[Pkg-samba-maint] Bug#590791: winbind: Secure DNS update failed
Alexander R. Fahrutdinov
alex_mgsm at mail.ru
Thu Jul 29 08:09:31 UTC 2010
Subject: winbind: Secure DNS update failed
Package: winbind
Version: 2:3.5.4~dfsg-1
Severity: normal
When I try to create/update a DNS record in Windows 2003 AD environment, net
utility fails.
"net ads join -U admin at DOMAIN.LOCAL" command joins PC to domain sucsessfully,
but reports "DNS update failed!" and isn't create DNS record.
"net ads dns register -P" and "net ads dns register -U admin" also fails with
same message.
It seens some encryption methons has broken in Kerveros v1.8, so user "Khaled"
wrote in samba mail list:
>>I've run into a problem regarding the DNS update while joining a
>>domain. The joining of the domain worked but the domain update
>>(enabled with --with-dnsupdate) did not. I could solve the issue by
>>compiling Samba with older Kerberos libs (1.6.3). I know that Kerberos
>>1.8 disables DES by default and I can re-enable it
>>allow_weak_crypto=true, however that did not work. I'd like to be able
>>to use the standard krb5 libs however and thus my question: does
>>anyone have any experience on what to do in this case?
http://marc.info/?l=samba&m=127858039825277&w=2
I attach the debug ouput of "net ads dns register -P" to this message
-- System Information:
Debian Release: squeeze/sid
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.31-ustas (SMP w/2 CPU cores)
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages winbind depends on:
ii adduser 3.111 add and remove users and groups
ii libc6 2.11.1-2 Embedded GNU C Library: Shared
lib
ii libcap2 1:2.17-1 support for getting/setting
POSIX.
ii libcomerr2 1.41.11-1 common error description library
ii libgssapi-krb5-2 1.8.1+dfsg-5 MIT Kerberos runtime libraries -
k
ii libk5crypto3 1.8.1+dfsg-5 MIT Kerberos runtime libraries -
C
ii libkrb5-3 1.8.1+dfsg-5 MIT Kerberos runtime libraries
ii libldap-2.4-2 2.4.23-2 OpenLDAP libraries
ii libpam0g 1.1.1-3 Pluggable Authentication Modules
l
ii libpopt0 1.16-1 lib for parsing cmdline
parameters
ii libtalloc2 2.0.3~git20100517-1 hierarchical pool based memory
all
ii libwbclient0 2:3.5.4~dfsg-1 Samba winbind client library
ii lsb-base 3.2-23 Linux Standard Base 3.2 init
scrip
ii samba-common 2:3.5.4~dfsg-1 common files used by both the Samb
ii zlib1g 1:1.2.3.3.dfsg-15 compression library - runtime
winbind recommends no packages.
winbind suggests no packages.
-------------- next part --------------
[2010/07/29 11:04:36, 5] lib/debug.c:407(debug_dump_status)
INFO: Current debug levels:
all: True/10
tdb: False/0
printdrivers: False/0
lanman: False/0
smb: False/0
rpc_parse: False/0
rpc_srv: False/0
rpc_cli: False/0
passdb: False/0
sam: False/0
auth: False/0
winbind: False/0
vfs: False/0
idmap: False/0
quota: False/0
acls: False/0
locking: False/0
msdfs: False/0
dmapi: False/0
registry: False/0
[2010/07/29 11:04:36, 3] param/loadparm.c:9039(lp_load_ex)
lp_load_ex: refreshing parameters
[2010/07/29 11:04:36, 3] param/loadparm.c:4848(init_globals)
Initialising global parameters
[2010/07/29 11:04:36, 2] param/loadparm.c:4707(max_open_files)
rlimit_max: rlimit_max (1024) below minimum Windows limit (16384)
[2010/07/29 11:04:36, 3] ../lib/util/params.c:550(pm_process)
params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
[2010/07/29 11:04:36, 3] param/loadparm.c:7726(do_section)
Processing section "[global]"
doing parameter template homedir = /home/%D/%U
doing parameter template shell = /bin/bash
doing parameter netbios name = STR-IT-03
[2010/07/29 11:04:36, 4] param/loadparm.c:7088(handle_netbios_name)
handle_netbios_name: set global_myname to: STR-IT-03
doing parameter workgroup = STRDOMAIN
doing parameter realm = STRDOMAIN.LOCAL
doing parameter security = ads
doing parameter auth methods = winbind
doing parameter syslog = 0
doing parameter log file = /var/log/samba/log.%m
doing parameter max log size = 1000
doing parameter preferred master = No
