CRON[22622]: (CRON) info (No MTA installed, discarding
output)

Oct  2 00:17:01 fs1 CRON[22699]: (root) CMD (   cd / && run-parts --report
/etc/cron.hourly)
Oct  2 01:17:01 fs1 CRON[23014]: (root) CMD (   cd / && run-parts --report
/etc/cron.hourly)
Oct  2 02:17:01 fs1 CRON[23230]: (root) CMD (   cd / && run-parts --report
/etc/cron.hourly)
Oct  2 03:17:01 fs1 CRON[23434]: (root) CMD (   cd / && run-parts --report
/etc/cron.hourly)
Oct  2 04:17:01 fs1 CRON[23640]: (root) CMD (   cd / && run-parts --report
/etc/cron.hourly)
Oct  2 05:17:01 fs1 CRON[23847]: (root) CMD (   cd / && run-parts --report
/etc/cron.hourly)
Oct  2 06:17:01 fs1 CRON[24055]: (root) CMD (   cd / && run-parts --report
/etc/cron.hourly)
Oct  2 06:17:01 fs1 winbindd[31235]: [2016/10/02 06:17:01.425284,  0]
../source3/libads/kerberos_util.c:74(ads_kinit_password)
Oct  2 06:17:01 fs1 winbindd[31235]:   kerberos_kinit_password
FS1$@DOMAIN.LOCAL failed: Preauthentication failed
Oct  2 06:17:01 fs1 winbindd[31235]: [2016/10/02 06:17:01.549878,  0]
../source3/libads/kerberos_util.c:74(ads_kinit_password)
Oct  2 06:17:01 fs1 winbindd[31235]:   kerberos_kinit_password
FS1$@DOMAIN.LOCAL failed: Preauthentication failed

Oct  2 06:41:51 fs1 nmbd[31270]: [2016/10/02 06:41:51.317132,  0]
../source3/nmbd/nmbd.c:169(nmbd_sig_hup_handler)
Oct  2 06:41:51 fs1 nmbd[31270]:   Got SIGHUP dumping debug info.
Oct  2 06:41:51 fs1 nmbd[31270]: [2016/10/02 06:41:51.317232,  0]
../source3/nmbd/nmbd_workgroupdb.c:276(dump_workgroups)
Oct  2 06:41:51 fs1 nmbd[31270]:   dump_workgroups()
Oct  2 06:41:51 fs1 nmbd[31270]:    dump workgroup on subnet     10.40.11.12:
netmask=  255.255.255.0:
Oct  2 06:41:51 fs1 nmbd[31270]:   #011DOMAIN(1) current master browser =
UNKNOWN
Oct  2 06:41:51 fs1 nmbd[31270]:   #011#011FS1 40809b03 (Samba 4.3.9-Ubuntu)

Oct  2 06:41:51 fs1 winbindd[31235]: [2016/10/02 06:41:51.501186,  0]
../source3/libads/kerberos_util.c:74(ads_kinit_password)
Oct  2 06:41:51 fs1 winbindd[31235]:   kerberos_kinit_password
FS1$@DOMAIN.LOCAL failed: Preauthentication failed
Oct  2 06:41:51 fs1 winbindd[31235]: [2016/10/02 06:41:51.624959,  0]
../source3/libads/kerberos_util.c:74(ads_kinit_password)
Oct  2 06:41:51 fs1 winbindd[31235]:   kerberos_kinit_password
FS1$@DOMAIN.LOCAL failed: Preauthentication failed
Oct  2 06:41:51 fs1 winbindd[31264]: [2016/10/02 06:41:51.745676,  0]
../source3/libads/kerberos_util.c:74(ads_kinit_password)
Oct  2 06:41:51 fs1 winbindd[31264]:   kerberos_kinit_password
FS1$@DOMAIN.LOCAL failed: Preauthentication failed
Oct  2 06:41:51 fs1 winbindd[31264]: [2016/10/02 06:41:51.863067,  0]
../source3/libads/kerberos_util.c:74(ads_kinit_password)
Oct  2 06:41:51 fs1 winbindd[31264]:   kerberos_kinit_password
FS1$@DOMAIN.LOCAL failed: Preauthentication failed
Oct  2 06:41:51 fs1 winbindd[31235]: [2016/10/02 06:41:51.991249,  0]
../source3/libads/kerberos_util.c:74(ads_kinit_password)
Oct  2 06:41:51 fs1 winbindd[31235]:   kerberos_kinit_password
FS1$@DOMAIN.LOCAL failed: Preauthentication failed




