[Samba] Login to AD Member Fail

[basti]

On 27.06.2018 14:12, Rowland Penny via samba wrote:

> Can I also point that if you can only connect by IP, then you probably
> have a DNS issue.
> 
> Rowland
> 

I dont think so.

root at kes-srv-007:/var/log/samba# getent hosts kes-srv-007.kes
192.168.30.19   kes-srv-007.kes
root at kes-srv-007:/var/log/samba# smbclient -U 'KES\user'
\\\\kes-srv-007.kes\\websrv
Enter KES\users's password:
krb5_init_context failed (Invalid argument)
smb_krb5_context_init_basic failed (Invalid argument)
Domain=[KES] OS=[Windows 6.1] Server=[Samba 4.5.12-Debian]
smb: \>

tcpdump before windows error message is shown

root at kes-srv-007:/var/log/samba# tcpdump -ni eth0 port 445 and host
192.168.30.49
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 262144 bytes
14:49:09.561480 IP 192.168.30.49.65405 > 192.168.30.19.445: Flags [SEW],
seq 3407254319, win 8192, options [mss 1460,nop,wscale
8,nop,nop,sackOK], length 0
14:49:09.561542 IP 192.168.30.19.445 > 192.168.30.49.65405: Flags [S.],
seq 1513924791, ack 3407254320, win 29200, options [mss
1460,nop,nop,sackOK,nop,wscale 7], length 0
14:49:09.561799 IP 192.168.30.49.65405 > 192.168.30.19.445: Flags [.],
ack 1, win 513, length 0
14:49:09.561949 IP 192.168.30.49.65405 > 192.168.30.19.445: Flags [P.],
seq 1:160, ack 1, win 513, length 159 SMB PACKET: SMBnegprot (REQUEST)

14:49:09.561985 IP 192.168.30.19.445 > 192.168.30.49.65405: Flags [.],
ack 160, win 237, length 0
14:49:09.668500 IP 192.168.30.19.445 > 192.168.30.49.65405: Flags [P.],
seq 1:229, ack 160, win 237, length 228 SMB-over-TCP packet:(raw data or
continuation?)

14:49:09.668861 IP 192.168.30.49.65405 > 192.168.30.19.445: Flags [P.],
seq 160:272, ack 229, win 512, length 112 SMB-over-TCP packet:(raw data
or continuation?)

14:49:09.668953 IP 192.168.30.19.445 > 192.168.30.49.65405: Flags [.],
ack 272, win 237, length 0
14:49:09.761300 IP 192.168.30.19.445 > 192.168.30.49.65405: Flags [P.],
seq 229:457, ack 272, win 237, length 228 SMB-over-TCP packet:(raw data
or continuation?)

14:49:09.762906 IP 192.168.30.49.65405 > 192.168.30.19.445: Flags [P.],
seq 272:2077, ack 457, win 511, length 1805 SMB-over-TCP packet:(raw
data or continuation?)

14:49:09.762978 IP 192.168.30.19.445 > 192.168.30.49.65405: Flags [.],
ack 2077, win 265, length 0
14:49:09.878633 IP 192.168.30.19.445 > 192.168.30.49.65405: Flags [P.],
seq 457:534, ack 2077, win 265, length 77 SMB-over-TCP packet:(raw data
or continuation?)

14:49:09.879231 IP 192.168.30.49.65405 > 192.168.30.19.445: Flags [R.],
seq 2077, ack 534, win 0, length 0
14:49:09.881160 IP 192.168.30.49.65406 > 192.168.30.19.445: Flags [SEW],
seq 2221000953, win 8192, options [mss 1460,nop,wscale
8,nop,nop,sackOK], length 0
14:49:09.881205 IP 192.168.30.19.445 > 192.168.30.49.65406: Flags [S.],
seq 2677849087, ack 2221000954, win 29200, options [mss
1460,nop,nop,sackOK,nop,wscale 7], length 0
14:49:09.881401 IP 192.168.30.49.65406 > 192.168.30.19.445: Flags [.],
ack 1, win 513, length 0
14:49:09.881442 IP 192.168.30.49.65406 > 192.168.30.19.445: Flags [P.],
seq 1:113, ack 1, win 513, length 112 SMB-over-TCP packet:(raw data or
continuation?)

14:49:09.881453 IP 192.168.30.19.445 > 192.168.30.49.65406: Flags [.],
ack 113, win 229, length 0
14:49:10.056381 IP 192.168.30.19.445 > 192.168.30.49.65406: Flags [P.],
seq 1:229, ack 113, win 229, length 228 SMB-over-TCP packet:(raw data or
continuation?)

14:49:10.057573 IP 192.168.30.49.65406 > 192.168.30.19.445: Flags [P.],
seq 113:1918, ack 229, win 512, length 1805 SMB-over-TCP packet:(raw
data or continuation?)

14:49:10.057646 IP 192.168.30.19.445 > 192.168.30.49.65406: Flags [.],
ack 1918, win 257, length 0
14:49:10.163931 IP 192.168.30.19.445 > 192.168.30.49.65406: Flags [P.],
seq 229:306, ack 1918, win 257, length 77 SMB-over-TCP packet:(raw data
or continuation?)

14:49:10.164936 IP 192.168.30.49.65406 > 192.168.30.19.445: Flags [R.],
seq 1918, ack 306, win 0, length 0