INFO: Current debug levels: all: 5 tdb: 5 printdrivers: 5 lanman: 5 smb: 5 rpc_parse: 5 rpc_srv: 5 rpc_cli: 5 passdb: 5 sam: 5 auth: 5 winbind: 5 vfs: 5 idmap: 5 quota: 5 acls: 5 locking: 5 msdfs: 5 dmapi: 5 registry: 5 scavenger: 5 dns: 5 ldb: 5 tevent: 5 auth_audit: 5 auth_json_audit: 5 kerberos: 5 drs_repl: 5 winbindd version 4.7.1 started. Copyright Andrew Tridgell and the Samba Team 1992-2017 lp_load_ex: refreshing parameters Initialising global parameters rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384) INFO: Current debug levels: all: 5 tdb: 5 printdrivers: 5 lanman: 5 smb: 5 rpc_parse: 5 rpc_srv: 5 rpc_cli: 5 passdb: 5 sam: 5 auth: 5 winbind: 5 vfs: 5 idmap: 5 quota: 5 acls: 5 locking: 5 msdfs: 5 dmapi: 5 registry: 5 scavenger: 5 dns: 5 ldb: 5 tevent: 5 auth_audit: 5 auth_json_audit: 5 kerberos: 5 drs_repl: 5 Processing section "[global]" doing parameter netbios name = radius01 doing parameter workgroup = AUTH doing parameter server string = RADIUS server doing parameter security = ads doing parameter invalid users = root doing parameter socket options = TCP_NODELAY doing parameter idmap uid = 16777216-33554431 WARNING: The "idmap uid" option is deprecated doing parameter idmap gid = 16777216-33554431 WARNING: The "idmap gid" option is deprecated doing parameter winbind use default domain = no doing parameter winbind max domain connections = 5 doing parameter winbind max clients = 1000 doing parameter password server = * doing parameter realm = AUTH.CHRJSN.SE pm_process() returned Yes Registering messaging pointer for type 2 - private_data=(nil) Registering messaging pointer for type 9 - private_data=(nil) Registered MSG_REQ_POOL_USAGE Registering messaging pointer for type 11 - private_data=(nil) Registering messaging pointer for type 12 - private_data=(nil) Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED Registering messaging pointer for type 1 - private_data=(nil) Registering messaging pointer for type 5 - private_data=(nil) Registering messaging pointer for type 51 - private_data=(nil) lp_load_ex: refreshing parameters Freeing parametrics: Initialising global parameters rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384) INFO: Current debug levels: all: 5 tdb: 5 printdrivers: 5 lanman: 5 smb: 5 rpc_parse: 5 rpc_srv: 5 rpc_cli: 5 passdb: 5 sam: 5 auth: 5 winbind: 5 vfs: 5 idmap: 5 quota: 5 acls: 5 locking: 5 msdfs: 5 dmapi: 5 registry: 5 scavenger: 5 dns: 5 ldb: 5 tevent: 5 auth_audit: 5 auth_json_audit: 5 kerberos: 5 drs_repl: 5 Processing section "[global]" doing parameter netbios name = radius01 doing parameter workgroup = AUTH doing parameter server string = RADIUS server doing parameter security = ads doing parameter invalid users = root doing parameter socket options = TCP_NODELAY doing parameter idmap uid = 16777216-33554431 WARNING: The "idmap uid" option is deprecated doing parameter idmap gid = 16777216-33554431 WARNING: The "idmap gid" option is deprecated doing parameter winbind use default domain = no doing parameter winbind max domain connections = 5 doing parameter winbind max clients = 1000 doing parameter password server = * doing parameter realm = AUTH.CHRJSN.SE pm_process() returned Yes added interface ens33 ip=192.168.1.231 bcast=192.168.1.255 netmask=255.255.255.0 Netbios name list:- my_netbios_names[0]="RADIUS01" added interface ens33 ip=192.168.1.231 bcast=192.168.1.255 netmask=255.255.255.0 TimeInit: Serverzone is -7200 initialize_winbindd_cache: clearing cache and re-creating with version number 2 check lock order 2 for /var/lib/samba/lock/serverid.tdb release lock order 2 for /var/lib/samba/lock/serverid.tdb