[Samba] editing samba-share ACLs etc from Windows

[Rowland Penny]

On 20/10/2022 13:46, Stefan G. Weichinger via samba wrote:
> 
> maybe relevant:
> 
> logs on the samba server for the IP of the Windows machine:
> 
> # tail 192.168.16.207.log
> [2022/10/20 14:19:59.894209,  1] 
> ../../auth/gensec/spnego.c:1242(gensec_spnego_server_negTokenInit_step)
>    gensec_spnego_server_negTokenInit_step: gse_krb5: parsing 
> NEG_TOKEN_INIT content failed (next[(null)]): NT_STATUS_LOGON_FAILURE
> [2022/10/20 14:20:56.501820,  1] 
> ../../source3/librpc/crypto/gse.c:695(gse_get_server_auth_token)
>    gss_accept_sec_context failed with [ Miscellaneous failure (see 
> text): Failed to find cifs/PRE01SVDEB01 at MYDOM.AT(kvno 5) in keytab 
> MEMORY:cifs_srv_keytab (aes256-cts-hmac-sha1-96)]
> [2022/10/20 14:20:56.501931,  1] 
> ../../auth/gensec/spnego.c:1242(gensec_spnego_server_negTokenInit_step)
>    gensec_spnego_server_negTokenInit_step: gse_krb5: parsing 
> NEG_TOKEN_INIT content failed (next[(null)]): NT_STATUS_LOGON_FAILURE
> [2022/10/20 14:44:31.760331,  1] 
> ../../source3/librpc/crypto/gse.c:695(gse_get_server_auth_token)
>    gss_accept_sec_context failed with [ Miscellaneous failure (see 
> text): Failed to find cifs/PRE01SVDEB01 at MYDOM.AT(kvno 5) in keytab 
> MEMORY:cifs_srv_keytab (aes256-cts-hmac-sha1-96)]
> [2022/10/20 14:44:31.760433,  1] 
> ../../auth/gensec/spnego.c:1242(gensec_spnego_server_negTokenInit_step)
>    gensec_spnego_server_negTokenInit_step: gse_krb5: parsing 
> NEG_TOKEN_INIT content failed (next[(null)]): NT_STATUS_LOGON_FAILURE
> 
> 
> Kerberos, right?
> 

Yes, that appears to be a kerberos problem. It seems to be looking for 
an SPN 'cifs/PRE01SVDEB01 at MYDOM.AT' and cannot find it, I do not think 
this is your problem.

Rowland