[Samba] Winbind Preauthentication failed
Edson Tadeu Almeida da Silveira
edson.tadeu at gmail.com
Wed Oct 5 11:38:01 UTC 2016
Hi guys!
I started to have the problem above last October, 2th.
I don´t know why and how, because it was saturday. So, my file server
stoped to authenticate against the Samba4 AD.
Today, all shares was stopped and then i restarted my Samba4 AD and the
file server.
All became to work again.
But it im afraid because the problem started by itself.
Thanks!
# MY CRONTAB
17 * * * * root cd / && run-parts --report /etc/cron.hourly
Oct 1 23:17:01 fs1 CRON[22440]: (root) CMD ( cd / && run-parts --report
/etc/cron.hourly)
Oct 1 23:59:01 fs1 CRON[22623]: (root) CMD (/usr/sbin/ntpdate domain.local)
Oct 1 23:59:01 fs1 CRON[22622]: (CRON) info (No MTA installed, discarding
output)
Oct 2 00:17:01 fs1 CRON[22699]: (root) CMD ( cd / && run-parts --report
/etc/cron.hourly)
Oct 2 01:17:01 fs1 CRON[23014]: (root) CMD ( cd / && run-parts --report
/etc/cron.hourly)
Oct 2 02:17:01 fs1 CRON[23230]: (root) CMD ( cd / && run-parts --report
/etc/cron.hourly)
Oct 2 03:17:01 fs1 CRON[23434]: (root) CMD ( cd / && run-parts --report
/etc/cron.hourly)
Oct 2 04:17:01 fs1 CRON[23640]: (root) CMD ( cd / && run-parts --report
/etc/cron.hourly)
Oct 2 05:17:01 fs1 CRON[23847]: (root) CMD ( cd / && run-parts --report
/etc/cron.hourly)
Oct 2 06:17:01 fs1 CRON[24055]: (root) CMD ( cd / && run-parts --report
/etc/cron.hourly)
Oct 2 06:17:01 fs1 winbindd[31235]: [2016/10/02 06:17:01.425284, 0]
../source3/libads/kerberos_util.c:74(ads_kinit_password)
Oct 2 06:17:01 fs1 winbindd[31235]: kerberos_kinit_password
FS1$@DOMAIN.LOCAL failed: Preauthentication failed
Oct 2 06:17:01 fs1 winbindd[31235]: [2016/10/02 06:17:01.549878, 0]
../source3/libads/kerberos_util.c:74(ads_kinit_password)
Oct 2 06:17:01 fs1 winbindd[31235]: kerberos_kinit_password
FS1$@DOMAIN.LOCAL failed: Preauthentication failed
Oct 2 06:41:51 fs1 nmbd[31270]: [2016/10/02 06:41:51.317132, 0]
../source3/nmbd/nmbd.c:169(nmbd_sig_hup_handler)
Oct 2 06:41:51 fs1 nmbd[31270]: Got SIGHUP dumping debug info.
Oct 2 06:41:51 fs1 nmbd[31270]: [2016/10/02 06:41:51.317232, 0]
../source3/nmbd/nmbd_workgroupdb.c:276(dump_workgroups)
Oct 2 06:41:51 fs1 nmbd[31270]: dump_workgroups()
Oct 2 06:41:51 fs1 nmbd[31270]: dump workgroup on subnet 10.40.11.12:
netmask= 255.255.255.0:
Oct 2 06:41:51 fs1 nmbd[31270]: #011DOMAIN(1) current master browser =
UNKNOWN
Oct 2 06:41:51 fs1 nmbd[31270]: #011#011FS1 40809b03 (Samba 4.3.9-Ubuntu)
Oct 2 06:41:51 fs1 winbindd[31235]: [2016/10/02 06:41:51.501186, 0]
../source3/libads/kerberos_util.c:74(ads_kinit_password)
Oct 2 06:41:51 fs1 winbindd[31235]: kerberos_kinit_password
FS1$@DOMAIN.LOCAL failed: Preauthentication failed
Oct 2 06:41:51 fs1 winbindd[31235]: [2016/10/02 06:41:51.624959, 0]
../source3/libads/kerberos_util.c:74(ads_kinit_password)
Oct 2 06:41:51 fs1 winbindd[31235]: kerberos_kinit_password
FS1$@DOMAIN.LOCAL failed: Preauthentication failed
Oct 2 06:41:51 fs1 winbindd[31264]: [2016/10/02 06:41:51.745676, 0]
../source3/libads/kerberos_util.c:74(ads_kinit_password)
Oct 2 06:41:51 fs1 winbindd[31264]: kerberos_kinit_password
FS1$@DOMAIN.LOCAL failed: Preauthentication failed
Oct 2 06:41:51 fs1 winbindd[31264]: [2016/10/02 06:41:51.863067, 0]
../source3/libads/kerberos_util.c:74(ads_kinit_password)
Oct 2 06:41:51 fs1 winbindd[31264]: kerberos_kinit_password
FS1$@DOMAIN.LOCAL failed: Preauthentication failed
Oct 2 06:41:51 fs1 winbindd[31235]: [2016/10/02 06:41:51.991249, 0]
../source3/libads/kerberos_util.c:74(ads_kinit_password)
Oct 2 06:41:51 fs1 winbindd[31235]: kerberos_kinit_password
FS1$@DOMAIN.LOCAL failed: Preauthentication failed
[2016/10/02 06:17:01.425284, 0] ../source3/libads/kerberos_uti
l.c:74(ads_kinit_password) kerberos_kinit_password FS1$@DOMAIN.LOCAL
failed: Preauthentication failed
[2016/10/02 06:17:01.425484, 1] ../source3/winbindd/winbindd_a
ds.c:136(ads_cached_connection_connect)
ads_connect for domain DOMAIN failed: Preauthentication failed
[2016/10/02 06:17:01.549878, 0] ../source3/libads/kerberos_uti