Registering messaging pointer for type 33 - private_data=(nil) Registering messaging pointer for type 13 - private_data=(nil) Registering messaging pointer for type 1028 - private_data=(nil) Registering messaging pointer for type 1027 - private_data=(nil) Registering messaging pointer for type 1029 - private_data=(nil) Registering messaging pointer for type 1036 - private_data=(nil) Registering messaging pointer for type 1035 - private_data=(nil) Registering messaging pointer for type 1280 - private_data=(nil) Registering messaging pointer for type 1032 - private_data=(nil) Registering messaging pointer for type 1033 - private_data=(nil) Registering messaging pointer for type 1034 - private_data=(nil) Registering messaging pointer for type 1 - private_data=(nil) Overriding messaging pointer for type 1 - private_data=(nil) Added domain BUILTIN (null) S-1-5-32 Attempting to find a passdb backend to match tdbsam (tdbsam) No builtin backend found, trying to load plugin load_module_absolute_path: Probing module '/usr/lib64/samba/pdb/tdbsam.so' load_module_absolute_path: Module '/usr/lib64/samba/pdb/tdbsam.so' loaded Attempting to register passdb backend tdbsam Successfully added passdb backend 'tdbsam' Found pdb backend tdbsam pdb backend tdbsam has a valid init Added domain RADIUS01 (null) S-1-5-21-3842715754-1460134973-2872612096 Added domain AUTH AUTH.CHRJSN.SE S-1-5-21-433031528-1573582855-1556836220 Registering messaging pointer for type 2 - private_data=(nil) Registering messaging pointer for type 9 - private_data=(nil) Registered MSG_REQ_POOL_USAGE Registering messaging pointer for type 11 - private_data=(nil) Registering messaging pointer for type 12 - private_data=(nil) Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED Registering messaging pointer for type 1 - private_data=(nil) Registering messaging pointer for type 5 - private_data=(nil) Registering messaging pointer for type 51 - private_data=(nil) STATUS=daemon 'winbindd' finished starting up and ready to serve connections Deregistering messaging pointer for type 33 - private_data=(nil) Deregistering messaging pointer for type 13 - private_data=(nil) Deregistering messaging pointer for type 1028 - private_data=(nil) Deregistering messaging pointer for type 1027 - private_data=(nil) Deregistering messaging pointer for type 1029 - private_data=(nil) Deregistering messaging pointer for type 1280 - private_data=(nil) Deregistering messaging pointer for type 1033 - private_data=(nil) Deregistering messaging pointer for type 1 - private_data=(nil) Deregistering messaging pointer for type 1036 - private_data=(nil) Deregistering messaging pointer for type 1035 - private_data=(nil) Registering messaging pointer for type 1028 - private_data=(nil) Registering messaging pointer for type 1027 - private_data=(nil) Registering messaging pointer for type 1280 - private_data=(nil) Registering messaging pointer for type 1 - private_data=(nil) Registering messaging pointer for type 1034 - private_data=(nil) Overriding messaging pointer for type 1034 - private_data=(nil) child daemon request 48 connection_ok: Connection to (null) for domain AUTH is not connected Opening cache file at /var/lib/samba/gencache.tdb Opening cache file at /var/lib/samba/lock/gencache_notrans.tdb saf_fetch[join]: Returning "dc01.auth.chrjsn.se" for "AUTH" domain sitename_fetch: Returning sitename for realm 'AUTH.CHRJSN.SE': "Default-First-Site-Name" name dc01.auth.chrjsn.se#20 found. ads_try_connect: sending CLDAP request to 192.168.1.230 (realm: AUTH.CHRJSN.SE) Successfully contacted LDAP server 192.168.1.230 namecache_store: storing 1 address for