doing parameter panic action = /usr/share/samba/panic-action %d
doing parameter idmap uid = 10000-20000
doing parameter idmap gid = 10000-20000
doing parameter winbind separator = +
doing parameter winbind enum users = Yes
doing parameter winbind enum groups = Yes
doing parameter winbind use default domain = Yes
doing parameter winbind offline logon = yes
doing parameter winbind refresh tickets = yes
doing parameter path = /var/spool/samba
doing parameter debug level = 2
doing parameter unix extensions = No
[2010/07/29 11:04:36, 4] param/loadparm.c:9074(lp_load_ex)
pm_process() returned Yes
[2010/07/29 11:04:36, 7] param/loadparm.c:9279(lp_servicenumber)
lp_servicenumber: couldn't find homes
[2010/07/29 11:04:36, 10] param/loadparm.c:8287(set_server_role)
set_server_role: role = ROLE_DOMAIN_MEMBER
[2010/07/29 11:04:36, 5] lib/iconv.c:104(smb_register_charset)
Attempting to register new charset UCS-2LE
[2010/07/29 11:04:36, 5] lib/iconv.c:112(smb_register_charset)
Registered charset UCS-2LE
[2010/07/29 11:04:36, 5] lib/iconv.c:104(smb_register_charset)
Attempting to register new charset UTF-16LE
[2010/07/29 11:04:36, 5] lib/iconv.c:112(smb_register_charset)
Registered charset UTF-16LE
[2010/07/29 11:04:36, 5] lib/iconv.c:104(smb_register_charset)
Attempting to register new charset UCS-2BE
[2010/07/29 11:04:36, 5] lib/iconv.c:112(smb_register_charset)
Registered charset UCS-2BE
[2010/07/29 11:04:36, 5] lib/iconv.c:104(smb_register_charset)
Attempting to register new charset UTF-16BE
[2010/07/29 11:04:36, 5] lib/iconv.c:112(smb_register_charset)
Registered charset UTF-16BE
[2010/07/29 11:04:36, 5] lib/iconv.c:104(smb_register_charset)
Attempting to register new charset UTF8
[2010/07/29 11:04:36, 5] lib/iconv.c:112(smb_register_charset)
Registered charset UTF8
[2010/07/29 11:04:36, 5] lib/iconv.c:104(smb_register_charset)
Attempting to register new charset UTF-8
[2010/07/29 11:04:36, 5] lib/iconv.c:112(smb_register_charset)
Registered charset UTF-8
[2010/07/29 11:04:36, 5] lib/iconv.c:104(smb_register_charset)
Attempting to register new charset ASCII
[2010/07/29 11:04:36, 5] lib/iconv.c:112(smb_register_charset)
Registered charset ASCII
[2010/07/29 11:04:36, 5] lib/iconv.c:104(smb_register_charset)
Attempting to register new charset 646
[2010/07/29 11:04:36, 5] lib/iconv.c:112(smb_register_charset)
Registered charset 646
[2010/07/29 11:04:36, 5] lib/iconv.c:104(smb_register_charset)
Attempting to register new charset ISO-8859-1
[2010/07/29 11:04:36, 5] lib/iconv.c:112(smb_register_charset)
Registered charset ISO-8859-1
[2010/07/29 11:04:36, 5] lib/iconv.c:104(smb_register_charset)
Attempting to register new charset UCS2-HEX
[2010/07/29 11:04:36, 5] lib/iconv.c:112(smb_register_charset)
Registered charset UCS2-HEX
[2010/07/29 11:04:36, 5] lib/charcnv.c:82(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2010/07/29 11:04:36, 5] lib/charcnv.c:82(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2010/07/29 11:04:36, 5] lib/charcnv.c:82(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2010/07/29 11:04:36, 5] lib/charcnv.c:82(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2010/07/29 11:04:36, 5] lib/charcnv.c:82(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2010/07/29 11:04:36, 5] lib/charcnv.c:82(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2010/07/29 11:04:36, 5] lib/charcnv.c:82(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2010/07/29 11:04:36, 5] lib/charcnv.c:82(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2010/07/29 11:04:36, 5] lib/charcnv.c:82(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2010/07/29 11:04:36, 5] lib/charcnv.c:82(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2010/07/29 11:04:36, 5] lib/charcnv.c:82(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2010/07/29 11:04:36, 5] lib/charcnv.c:82(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2010/07/29 11:04:36, 5] lib/charcnv.c:82(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2010/07/29 11:04:36, 5] lib/charcnv.c:82(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2010/07/29 11:04:36, 5] lib/util.c:266(init_names)