# LOG WINBIND
------------------------------------------------------------
-------------------------------------------------------------------
[2016/09/29 09:37:46.941460,  1] ../source3/libads/ldap_utils.
c:91(ads_do_search_retry_internal)
  Reducing LDAP page size from 1000 to 500 due to IO_TIMEOUT
[2016/09/29 11:07:58.809921,  1] ../source3/libads/ldap_utils.
c:91(ads_do_search_retry_internal)
  Reducing LDAP page size from 500 to 250 due to IO_TIMEOUT
[2016/09/29 13:32:16.102572,  1] ../source3/libads/ldap_utils.
c:91(ads_do_search_retry_internal)
  Reducing LDAP page size from 250 to 125 due to IO_TIMEOUT
[2016/09/29 17:48:31.384474,  1] ../source3/libads/ldap_utils.
c:91(ads_do_search_retry_internal)
  Reducing LDAP page size from 1000 to 500 due to IO_TIMEOUT
[2016/09/29 18:19:50.717898,  1] ../source3/libads/ldap_utils.
c:91(ads_do_search_retry_internal)
  Reducing LDAP page size from 500 to 250 due to IO_TIMEOUT
[2016/09/29 19:02:39.562569,  1] ../source3/libads/ldap_utils.
c:91(ads_do_search_retry_internal)
  Reducing LDAP page size from 250 to 125 due to IO_TIMEOUT
[2016/09/30 04:17:01.194948,  1] ../source3/libads/ldap_utils.
c:91(ads_do_search_retry_internal)
  Reducing LDAP page size from 1000 to 500 due to IO_TIMEOUT
[2016/09/30 04:35:22.712893,  1] ../source3/libads/ldap_utils.
c:91(ads_do_search_retry_internal)
  Reducing LDAP page size from 500 to 250 due to IO_TIMEOUT
[2016/09/30 05:17:01.351022,  1] ../source3/libads/ldap_utils.
c:91(ads_do_search_retry_internal)
  Reducing LDAP page size from 250 to 125 due to IO_TIMEOUT
[2016/09/30 16:32:34.773008,  1] ../source3/libads/ldap_utils.
c:91(ads_do_search_retry_internal)
  Reducing LDAP page size from 1000 to 500 due to IO_TIMEOUT
[2016/09/30 17:17:01.062177,  1] ../source3/libads/ldap_utils.
c:91(ads_do_search_retry_internal)
  Reducing LDAP page size from 500 to 250 due to IO_TIMEOUT
[2016/09/30 17:45:52.601382,  1] ../source3/libads/ldap_utils.
c:91(ads_do_search_retry_internal)
  Reducing LDAP page size from 250 to 125 due to IO_TIMEOUT
[2016/10/01 00:34:22.898986,  1] ../source3/libads/ldap_utils.
c:91(ads_do_search_retry_internal)
  Reducing LDAP page size from 1000 to 500 due to IO_TIMEOUT
[2016/10/01 01:17:01.218340,  1] ../source3/libads/ldap_utils.
c:91(ads_do_search_retry_internal)
  Reducing LDAP page size from 500 to 250 due to IO_TIMEOUT
[2016/10/01 02:17:01.388614,  1] ../source3/libads/ldap_utils.
c:91(ads_do_search_retry_internal)
  Reducing LDAP page size from 250 to 125 due to IO_TIMEOUT
[2016/10/01 10:56:56.730629,  1] ../source3/libads/ldap_utils.
c:91(ads_do_search_retry_internal)
  Reducing LDAP page size from 1000 to 500 due to IO_TIMEOUT
[2016/10/01 11:56:09.198165,  1] ../source3/libads/ldap_utils.
c:91(ads_do_search_retry_internal)