dc01.auth.chrjsn.se#20: 192.168.1.230 sitename_fetch: Returning sitename for realm 'AUTH.CHRJSN.SE': "Default-First-Site-Name" saf_fetch[join]: Returning "dc01.auth.chrjsn.se" for "AUTH.CHRJSN.SE" domain get_dc_list: preferred server list: "dc01.auth.chrjsn.se, *" resolve_ads: Attempting to resolve KDCs for AUTH.CHRJSN.SE using DNS ads_dns_lookup_srv: 1 records returned in the answer section. sitename_fetch: Returning sitename for realm 'AUTH.CHRJSN.SE': "Default-First-Site-Name" name dc01.auth.chrjsn.se#20 found. get_dc_list: returning 1 ip addresses in an ordered list get_dc_list: 192.168.1.230:88 saf_fetch[join]: Returning "dc01.auth.chrjsn.se" for "AUTH.CHRJSN.SE" domain get_dc_list: preferred server list: "dc01.auth.chrjsn.se, *" resolve_ads: Attempting to resolve KDCs for AUTH.CHRJSN.SE using DNS ads_dns_lookup_srv: 1 records returned in the answer section. sitename_fetch: Returning sitename for realm 'AUTH.CHRJSN.SE': "Default-First-Site-Name" name dc01.auth.chrjsn.se#20 found. get_dc_list: returning 1 ip addresses in an ordered list get_dc_list: 192.168.1.230:88 create_local_private_krb5_conf_for_domain: wrote file /var/lib/samba/lock/smb_krb5/krb5.conf.AUTH with realm AUTH.CHRJSN.SE KDC list = kdc = 192.168.1.230 Connecting to 192.168.1.230 at port 445 Socket options: SO_KEEPALIVE = 0 SO_REUSEADDR = 0 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 0 SO_SNDBUF = 87040 SO_RCVBUF = 367360 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 ldb_wrap open of secrets.ldb connecting to dc01.auth.chrjsn.se (AUTH, AUTH.CHRJSN.SE) with account [AUTH\RADIUS01$] principal [RADIUS01$@AUTH.CHRJSN.SE] and realm [AUTH.CHRJSN.SE] got OID=1.2.840.48018.1.2.2 GENSEC backend 'gssapi_spnego' registered GENSEC backend 'gssapi_krb5' registered GENSEC backend 'gssapi_krb5_sasl' registered GENSEC backend 'spnego' registered GENSEC backend 'schannel' registered GENSEC backend 'naclrpc_as_system' registered GENSEC backend 'sasl-EXTERNAL' registered GENSEC backend 'ntlmssp' registered GENSEC backend 'ntlmssp_resume_ccache' registered GENSEC backend 'http_basic' registered GENSEC backend 'http_ntlm' registered Starting GENSEC mechanism spnego Starting GENSEC submechanism gse_krb5 signed SMB2 message set_dc_type_and_flags_connect: domain AUTH signed SMB2 message Bind RPC Pipe: host dc01.auth.chrjsn.se auth_type 0, auth_level 1 rpc_api_pipe: host dc01.auth.chrjsn.se signed SMB2 message rpc_read_send: data_to_read: 52 check_bind_response: accepted! rpc_api_pipe: host dc01.auth.chrjsn.se signed SMB2 message rpc_read_send: data_to_read: 168 signed SMB2 message signed SMB2 message Bind RPC Pipe: host dc01.auth.chrjsn.se auth_type 0, auth_level 1 rpc_api_pipe: host dc01.auth.chrjsn.se signed SMB2 message rpc_read_send: data_to_read: 52 check_bind_response: accepted! rpc_api_pipe: host dc01.auth.chrjsn.se signed SMB2 message rpc_read_send: data_to_read: 32 rpc_api_pipe: host dc01.auth.chrjsn.se signed SMB2 message rpc_read_send: data_to_read: 192 set_dc_type_and_flags_connect: domain AUTH is in native mode. set_dc_type_and_flags_connect: domain AUTH is running active directory. signed SMB2 message Finished processing child request 48 child daemon request 20 [14164]: list trusted domains get_cache: Setting ADS methods for domain AUTH ads: trusted_domains ldb_wrap open of secrets.ldb Connecting to 192.168.1.230 at port 135 Socket options: SO_KEEPALIVE = 0 SO_REUSEADDR = 0 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 0 SO_SNDBUF = 87040 SO_RCVBUF = 367360 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 Bind RPC Pipe: host dc01.auth.chrjsn.se auth_type 0, auth_level 1 rpc_api_pipe: host