l.c:74(ads_kinit_password) kerberos_kinit_password FS1$@DOMAIN.LOCAL
failed: Preauthentication failed
[2016/10/02 06:17:01.549948, 1] ../source3/winbindd/winbindd_a
ds.c:136(ads_cached_connection_connect)
ads_connect for domain DOMAIN failed: Preauthentication failed
[2016/10/02 06:17:47.007517, 1] ../source3/winbindd/winbindd_u
til.c:351(trustdom_list_done)
Could not receive trustdoms
[2016/10/02 06:22:47.012506, 1] ../source3/winbindd/winbindd_u
til.c:351(trustdom_list_done)
Could not receive trustdoms
[2016/10/02 06:25:01.967159, 0] ../source3/libads/kerberos_uti
l.c:74(ads_kinit_password)
kerberos_kinit_password FS1$@DOMAIN.LOCAL failed: Preauthentication failed
[2016/10/02 06:25:01.967236, 1] ../source3/winbindd/winbindd_a
ds.c:136(ads_cached_connection_connect)
ads_connect for domain DOMAIN failed: Preauthentication failed
[2016/10/02 06:25:02.113909, 0] ../source3/libads/kerberos_uti
l.c:74(ads_kinit_password)
kerberos_kinit_password FS1$@DOMAIN.LOCAL failed: Preauthentication failed
[2016/10/02 06:25:02.113979, 1] ../source3/winbindd/winbindd_a
ds.c:136(ads_cached_connection_connect)
ads_connect for domain DOMAIN failed: Preauthentication failed
[2016/10/02 06:27:47.013260, 1] ../source3/winbindd/winbindd_u
til.c:351(trustdom_list_done)
Could not receive trustdoms
[2016/10/02 06:32:47.017598, 1] ../source3/winbindd/winbindd_u
til.c:351(trustdom_list_done)
Could not receive trustdoms
[2016/10/02 06:37:47.022024, 1] ../source3/winbindd/winbindd_u
til.c:351(trustdom_list_done)
Could not receive trustdoms
[2016/10/02 06:41:51.337537, 1] ../source3/winbindd/winbindd.c
:387(winbindd_sig_hup_handler)
Reloading services after SIGHUP
[2016/10/02 06:41:51.368532, 2] ../source3/param/loadparm.c:32
0(max_open_files)
rlimit_max: increasing rlimit_max (270) to minimum Windows limit (16384)
[2016/10/02 06:41:51.369268, 2] ../source3/lib/interface.c:341
(add_interface)
added interface em1 ip=10.40.11.12 bcast=10.40.11.255
netmask=255.255.255.0
[2016/10/02 06:41:51.501186, 0] ../source3/libads/kerberos_uti
l.c:74(ads_kinit_password) kerberos_kinit_password FS1$@DOMAIN.LOCAL
failed: Preauthentication failed
[2016/10/02 06:41:51.501271, 1] ../source3/winbindd/winbindd_a
ds.c:136(ads_cached_connection_connect)
ads_connect for domain DOMAIN failed: Preauthentication failed
# LOG SMB
------------------------------------------------------------
-------------------------------------------------------------------
[2016/10/02 06:10:34.884360, 1] ../source3/librpc/crypto/gse.c
:497(gse_get_server_auth_token)
gss_accept_sec_context failed with [ Miscellaneous failure (see text):
Failed to find cifs/fs1.domain.local at DOMAIN.LOCAL(kvno 2) in keytab
MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
[2016/10/02 06:10:34.884404, 1] ../auth/gensec/spnego.c:541(ge
nsec_spnego_parse_negTokenInit)
SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:10:34.884433, 2] ../auth/gensec/spnego.c:716(ge
nsec_spnego_server_negTokenTarg)
SPNEGO login failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:13:07.177316, 2] ../source3/smbd/server.c:467(r
emove_child_pid)
Could not find child 24041 -- ignoring
[2016/10/02 06:28:07.281158, 2] ../source3/smbd/server.c:467(r
emove_child_pid)
Could not find child 24136 -- ignoring
[2016/10/02 06:38:29.795041, 1] ../source3/librpc/crypto/gse.c
:497(gse_get_server_auth_token)
gss_accept_sec_context failed with [ Miscellaneous failure (see text):
Failed to find cifs/fs1.domain.local at DOMAIN.LOCAL(kvno 2) in keytab
MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
[2016/10/02 06:38:29.795089, 1] ../auth/gensec/spnego.c:541(ge
nsec_spnego_parse_negTokenInit)
SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:38:29.795193, 2] ../auth/gensec/spnego.c:716(ge
nsec_spnego_server_negTokenTarg)
SPNEGO login failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:38:29.894021, 1] ../source3/librpc/crypto/gse.c
:497(gse_get_server_auth_token)
gss_accept_sec_context failed with [ Miscellaneous failure (see text):
Failed to find cifs/fs1.domain.local at DOMAIN.LOCAL(kvno 2) in keytab
MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