  Reducing LDAP page size from 500 to 250 due to IO_TIMEOUT
[2016/10/01 12:17:01.331534,  1] ../source3/libads/ldap_utils.
c:91(ads_do_search_retry_internal)
  Reducing LDAP page size from 250 to 125 due to IO_TIMEOUT
[2016/10/01 21:16:39.294603,  1] ../source3/libads/ldap_utils.
c:91(ads_do_search_retry_internal)
  Reducing LDAP page size from 1000 to 500 due to IO_TIMEOUT
[2016/10/01 22:17:01.896529,  1] ../source3/libads/ldap_utils.
c:91(ads_do_search_retry_internal)
  Reducing LDAP page size from 500 to 250 due to IO_TIMEOUT
[2016/10/01 23:00:30.012303,  1] ../source3/libads/ldap_utils.
c:91(ads_do_search_retry_internal)
  Reducing LDAP page size from 250 to 125 due to IO_TIMEOUT
[2016/10/02 06:17:01.425284,  0] ../source3/libads/kerberos_
util.c:74(ads_kinit_password)  kerberos_kinit_password FS1$@DOMAIN.LOCAL
failed: Preauthentication failed
[2016/10/02 06:17:01.425484,  1] ../source3/winbindd/winbindd_
ads.c:136(ads_cached_connection_connect)
  ads_connect for domain DOMAIN failed: Preauthentication failed
[2016/10/02 06:17:01.549878,  0] ../source3/libads/kerberos_
util.c:74(ads_kinit_password)  kerberos_kinit_password FS1$@DOMAIN.LOCAL
failed: Preauthentication failed
[2016/10/02 06:17:01.549948,  1] ../source3/winbindd/winbindd_
ads.c:136(ads_cached_connection_connect)
  ads_connect for domain DOMAIN failed: Preauthentication failed
[2016/10/02 06:17:47.007517,  1] ../source3/winbindd/winbindd_
util.c:351(trustdom_list_done)
  Could not receive trustdoms
[2016/10/02 06:22:47.012506,  1] ../source3/winbindd/winbindd_
util.c:351(trustdom_list_done)
  Could not receive trustdoms
[2016/10/02 06:25:01.967159,  0] ../source3/libads/kerberos_
util.c:74(ads_kinit_password)
  kerberos_kinit_password FS1$@DOMAIN.LOCAL failed: Preauthentication failed
[2016/10/02 06:25:01.967236,  1] ../source3/winbindd/winbindd_
ads.c:136(ads_cached_connection_connect)
  ads_connect for domain DOMAIN failed: Preauthentication failed
[2016/10/02 06:25:02.113909,  0] ../source3/libads/kerberos_
util.c:74(ads_kinit_password)
  kerberos_kinit_password FS1$@DOMAIN.LOCAL failed: Preauthentication failed
[2016/10/02 06:25:02.113979,  1] ../source3/winbindd/winbindd_
ads.c:136(ads_cached_connection_connect)
  ads_connect for domain DOMAIN failed: Preauthentication failed
[2016/10/02 06:27:47.013260,  1] ../source3/winbindd/winbindd_
util.c:351(trustdom_list_done)
  Could not receive trustdoms
[2016/10/02 06:32:47.017598,  1] ../source3/winbindd/winbindd_
util.c:351(trustdom_list_done)
  Could not receive trustdoms
[2016/10/02 06:37:47.022024,  1] ../source3/winbindd/winbindd_
util.c:351(trustdom_list_done)
  Could not receive trustdoms
[2016/10/02 06:41:51.337537,  1] ../source3/winbindd/winbindd.
c:387(winbindd_sig_hup_handler)
  Reloading services after SIGHUP