Netbios name list:-
my_netbios_names[0]="STR-IT-03"
[2010/07/29 11:04:36, 2] lib/interface.c:340(add_interface)
added interface virsw ip=fe80::222:15ff:fe05:bd49%virsw bcast=fe80::ffff:ffff:ffff:ffff%virsw netmask=ffff:ffff:ffff:ffff::
[2010/07/29 11:04:36, 2] lib/interface.c:340(add_interface)
added interface virsw ip=192.168.33.64 bcast=192.168.33.255 netmask=255.255.255.0
[2010/07/29 11:04:36, 6] libads/ldap.c:346(ads_find_dc)
ads_find_dc: (ldap) looking for realm 'STRDOMAIN.LOCAL'
[2010/07/29 11:04:36, 5] lib/gencache.c:61(gencache_init)
Opening cache file at /var/run/samba/gencache.tdb
[2010/07/29 11:04:36, 10] lib/gencache.c:208(gencache_get)
Returning valid cache entry: key = AD_SITENAME/DOMAIN/STRDOMAIN.LOCAL, value = Default-First-Site, timeout = Tue Jan 19 06:14:07 2038
[2010/07/29 11:04:36, 5] libads/dns.c:817(sitename_fetch)
sitename_fetch: Returning sitename for STRDOMAIN.LOCAL: "Default-First-Site"
[2010/07/29 11:04:36, 4] libsmb/namequery_dc.c:73(ads_dc_name)
ads_dc_name: domain=STRDOMAIN
[2010/07/29 11:04:36, 10] lib/gencache.c:208(gencache_get)
Returning valid cache entry: key = AD_SITENAME/DOMAIN/STRDOMAIN.LOCAL, value = Default-First-Site, timeout = Tue Jan 19 06:14:07 2038
[2010/07/29 11:04:36, 5] libads/dns.c:817(sitename_fetch)
sitename_fetch: Returning sitename for STRDOMAIN.LOCAL: "Default-First-Site"
[2010/07/29 11:04:36, 6] libads/ldap.c:366(ads_find_dc)
ads_find_dc: (cldap) looking for realm 'STRDOMAIN.LOCAL'
[2010/07/29 11:04:36, 8] libsmb/namequery.c:2156(get_sorted_dc_list)
get_sorted_dc_list: attempting lookup for name STRDOMAIN.LOCAL (sitename Default-First-Site) using [ads]
[2010/07/29 11:04:36, 10] lib/gencache.c:194(gencache_get)
Cache entry with key = SAFJOIN/DOMAIN/STRDOMAIN.LOCAL couldn't be found
[2010/07/29 11:04:36, 10] lib/gencache.c:208(gencache_get)
Returning valid cache entry: key = SAF/DOMAIN/STRDOMAIN.LOCAL, value = domain.strdomain.local, timeout = Thu Jul 29 11:19:22 2010
[2010/07/29 11:04:36, 5] libsmb/namequery.c:200(saf_fetch)
saf_fetch: Returning "domain.strdomain.local" for "STRDOMAIN.LOCAL" domain
[2010/07/29 11:04:36, 3] libsmb/namequery.c:1972(get_dc_list)
get_dc_list: preferred server list: "domain.strdomain.local, *"
[2010/07/29 11:04:36, 10] libsmb/namequery.c:1506(internal_resolve_name)
internal_resolve_name: looking up STRDOMAIN.LOCAL#1c (sitename Default-First-Site)
[2010/07/29 11:04:36, 10] lib/gencache.c:208(gencache_get)
Returning valid cache entry: key = NBT/STRDOMAIN.LOCAL#1C, value = 192.168.33.2:389,192.168.33.4:389, timeout = Thu Jul 29 11:15:22 2010
[2010/07/29 11:04:36, 5] libsmb/namecache.c:212(namecache_fetch)
name STRDOMAIN.LOCAL#1C found.
[2010/07/29 11:04:36, 8] libsmb/namequery.c:1993(get_dc_list)
Adding 2 DC's from auto lookup
[2010/07/29 11:04:36, 10] lib/gencache.c:208(gencache_get)
Returning valid cache entry: key = AD_SITENAME/DOMAIN/STRDOMAIN.LOCAL, value = Default-First-Site, timeout = Tue Jan 19 06:14:07 2038
[2010/07/29 11:04:36, 5] libads/dns.c:817(sitename_fetch)
sitename_fetch: Returning sitename for STRDOMAIN.LOCAL: "Default-First-Site"
[2010/07/29 11:04:36, 10] libsmb/namequery.c:1506(internal_resolve_name)
internal_resolve_name: looking up domain.strdomain.local#20 (sitename Default-First-Site)
[2010/07/29 11:04:36, 10] lib/gencache.c:194(gencache_get)
Cache entry with key = NBT/DOMAIN.STRDOMAIN.LOCAL#20 couldn't be found
[2010/07/29 11:04:36, 5] libsmb/namecache.c:208(namecache_fetch)
no entry for domain.strdomain.local#20 found.
[2010/07/29 11:04:36, 3] libsmb/namequery.c:1225(resolve_lmhosts)
resolve_lmhosts: Attempting lmhosts lookup for name domain.strdomain.local<0x20>
[2010/07/29 11:04:36, 4] libsmb/namequery.c:839(startlmhosts)
startlmhosts: Can't open lmhosts file /etc/samba/lmhosts. Error was ??? ?????? ????? ??? ????????