[2016/10/02 06:38:29.894060, 1] ../auth/gensec/spnego.c:541(ge
nsec_spnego_parse_negTokenInit)
SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:38:29.894088, 2] ../auth/gensec/spnego.c:716(ge
nsec_spnego_server_negTokenTarg)
SPNEGO login failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:38:29.990723, 1] ../source3/librpc/crypto/gse.c
:497(gse_get_server_auth_token)
gss_accept_sec_context failed with [ Miscellaneous failure (see text):
Failed to find cifs/fs1.domain.local at DOMAIN.LOCAL(kvno 2) in keytab
MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
[2016/10/02 06:38:29.990761, 1] ../auth/gensec/spnego.c:541(ge
nsec_spnego_parse_negTokenInit)
SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:38:29.990788, 2] ../auth/gensec/spnego.c:716(ge
nsec_spnego_server_negTokenTarg)
SPNEGO login failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:38:30.087736, 1] ../source3/librpc/crypto/gse.c
:497(gse_get_server_auth_token)
gss_accept_sec_context failed with [ Miscellaneous failure (see text):
Failed to find cifs/fs1.domain.local at DOMAIN.LOCAL(kvno 2) in keytab
MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
[2016/10/02 06:38:30.087775, 1] ../auth/gensec/spnego.c:541(ge
nsec_spnego_parse_negTokenInit)
SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:38:30.087802, 2] ../auth/gensec/spnego.c:716(ge
nsec_spnego_server_negTokenTarg)
SPNEGO login failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:38:30.183315, 1] ../source3/librpc/crypto/gse.c
:497(gse_get_server_auth_token)
gss_accept_sec_context failed with [ Miscellaneous failure (see text):
Failed to find cifs/fs1.domain.local at DOMAIN.LOCAL(kvno 2) in keytab
MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
[2016/10/02 06:38:30.183353, 1] ../auth/gensec/spnego.c:541(ge
nsec_spnego_parse_negTokenInit)
SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:38:30.183380, 2] ../auth/gensec/spnego.c:716(ge
nsec_spnego_server_negTokenTarg)
SPNEGO login failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:38:30.279186, 1] ../source3/librpc/crypto/gse.c
:497(gse_get_server_auth_token)
gss_accept_sec_context failed with [ Miscellaneous failure (see text):
Failed to find cifs/fs1.domain.local at DOMAIN.LOCAL(kvno 2) in keytab
MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
[2016/10/02 06:38:30.279223, 1] ../auth/gensec/spnego.c:541(ge
nsec_spnego_parse_negTokenInit)
SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:38:30.279248, 2] ../auth/gensec/spnego.c:716(ge
nsec_spnego_server_negTokenTarg)
SPNEGO login failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:38:30.382392, 1] ../source3/librpc/crypto/gse.c
:497(gse_get_server_auth_token)
gss_accept_sec_context failed with [ Miscellaneous failure (see text):
Failed to find cifs/fs1.domain.local at DOMAIN.LOCAL(kvno 2) in keytab
MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
[2016/10/02 06:38:30.382430, 1] ../auth/gensec/spnego.c:541(ge
nsec_spnego_parse_negTokenInit)
SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:38:30.382457, 2] ../auth/gensec/spnego.c:716(ge
nsec_spnego_server_negTokenTarg)
SPNEGO login failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:38:57.125086, 1] ../source3/librpc/crypto/gse.c
:497(gse_get_server_auth_token)
gss_accept_sec_context failed with [ Miscellaneous failure (see text):
Failed to find cifs/fs1.domain.local at DOMAIN.LOCAL(kvno 2) in keytab
MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
[2016/10/02 06:38:57.125127, 1] ../auth/gensec/spnego.c:541(ge
nsec_spnego_parse_negTokenInit)
SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:38:57.125154, 2] ../auth/gensec/spnego.c:716(ge
nsec_spnego_server_negTokenTarg)
SPNEGO login failed: NT_STATUS_LOGON_FAILURE
[2016/10/02 06:41:51.248421, 1] ../source3/smbd/server.c:1065(
smbd_parent_sig_hup_handler)
parent: Reloading services after SIGHUP
--
-------------------------------------------
Edson Tadeu Almeida Silveira
http://sites.google.com/site/edsontadeu/
-------------------------------------------
More information about the samba
mailing list