dc01.auth.chrjsn.se rpc_write_send: data_to_write: 72 rpc_read_send: data_to_read: 44 check_bind_response: accepted! rpc_api_pipe: host dc01.auth.chrjsn.se rpc_write_send: data_to_write: 156 rpc_read_send: data_to_read: 136 Connecting to 192.168.1.230 at port 49153 Socket options: SO_KEEPALIVE = 0 SO_REUSEADDR = 0 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 0 SO_SNDBUF = 87040 SO_RCVBUF = 367360 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 Bind RPC Pipe: host dc01.auth.chrjsn.se auth_type 0, auth_level 1 rpc_api_pipe: host dc01.auth.chrjsn.se rpc_write_send: data_to_write: 72 rpc_read_send: data_to_read: 44 check_bind_response: accepted! check lock order 3 for /var/lib/samba/lock/g_lock.tdb release lock order 3 for /var/lib/samba/lock/g_lock.tdb check lock order 2 for /var/lib/samba/private/netlogon_creds_cli.tdb release lock order 2 for /var/lib/samba/private/netlogon_creds_cli.tdb rpc_api_pipe: host dc01.auth.chrjsn.se rpc_write_send: data_to_write: 122 rpc_read_send: data_to_read: 20 rpc_api_pipe: host dc01.auth.chrjsn.se rpc_write_send: data_to_write: 164 rpc_read_send: data_to_read: 28 check lock order 2 for /var/lib/samba/private/netlogon_creds_cli.tdb release lock order 2 for /var/lib/samba/private/netlogon_creds_cli.tdb check lock order 3 for /var/lib/samba/lock/g_lock.tdb release lock order 3 for /var/lib/samba/lock/g_lock.tdb rpccli_setup_netlogon_creds: using new netlogon_creds cli[RADIUS01$/RADIUS01] to dc01.auth.chrjsn.se Connecting to 192.168.1.230 at port 135 Socket options: SO_KEEPALIVE = 0 SO_REUSEADDR = 0 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 0 SO_SNDBUF = 87040 SO_RCVBUF = 367360 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 Bind RPC Pipe: host dc01.auth.chrjsn.se auth_type 0, auth_level 1 rpc_api_pipe: host dc01.auth.chrjsn.se rpc_write_send: data_to_write: 72 rpc_read_send: data_to_read: 44 check_bind_response: accepted! rpc_api_pipe: host dc01.auth.chrjsn.se rpc_write_send: data_to_write: 156 rpc_read_send: data_to_read: 136 Connecting to 192.168.1.230 at port 49153 Socket options: SO_KEEPALIVE = 0 SO_REUSEADDR = 0 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 0 SO_SNDBUF = 87040 SO_RCVBUF = 367360 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 check lock order 3 for /var/lib/samba/lock/g_lock.tdb release lock order 3 for /var/lib/samba/lock/g_lock.tdb Starting GENSEC mechanism schannel Bind RPC Pipe: host dc01.auth.chrjsn.se auth_type 68, auth_level 6 create_generic_auth_rpc_bind_req: generate first token rpc_api_pipe: host dc01.auth.chrjsn.se rpc_write_send: data_to_write: 102 rpc_read_send: data_to_read: 64 check_bind_response: accepted! check lock order 3 for /var/lib/samba/lock/g_lock.tdb release lock order 3 for /var/lib/samba/lock/g_lock.tdb check lock order 3 for /var/lib/samba/lock/g_lock.tdb release lock order 3 for /var/lib/samba/lock/g_lock.tdb seed c0d19c61:e5ebe7f4 seed+time 1c6d3930:e5ebe7f4 CLIENT 9970cabc:e60483e6 seed+time+1 1c6d3931:e5ebe7f4 SERVER 9a6d42bd:4a8a7990 rpc_api_pipe: host dc01.auth.chrjsn.se rpc_write_send: data_to_write: 280 rpc_read_send: data_to_read: 104 check lock order 2 for /var/lib/samba/private/netlogon_creds_cli.tdb release lock order 2 for /var/lib/samba/private/netlogon_creds_cli.tdb check lock order 3 for /var/lib/samba/lock/g_lock.tdb release lock order 3 for /var/lib/samba/lock/g_lock.tdb rpc_api_pipe: host dc01.auth.chrjsn.se rpc_write_send: data_to_write: 152 rpc_read_send: data_to_read: 232 Finished processing child request 20 child daemon request 20 [14164]: list trusted domains ads: trusted_domains rpc_api_pipe: host dc01.auth.chrjsn.se