[2010/07/29 11:04:36, 3] libsmb/namequery.c:1089(resolve_wins)
resolve_wins: Attempting wins lookup for name domain.strdomain.local<0x20>
[2010/07/29 11:04:36, 3] libsmb/namequery.c:1093(resolve_wins)
resolve_wins: WINS server resolution selected and no WINS servers listed.
[2010/07/29 11:04:36, 3] libsmb/namequery.c:1307(resolve_hosts)
resolve_hosts: Attempting host lookup for name domain.strdomain.local<0x20>
[2010/07/29 11:04:36, 10] libsmb/namequery.c:583(remove_duplicate_addrs2)
remove_duplicate_addrs2: looking for duplicate address/port pairs
[2010/07/29 11:04:36, 5] libsmb/namecache.c:122(namecache_store)
namecache_store: storing 1 address for domain.strdomain.local#20: 192.168.33.2
[2010/07/29 11:04:36, 10] lib/gencache.c:131(gencache_set)
Adding cache entry with key = NBT/DOMAIN.STRDOMAIN.LOCAL#20; value = 192.168.33.2:0 and timeout = Thu Jul 29 11:15:36 2010
(660 seconds ahead)
[2010/07/29 11:04:36, 10] libsmb/namequery.c:1653(internal_resolve_name)
internal_resolve_name: returning 1 addresses: 192.168.33.2:0
[2010/07/29 11:04:36, 10] lib/gencache.c:194(gencache_get)
Cache entry with key = NEG_CONN_CACHE/STRDOMAIN.LOCAL,192.168.33.2 couldn't be found
[2010/07/29 11:04:36, 9] libsmb/conncache.c:150(check_negative_conn_cache)
check_negative_conn_cache returning result 0 for domain STRDOMAIN.LOCAL server 192.168.33.2
[2010/07/29 11:04:36, 10] lib/gencache.c:194(gencache_get)
Cache entry with key = NEG_CONN_CACHE/STRDOMAIN.LOCAL,192.168.33.2 couldn't be found
[2010/07/29 11:04:36, 9] libsmb/conncache.c:150(check_negative_conn_cache)
check_negative_conn_cache returning result 0 for domain STRDOMAIN.LOCAL server 192.168.33.2
[2010/07/29 11:04:36, 10] lib/gencache.c:194(gencache_get)
Cache entry with key = NEG_CONN_CACHE/STRDOMAIN.LOCAL,192.168.33.4 couldn't be found
[2010/07/29 11:04:36, 9] libsmb/conncache.c:150(check_negative_conn_cache)
check_negative_conn_cache returning result 0 for domain STRDOMAIN.LOCAL server 192.168.33.4
[2010/07/29 11:04:36, 10] libsmb/namequery.c:583(remove_duplicate_addrs2)
remove_duplicate_addrs2: looking for duplicate address/port pairs
[2010/07/29 11:04:36, 4] libsmb/namequery.c:2105(get_dc_list)
get_dc_list: returning 2 ip addresses in an ordered list
[2010/07/29 11:04:36, 4] libsmb/namequery.c:2106(get_dc_list)
get_dc_list: 192.168.33.2:389 192.168.33.4:389
[2010/07/29 11:04:36, 10] lib/gencache.c:194(gencache_get)
Cache entry with key = NEG_CONN_CACHE/STRDOMAIN.LOCAL,192.168.33.2 couldn't be found
[2010/07/29 11:04:36, 9] libsmb/conncache.c:150(check_negative_conn_cache)
check_negative_conn_cache returning result 0 for domain STRDOMAIN.LOCAL server 192.168.33.2
[2010/07/29 11:04:36, 5] libads/ldap.c:203(ads_try_connect)
ads_try_connect: sending CLDAP request to 192.168.33.2 (realm: STRDOMAIN.LOCAL)
[2010/07/29 11:04:36, 10] libads/dns.c:778(sitename_store)
sitename_store: realm = [STRDOMAIN], sitename = [Default-First-Site], expire = [2147483647]
[2010/07/29 11:04:36, 10] lib/gencache.c:131(gencache_set)
Adding cache entry with key = AD_SITENAME/DOMAIN/STRDOMAIN; value = Default-First-Site and timeout = Tue Jan 19 06:14:07 2038
