[Samba] editing samba-share ACLs etc from Windows
Rowland Penny
rpenny at samba.org
Thu Oct 20 15:06:30 UTC 2022
On 20/10/2022 13:46, Stefan G. Weichinger via samba wrote:
>
> maybe relevant:
>
> logs on the samba server for the IP of the Windows machine:
>
> # tail 192.168.16.207.log
> [2022/10/20 14:19:59.894209, 1]
> ../../auth/gensec/spnego.c:1242(gensec_spnego_server_negTokenInit_step)
> gensec_spnego_server_negTokenInit_step: gse_krb5: parsing
> NEG_TOKEN_INIT content failed (next[(null)]): NT_STATUS_LOGON_FAILURE
> [2022/10/20 14:20:56.501820, 1]
> ../../source3/librpc/crypto/gse.c:695(gse_get_server_auth_token)
> gss_accept_sec_context failed with [ Miscellaneous failure (see
> text): Failed to find cifs/PRE01SVDEB01 at MYDOM.AT(kvno 5) in keytab
> MEMORY:cifs_srv_keytab (aes256-cts-hmac-sha1-96)]
> [2022/10/20 14:20:56.501931, 1]
> ../../auth/gensec/spnego.c:1242(gensec_spnego_server_negTokenInit_step)
> gensec_spnego_server_negTokenInit_step: gse_krb5: parsing
> NEG_TOKEN_INIT content failed (next[(null)]): NT_STATUS_LOGON_FAILURE
> [2022/10/20 14:44:31.760331, 1]
> ../../source3/librpc/crypto/gse.c:695(gse_get_server_auth_token)
> gss_accept_sec_context failed with [ Miscellaneous failure (see
> text): Failed to find cifs/PRE01SVDEB01 at MYDOM.AT(kvno 5) in keytab
> MEMORY:cifs_srv_keytab (aes256-cts-hmac-sha1-96)]
> [2022/10/20 14:44:31.760433, 1]
> ../../auth/gensec/spnego.c:1242(gensec_spnego_server_negTokenInit_step)
> gensec_spnego_server_negTokenInit_step: gse_krb5: parsing
> NEG_TOKEN_INIT content failed (next[(null)]): NT_STATUS_LOGON_FAILURE
>
>
> Kerberos, right?
>
Yes, that appears to be a kerberos problem. It seems to be looking for
an SPN 'cifs/PRE01SVDEB01 at MYDOM.AT' and cannot find it, I do not think
this is your problem.
Rowland
More information about the samba
mailing list