[2016/10/02 06:41:51.368532,  2] ../source3/param/loadparm.c:
320(max_open_files)
  rlimit_max: increasing rlimit_max (270) to minimum Windows limit (16384)
[2016/10/02 06:41:51.369268,  2] ../source3/lib/interface.c:
341(add_interface)
  added interface em1 ip=10.40.11.12 bcast=10.40.11.255
netmask=255.255.255.0
[2016/10/02 06:41:51.501186,  0] ../source3/libads/kerberos_
util.c:74(ads_kinit_password)  kerberos_kinit_password FS1$@DOMAIN.LOCAL
failed: Preauthentication failed
[2016/10/02 06:41:51.501271,  1] ../source3/winbindd/winbindd_
ads.c:136(ads_cached_connection_connect)
  ads_connect for domain DOMAIN failed: Preauthentication failed


# LOG SMB
------------------------------------------------------------
-------------------------------------------------------------------
[2016/10/02 06:10:34.884360,  1] ../source3/librpc/crypto/gse.
c:497(gse_get_server_auth_token)
  gss_accept_sec_context failed with [ Miscellaneous failure (see text):
Failed to find cifs/fs1.domain.local at DOMAIN.LOCAL(kvno 2) in keytab
MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
[2016/10/02 06:10:34.884404,  1] ../auth/gensec/spnego.c:541(
gensec_spnego_parse_negTokenInit)
  SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:10:34.884433,  2] ../auth/gensec/spnego.c:716(
gensec_spnego_server_negTokenTarg)
  SPNEGO login failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:13:07.177316,  2] ../source3/smbd/server.c:467(
remove_child_pid)
  Could not find child 24041 -- ignoring
[2016/10/02 06:28:07.281158,  2] ../source3/smbd/server.c:467(
remove_child_pid)
  Could not find child 24136 -- ignoring
[2016/10/02 06:38:29.795041,  1] ../source3/librpc/crypto/gse.
c:497(gse_get_server_auth_token)
  gss_accept_sec_context failed with [ Miscellaneous failure (see text):
Failed to find cifs/fs1.domain.local at DOMAIN.LOCAL(kvno 2) in keytab
MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
[2016/10/02 06:38:29.795089,  1] ../auth/gensec/spnego.c:541(
gensec_spnego_parse_negTokenInit)
  SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:38:29.795193,  2] ../auth/gensec/spnego.c:716(
gensec_spnego_server_negTokenTarg)
  SPNEGO login failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:38:29.894021,  1] ../source3/librpc/crypto/gse.
c:497(gse_get_server_auth_token)
  gss_accept_sec_context failed with [ Miscellaneous failure (see text):
Failed to find cifs/fs1.domain.local at DOMAIN.LOCAL(kvno 2) in keytab
MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
[2016/10/02 06:38:29.894060,  1] ../auth/gensec/spnego.c:541(
gensec_spnego_parse_negTokenInit)
  SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:38:29.894088,  2] ../auth/gensec/spnego.c:716(
gensec_spnego_server_negTokenTarg)
  SPNEGO login failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:38:29.990723,  1] ../source3/librpc/crypto/gse.
c:497(gse_get_server_auth_token)
  gss_accept_sec_context failed with [ Miscellaneous failure (see text):
Failed to find cifs/fs1.domain.local at DOMAIN.LOCAL(kvno 2) in keytab
MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
[2016/10/02 06:38:29.990761,  1] ../auth/gensec/spnego.c:541(
gensec_spnego_parse_negTokenInit)
  SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:38:29.990788,  2] ../auth/gensec/spnego.c:716(
gensec_spnego_server_negTokenTarg)
  SPNEGO login failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:38:30.087736,  1] ../source3/librpc/crypto/gse.
c:497(gse_get_server_auth_token)
  gss_accept_sec_context failed with [ Miscellaneous failure (see text):
Failed to find cifs/fs1.domain.local at DOMAIN.LOCAL(kvno 2) in keytab
MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
[2016/10/02 06:38:30.087775,  1] ../auth/gensec/spnego.c:541(
gensec_spnego_parse_negTokenInit)
  SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:38:30.087802,  2] ../auth/gensec/spnego.c:716(
gensec_spnego_server_negTokenTarg)
  SPNEGO login failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:38:30.183315,  1] ../source3/librpc/crypto/gse.
c:497(gse_get_server_auth_token)
  gss_accept_sec_context failed with [ Miscellaneous failure (see text):
Failed to find cifs/fs1.domain.local at DOMAIN.LOCAL(kvno 2) in keytab
MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
[2016/10/02 06:38:30.183353,  1] ../auth/gensec/spnego.c:541(
gensec_spnego_parse_negTokenInit)
  SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:38:30.183380,  2] ../auth/gensec/spnego.c:716(
gensec_spnego_server_negTokenTarg)
  SPNEGO login failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:38:30.279186,  1] ../source3/librpc/crypto/gse.
c:497(gse_get_server_auth_token)
  gss_accept_sec_context failed with [ Miscellaneous failure (see text):
Failed to find cifs/fs1.domain.local at DOMAIN.LOCAL(kvno 2) in keytab
MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
[2016/10/02 06:38:30.279223,  1] ../auth/gensec/spnego.c:541(
gensec_spnego_parse_negTokenInit)
  SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:38:30.279248,  2] ../auth/gensec/spnego.c:716(
gensec_spnego_server_negTokenTarg)
  SPNEGO login failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:38:30.382392,  1] ../source3/librpc/crypto/gse.
c:497(gse_get_server_auth_token)
  gss_accept_sec_context failed with [ Miscellaneous failure (see text):
Failed to find cifs/fs1.domain.local at DOMAIN.LOCAL(kvno 2) in keytab
MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
[2016/10/02 06:38:30.382430,  1] ../auth/gensec/spnego.c:541(
gensec_spnego_parse_negTokenInit)
  SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:38:30.382457,  2] ../auth/gensec/spnego.c:716(
gensec_spnego_server_negTokenTarg)
  SPNEGO login failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:38:57.125086,  1] ../source3/librpc/crypto/gse.
c:497(gse_get_server_auth_token)
  gss_accept_sec_context failed with [ Miscellaneous failure (see text):
Failed to find cifs/fs1.domain.local at DOMAIN.LOCAL(kvno 2) in keytab
MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
[2016/10/02 06:38:57.125127,  1] ../auth/gensec/spnego.c:541(
gensec_spnego_parse_negTokenInit)
  SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:38:57.125154,  2] ../auth/gensec/spnego.c:716(
gensec_spnego_server_negTokenTarg)
  SPNEGO login failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:41:51.248421,  1] ../source3/smbd/server.c:1065(
smbd_parent_sig_hup_handler)
  parent: Reloading services after SIGHUP

-- 

-------------------------------------------
Edson Tadeu Almeida Silveira
http://sites.google.com/site/edsontadeu/
-------------------------------------------

More information about the samba mailing list