(867096571 seconds ahead)
[2010/07/29 11:04:36, 10] libads/dns.c:778(sitename_store)
sitename_store: realm = [strdomain.local], sitename = [Default-First-Site], expire = [2147483647]
[2010/07/29 11:04:36, 10] lib/gencache.c:131(gencache_set)
Adding cache entry with key = AD_SITENAME/DOMAIN/STRDOMAIN.LOCAL; value = Default-First-Site and timeout = Tue Jan 19 06:14:07 2038
(867096571 seconds ahead)
[2010/07/29 11:04:36, 3] libads/ldap.c:621(ads_connect)
Successfully contacted LDAP server 192.168.33.2
[2010/07/29 11:04:36, 10] lib/gencache.c:208(gencache_get)
Returning valid cache entry: key = AD_SITENAME/DOMAIN/STRDOMAIN.LOCAL, value = Default-First-Site, timeout = Tue Jan 19 06:14:07 2038
[2010/07/29 11:04:36, 5] libads/dns.c:817(sitename_fetch)
sitename_fetch: Returning sitename for STRDOMAIN.LOCAL: "Default-First-Site"
[2010/07/29 11:04:36, 10] libads/ldap.c:165(ads_closest_dc)
ads_closest_dc: NBT_SERVER_CLOSEST flag set
[2010/07/29 11:04:36, 10] libads/kerberos.c:853(create_local_private_krb5_conf_for_domain)
create_local_private_krb5_conf_for_domain: fname = /var/run/samba/smb_krb5/krb5.conf.STRDOMAIN, realm = STRDOMAIN.LOCAL, domain = STRDOMAIN
[2010/07/29 11:04:36, 10] lib/gencache.c:194(gencache_get)
Cache entry with key = SAFJOIN/DOMAIN/STRDOMAIN.LOCAL couldn't be found
[2010/07/29 11:04:36, 10] lib/gencache.c:208(gencache_get)
Returning valid cache entry: key = SAF/DOMAIN/STRDOMAIN.LOCAL, value = domain.strdomain.local, timeout = Thu Jul 29 11:19:22 2010
[2010/07/29 11:04:36, 5] libsmb/namequery.c:200(saf_fetch)
saf_fetch: Returning "domain.strdomain.local" for "STRDOMAIN.LOCAL" domain
[2010/07/29 11:04:36, 3] libsmb/namequery.c:1972(get_dc_list)
get_dc_list: preferred server list: "domain.strdomain.local, *"
[2010/07/29 11:04:36, 10] libsmb/namequery.c:1506(internal_resolve_name)
internal_resolve_name: looking up STRDOMAIN.LOCAL#1c (sitename Default-First-Site)
[2010/07/29 11:04:36, 10] lib/gencache.c:208(gencache_get)
Returning valid cache entry: key = NBT/STRDOMAIN.LOCAL#1C, value = 192.168.33.2:389,192.168.33.4:389, timeout = Thu Jul 29 11:15:22 2010
[2010/07/29 11:04:36, 5] libsmb/namecache.c:212(namecache_fetch)
name STRDOMAIN.LOCAL#1C found.
[2010/07/29 11:04:36, 8] libsmb/namequery.c:1993(get_dc_list)
Adding 2 DC's from auto lookup
[2010/07/29 11:04:36, 10] lib/gencache.c:208(gencache_get)
Returning valid cache entry: key = AD_SITENAME/DOMAIN/STRDOMAIN.LOCAL, value = Default-First-Site, timeout = Tue Jan 19 06:14:07 2038
[2010/07/29 11:04:36, 5] libads/dns.c:817(sitename_fetch)
sitename_fetch: Returning sitename for STRDOMAIN.LOCAL: "Default-First-Site"
[2010/07/29 11:04:36, 10] libsmb/namequery.c:1506(internal_resolve_name)
internal_resolve_name: looking up domain.strdomain.local#20 (sitename Default-First-Site)
[2010/07/29 11:04:36, 10] lib/gencache.c:208(gencache_get)
Returning valid cache entry: key = NBT/DOMAIN.STRDOMAIN.LOCAL#20, value = 192.168.33.2:0, timeout = Thu Jul 29 11:15:36 2010
[2010/07/29 11:04:36, 5] libsmb/namecache.c:212(namecache_fetch)
name domain.strdomain.local#20 found.
[2010/07/29 11:04:36, 10] lib/gencache.c:194(gencache_get)
Cache entry with key = NEG_CONN_CACHE/STRDOMAIN.LOCAL,192.168.33.2 couldn't be found
[2010/07/29 11:04:36, 9] libsmb/conncache.c:150(check_negative_conn_cache)
check_negative_conn_cache returning result 0 for domain STRDOMAIN.LOCAL server 192.168.33.2
[2010/07/29 11:04:36, 10] lib/gencache.c:194(gencache_get)
Cache entry with key = NEG_CONN_CACHE/STRDOMAIN.LOCAL,192.168.33.2 couldn't be found
[2010/07/29 11:04:36, 9] libsmb/conncache.c:150(check_negative_conn_cache)
check_negative_conn_cache returning result 0 for domain STRDOMAIN.LOCAL server 192.168.33.2
[2010/07/29 11:04:36, 10] lib/gencache.c:194(gencache_get)
Cache entry with key = NEG_CONN_CACHE/STRDOMAIN.LOCAL,192.168.33.4 couldn't be found
[2010/07/29 11:04:36, 9] libsmb/conncache.c:150(check_negative_conn_cache)
check_negative_conn_cache returning result 0 for domain STRDOMAIN.LOCAL server 192.168.33.4
[2010/07/29 11:04:36, 10] libsmb/namequery.c:583(remove_duplicate_addrs2)
remove_duplicate_addrs2: looking for duplicate address/port pairs
[2010/07/29 11:04:36, 4] libsmb/namequery.c:2105(get_dc_list)
get_dc_list: returning 2 ip addresses in an ordered list
[2010/07/29 11:04:36, 4] libsmb/namequery.c:2106(get_dc_list)
get_dc_list: 192.168.33.2:389 192.168.33.4:389
[2010/07/29 11:04:36, 10] lib/gencache.c:194(gencache_get)
Cache entry with key = SAFJOIN/DOMAIN/STRDOMAIN.LOCAL couldn't be found
[2010/07/29 11:04:36, 10] lib/gencache.c:208(gencache_get)
Returning valid cache entry: key = SAF/DOMAIN/STRDOMAIN.LOCAL, value = domain.strdomain.local, timeout = Thu Jul 29 11:19:22 2010
[2010/07/29 11:04:36, 5] libsmb/namequery.c:200(saf_fetch)
saf_fetch: Returning "domain.strdomain.local" for "STRDOMAIN.LOCAL" domain
[2010/07/29 11:04:36, 3] libsmb/namequery.c:1972(get_dc_list)
get_dc_list: preferred server list: "domain.strdomain.local, *"
[2010/07/29 11:04:36, 10] libsmb/namequery.c:1506(internal_resolve_name)
internal_resolve_name: looking up STRDOMAIN.LOCAL#1c (sitename (null))
[2010/07/29 11:04:36, 10] lib/gencache.c:208(gencache_get)
Returning valid cache entry: key = NBT/STRDOMAIN.LOCAL#1C, value = 192.168.33.2:389,192.168.33.4:389, timeout = Thu Jul 29 11:15:22 2010
[2010/07/29 11:04:36, 5] libsmb/namecache.c:212(namecache_fetch)
name STRDOMAIN.LOCAL#1C found.
[2010/07/29 11:04:36, 8] libsmb/namequery.c:1993(get_dc_list)
Adding 2 DC's from auto lookup
[2010/07/29 11:04:36, 10] lib/gencache.c:208(gencache_get)
Returning valid cache entry: key = AD_SITENAME/DOMAIN/STRDOMAIN.LOCAL, value = Default-First-Site, timeout = Tue Jan 19 06:14:07 2038
[2010/07/29 11:04:36, 5] libads/dns.c:817(sitename_fetch)
sitename_fetch: Returning sitename for STRDOMAIN.LOCAL: "Default-First-Site"
[2010/07/29 11:04:36, 10] libsmb/namequery.c:1506(internal_resolve_name)
internal_resolve_name: looking up domain.strdomain.local#20 (sitename Default-First-Site)
[2010/07/29 11:04:36, 10] lib/gencache.c:208(gencache_get)
Returning valid cache entry: key = NBT/DOMAIN.STRDOMAIN.LOCAL#20, value = 192.168.33.2:0, timeout = Thu Jul 29 11:15:36 2010
[2010/07/29 11:04:36, 5] libsmb/namecache.c:212(namecache_fetch)
name domain.strdomain.local#20 found.
[2010/07/29 11:04:36, 10] lib/gencache.c:194(gencache_get)
Cache entry with key = NEG_CONN_CACHE/STRDOMAIN.LOCAL,192.168.33.2 couldn't be found
[2010/07/29 11:04:36, 9] libsmb/conncache.c:150(check_negative_conn_cache)
check_negative_conn_cache returning result 0 for domain STRDOMAIN.LOCAL server 192.168.33.2
[2010/07/29 11:04:36, 10] lib/gencache.c:194(gencache_get)
Cache entry with key = NEG_CONN_CACHE/STRDOMAIN.LOCAL,192.168.33.2 couldn't be found
[2010/07/29 11:04:36, 9] libsmb/conncache.c:150(check_negative_conn_cache)
check_negative_conn_cache returning result 0 for domain STRDOMAIN.LOCAL server 192.168.33.2
[2010/07/29 11:04:36, 10] lib/gencache.c:194(gencache_get)
Cache entry with key = NEG_CONN_CACHE/STRDOMAIN.LOCAL,192.168.33.4 couldn't be found
[2010/07/29 11:04:36, 9] libsmb/conncache.c:150(check_negative_conn_cache)
check_negative_conn_cache returning result 0 for domain STRDOMAIN.LOCAL server 192.168.33.4
[2010/07/29 11:04:36, 10] libsmb/namequery.c:583(remove_duplicate_addrs2)
remove_duplicate_addrs2: looking for duplicate address/port pairs
[2010/07/29 11:04:36, 4] libsmb/namequery.c:2105(get_dc_list)
get_dc_list: returning 2 ip addresses in an ordered list
[2010/07/29 11:04:36, 4] libsmb/namequery.c:2106(get_dc_list)
get_dc_list: 192.168.33.2:389 192.168.33.4:389
[2010/07/29 11:04:36, 10] libads/kerberos.c:804(get_kdc_ip_string)
get_kdc_ip_string: Returning kdc = 192.168.33.2
kdc = 192.168.33.4
kdc = 192.168.33.4
[2010/07/29 11:04:36, 5] libads/kerberos.c:921(create_local_private_krb5_conf_for_domain)
create_local_private_krb5_conf_for_domain: wrote file /var/run/samba/smb_krb5/krb5.conf.STRDOMAIN with realm STRDOMAIN.LOCAL KDC list = kdc = 192.168.33.2
kdc = 192.168.33.4
kdc = 192.168.33.4
[2010/07/29 11:04:36, 4] libsmb/namequery_dc.c:143(ads_dc_name)
ads_dc_name: using server='DOMAIN.STRDOMAIN.LOCAL' IP=192.168.33.2
[2010/07/29 11:04:36, 5] libads/ldap.c:203(ads_try_connect)
ads_try_connect: sending CLDAP request to DOMAIN.STRDOMAIN.LOCAL (realm: STRDOMAIN.LOCAL)
[2010/07/29 11:04:36, 10] libads/dns.c:778(sitename_store)
sitename_store: realm = [STRDOMAIN], sitename = [Default-First-Site], expire = [2147483647]
[2010/07/29 11:04:36, 10] lib/gencache.c:131(gencache_set)
Adding cache entry with key = AD_SITENAME/DOMAIN/STRDOMAIN; value = Default-First-Site and timeout = Tue Jan 19 06:14:07 2038
(867096571 seconds ahead)
[2010/07/29 11:04:36, 10] libads/dns.c:778(sitename_store)
sitename_store: realm = [strdomain.local], sitename = [Default-First-Site], expire = [2147483647]
[2010/07/29 11:04:36, 10] lib/gencache.c:131(gencache_set)
Adding cache entry with key = AD_SITENAME/DOMAIN/STRDOMAIN.LOCAL; value = Default-First-Site and timeout = Tue Jan 19 06:14:07 2038
(867096571 seconds ahead)
[2010/07/29 11:04:36, 3] libads/ldap.c:621(ads_connect)
Successfully contacted LDAP server 192.168.33.2
[2010/07/29 11:04:36, 10] libads/ldap.c:62(ldap_open_with_timeout)
Opening connection to LDAP server 'domain.strdomain.local:389', timeout 15 seconds
[2010/07/29 11:04:36, 10] libads/ldap.c:76(ldap_open_with_timeout)
Connected to LDAP server 'domain.strdomain.local:389'
[2010/07/29 11:04:36, 3] libads/ldap.c:675(ads_connect)
Connected to LDAP server domain.strdomain.local
[2010/07/29 11:04:36, 10] libads/ldap.c:165(ads_closest_dc)
ads_closest_dc: NBT_SERVER_CLOSEST flag set
[2010/07/29 11:04:36, 10] libsmb/namequery.c:86(saf_store)
saf_store: domain = [STRDOMAIN], server = [domain.strdomain.local], expire = [1280387976]
[2010/07/29 11:04:36, 10] lib/gencache.c:131(gencache_set)
Adding cache entry with key = SAF/DOMAIN/STRDOMAIN; value = domain.strdomain.local and timeout = Thu Jul 29 11:19:36 2010
(900 seconds ahead)
[2010/07/29 11:04:36, 10] libsmb/namequery.c:86(saf_store)
saf_store: domain = [STRDOMAIN.LOCAL], server = [domain.strdomain.local], expire = [1280387976]
[2010/07/29 11:04:36, 10] lib/gencache.c:131(gencache_set)
Adding cache entry with key = SAF/DOMAIN/STRDOMAIN.LOCAL; value = domain.strdomain.local and timeout = Thu Jul 29 11:19:36 2010
(900 seconds ahead)
[2010/07/29 11:04:36, 5] lib/charcnv.c:82(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2010/07/29 11:04:36, 5] lib/charcnv.c:82(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2010/07/29 11:04:36, 5] lib/charcnv.c:82(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2010/07/29 11:04:36, 5] lib/charcnv.c:82(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2010/07/29 11:04:36, 5] lib/charcnv.c:82(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2010/07/29 11:04:36, 5] lib/charcnv.c:82(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2010/07/29 11:04:36, 5] lib/charcnv.c:82(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2010/07/29 11:04:36, 5] lib/charcnv.c:82(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2010/07/29 11:04:36, 5] lib/charcnv.c:82(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2010/07/29 11:04:36, 5] lib/charcnv.c:82(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2010/07/29 11:04:36, 5] lib/charcnv.c:82(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2010/07/29 11:04:36, 5] lib/charcnv.c:82(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2010/07/29 11:04:36, 5] lib/charcnv.c:82(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2010/07/29 11:04:36, 5] lib/charcnv.c:82(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2010/07/29 11:04:36, 4] libads/ldap.c:2849(ads_current_time)
time offset is 0 seconds
[2010/07/29 11:04:36, 4] libads/sasl.c:1112(ads_sasl_bind)
Found SASL mechanism GSS-SPNEGO
[2010/07/29 11:04:36, 3] libads/sasl.c:780(ads_sasl_spnego_bind)
ads_sasl_spnego_bind: got OID=1.2.840.48018.1.2.2
[2010/07/29 11:04:36, 3] libads/sasl.c:780(ads_sasl_spnego_bind)
ads_sasl_spnego_bind: got OID=1.2.840.113554.1.2.2
[2010/07/29 11:04:36, 3] libads/sasl.c:780(ads_sasl_spnego_bind)
ads_sasl_spnego_bind: got OID=1.2.840.113554.1.2.2.3
[2010/07/29 11:04:36, 3] libads/sasl.c:780(ads_sasl_spnego_bind)
ads_sasl_spnego_bind: got OID=1.3.6.1.4.1.311.2.2.10
[2010/07/29 11:04:36, 3] libads/sasl.c:789(ads_sasl_spnego_bind)
ads_sasl_spnego_bind: got server principal name = domain$@STRDOMAIN.LOCAL
[2010/07/29 11:04:36, 3] libsmb/clikrb5.c:687(ads_krb5_mk_req)
ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache found)
[2010/07/29 11:04:36, 10] libads/sasl.c:810(ads_sasl_spnego_bind)
ads_sasl_spnego_krb5_bind failed with: No credentials cache found, calling kinit
[2010/07/29 11:04:36, 10] libads/kerberos.c:188(kerberos_kinit_password_ext)
kerberos_kinit_password: as STR-IT-03$@STRDOMAIN.LOCAL using [MEMORY:net_ads] as ccache and config [/var/run/samba/smb_krb5/krb5.conf.STRDOMAIN]
[2010/07/29 11:04:36, 3] libsmb/clikrb5.c:620(ads_cleanup_expired_creds)
ads_cleanup_expired_creds: Ticket in ccache[MEMORY:net_ads] expiration ???, 29 ??? 2010 21:04:36 MSD
[2010/07/29 11:04:36, 10] libsmb/clikrb5.c:718(ads_krb5_mk_req)
ads_krb5_mk_req: Ticket (domain$@STRDOMAIN.LOCAL) in ccache (MEMORY:net_ads) is valid until: (???, 29 ??? 2010 21:04:36 MSD - 1280423076)
[2010/07/29 11:04:36, 3] libsmb/clikrb5.c:729(ads_krb5_mk_req)
ads_krb5_mk_req: server marked as OK to delegate to, building forwardable TGT
[2010/07/29 11:04:36, 10] libsmb/clikrb5.c:896(get_krb5_smb_session_key)
Got KRB5 session key of length 16
[2010/07/29 11:04:36, 10] libads/ldap.c:165(ads_closest_dc)
ads_closest_dc: NBT_SERVER_CLOSEST flag set
[2010/07/29 11:04:36, 10] lib/util.c:2626(name_to_fqdn)
name_to_fqdn: lookup for STR-IT-03 -> str-it-03.strdomain.local.
[2010/07/29 11:04:36, 2] lib/interface.c:340(add_interface)
added interface virsw ip=fe80::222:15ff:fe05:bd49%virsw bcast=fe80::ffff:ffff:ffff:ffff%virsw netmask=ffff:ffff:ffff:ffff::
[2010/07/29 11:04:36, 2] lib/interface.c:340(add_interface)
added interface virsw ip=192.168.33.64 bcast=192.168.33.255 netmask=255.255.255.0
[2010/07/29 11:04:36, 4] libads/dns.c:620(ads_dns_lookup_ns)
ads_dns_lookup_ns: 2 records returned in the answer section.
[2010/07/29 11:04:37, 10] intl/lang_tdb.c:138(lang_tdb_init)
lang_tdb_init: /usr/share/samba/.msg: No such file or directory
DNS update failed!
[2010/07/29 11:04:37, 2] utils/net.c:779(main)
return code = -1
More information about the Pkg-samba-maint
mailing list