rpc_write_send: data_to_write: 152 rpc_read_send: data_to_read: 232 Finished processing child request 20 Registering messaging pointer for type 1030 - private_data=(nil) Registering messaging pointer for type 1031 - private_data=(nil) Deregistering messaging pointer for type 33 - private_data=(nil) Deregistering messaging pointer for type 13 - private_data=(nil) Deregistering messaging pointer for type 1028 - private_data=(nil) Deregistering messaging pointer for type 1027 - private_data=(nil) Deregistering messaging pointer for type 1029 - private_data=(nil) Deregistering messaging pointer for type 1280 - private_data=(nil) Deregistering messaging pointer for type 1033 - private_data=(nil) Deregistering messaging pointer for type 1 - private_data=(nil) Deregistering messaging pointer for type 1036 - private_data=(nil) Deregistering messaging pointer for type 1035 - private_data=(nil) Opening cache file at /var/lib/samba/gencache.tdb Opening cache file at /var/lib/samba/lock/gencache_notrans.tdb sitename_fetch: Returning sitename for realm 'auth.chrjsn.se': "Default-First-Site-Name" ads_dc_name: domain=AUTH sitename_fetch: Returning sitename for realm 'auth.chrjsn.se': "Default-First-Site-Name" saf_fetch[join]: Returning "dc01.auth.chrjsn.se" for "auth.chrjsn.se" domain get_dc_list: preferred server list: "dc01.auth.chrjsn.se, *" name auth.chrjsn.se#1C found. sitename_fetch: Returning sitename for realm 'AUTH.CHRJSN.SE': "Default-First-Site-Name" name dc01.auth.chrjsn.se#20 found. get_dc_list: returning 1 ip addresses in an ordered list get_dc_list: 192.168.1.230:389 ads_try_connect: sending CLDAP request to 192.168.1.230 (realm: auth.chrjsn.se) Successfully contacted LDAP server 192.168.1.230 sitename_fetch: Returning sitename for realm 'auth.chrjsn.se': "Default-First-Site-Name" saf_fetch[join]: Returning "dc01.auth.chrjsn.se" for "auth.chrjsn.se" domain get_dc_list: preferred server list: "dc01.auth.chrjsn.se, *" resolve_ads: Attempting to resolve KDCs for auth.chrjsn.se using DNS ads_dns_lookup_srv: 1 records returned in the answer section. sitename_fetch: Returning sitename for realm 'AUTH.CHRJSN.SE': "Default-First-Site-Name" name dc01.auth.chrjsn.se#20 found. get_dc_list: returning 1 ip addresses in an ordered list get_dc_list: 192.168.1.230:88 saf_fetch[join]: Returning "dc01.auth.chrjsn.se" for "auth.chrjsn.se" domain get_dc_list: preferred server list: "dc01.auth.chrjsn.se, *" resolve_ads: Attempting to resolve KDCs for auth.chrjsn.se using DNS ads_dns_lookup_srv: 1 records returned in the answer section. sitename_fetch: Returning sitename for realm 'AUTH.CHRJSN.SE': "Default-First-Site-Name" name dc01.auth.chrjsn.se#20 found. get_dc_list: returning 1 ip addresses in an ordered list get_dc_list: 192.168.1.230:88 create_local_private_krb5_conf_for_domain: wrote file /var/lib/samba/lock/smb_krb5/krb5.conf.AUTH with realm AUTH.CHRJSN.SE KDC list = kdc = 192.168.1.230 ads_dc_name: using server='DC01.AUTH.CHRJSN.SE' IP=192.168.1.230 sitename_fetch: Returning sitename for realm 'auth.chrjsn.se': "Default-First-Site-Name" saf_fetch[join]: Returning "dc01.auth.chrjsn.se" for "auth.chrjsn.se" domain get_dc_list: preferred server list: "dc01.auth.chrjsn.se, *" name auth.chrjsn.se#1C found. sitename_fetch: Returning sitename for realm 'AUTH.CHRJSN.SE': "Default-First-Site-Name" name dc01.auth.chrjsn.se#20 found. get_dc_list: returning 1 ip addresses in an ordered list get_dc_list: 192.168.1.230:389 saf_fetch[join]: Returning "dc01.auth.chrjsn.se" for "auth.chrjsn.se" domain get_dc_list: preferred server list: "dc01.auth.chrjsn.se, *" name auth.chrjsn.se#1C found. sitename_fetch: Returning sitename for realm 'AUTH.CHRJSN.SE': "Default-First-Site-Name" name dc01.auth.chrjsn.se#20 found. get_dc_list: returning 1 ip addresses in an ordered list get_dc_list: 192.168.1.230:389 msg_try_to_go_online: received for domain AUTH. msg_try_to_go_online: domain AUTH already online. Already reaped child 14173 died [14191]: request interface version (version = 29) [14191]: request location of privileged pipe [14191]: request domain name [14191]: pam auth crap domain: [AUTH] user: adtest child daemon request 14 [14164]: pam auth crap domain: AUTH user: adtest rpc_api_pipe: host dc01.auth.chrjsn.se rpc_write_send: data_to_write: 392 rpc_read_send: data_to_read: 104 NTLM CRAP authentication for user [AUTH]\[adtest] returned NT_STATUS_WRONG_PASSWORD Finished processing child request 14 [14196]: request interface version (version = 29) [14196]: request location of privileged pipe [14196]: request misc info [14196]: pam auth auth.chrjsn.se\adtest child daemon request 13 [14164]: dual pam auth AUTH.CHRJSN.SE\adtest rpc_api_pipe: host dc01.auth.chrjsn.se rpc_write_send: data_to_write: 376 rpc_read_send: data_to_read: 648 ads: fetch sequence_number for AUTH sitename_fetch: Returning sitename for realm 'auth.chrjsn.se': "Default-First-Site-Name" ads_dc_name: domain=AUTH sitename_fetch: Returning sitename for realm 'auth.chrjsn.se': "Default-First-Site-Name" saf_fetch[join]: Returning "dc01.auth.chrjsn.se" for "auth.chrjsn.se" domain get_dc_list: preferred server list: "dc01.auth.chrjsn.se, *" name auth.chrjsn.se#1C found. sitename_fetch: Returning sitename for realm 'AUTH.CHRJSN.SE': "Default-First-Site-Name" name dc01.auth.chrjsn.se#20 found. get_dc_list: returning 1 ip addresses in an ordered list get_dc_list: 192.168.1.230:389 ads_try_connect: sending CLDAP request to 192.168.1.230 (realm: auth.chrjsn.se) Successfully contacted LDAP server 192.168.1.230 sitename_fetch: Returning sitename for realm 'auth.chrjsn.se': "Default-First-Site-Name" saf_fetch[join]: Returning "dc01.auth.chrjsn.se" for "auth.chrjsn.se" domain get_dc_list: preferred server list: "dc01.auth.chrjsn.se, *" resolve_ads: Attempting to resolve KDCs for auth.chrjsn.se using DNS ads_dns_lookup_srv: 1 records returned in the answer section. sitename_fetch: Returning sitename for realm 'AUTH.CHRJSN.SE': "Default-First-Site-Name" name dc01.auth.chrjsn.se#20 found. get_dc_list: returning 1 ip addresses in an ordered list get_dc_list: 192.168.1.230:88 saf_fetch[join]: Returning "dc01.auth.chrjsn.se" for "auth.chrjsn.se" domain get_dc_list: preferred server list: "dc01.auth.chrjsn.se, *" resolve_ads: Attempting to resolve KDCs for auth.chrjsn.se using DNS ads_dns_lookup_srv: 1 records returned in the answer section. sitename_fetch: Returning sitename for realm 'AUTH.CHRJSN.SE': "Default-First-Site-Name" name dc01.auth.chrjsn.se#20 found. get_dc_list: returning 1 ip addresses in an ordered list get_dc_list: 192.168.1.230:88 create_local_private_krb5_conf_for_domain: wrote file /var/lib/samba/lock/smb_krb5/krb5.conf.AUTH with realm AUTH.CHRJSN.SE KDC list = kdc = 192.168.1.230 ads_dc_name: using server='DC01.AUTH.CHRJSN.SE' IP=192.168.1.230 sitename_fetch: Returning sitename for realm 'auth.chrjsn.se': "Default-First-Site-Name" ads_dc_name: domain=AUTH sitename_fetch: Returning sitename for realm 'auth.chrjsn.se': "Default-First-Site-Name" saf_fetch[join]: Returning "dc01.auth.chrjsn.se" for "auth.chrjsn.se" domain get_dc_list: preferred server list: "dc01.auth.chrjsn.se, *" name auth.chrjsn.se#1C found. sitename_fetch: Returning sitename for realm 'AUTH.CHRJSN.SE': "Default-First-Site-Name" name dc01.auth.chrjsn.se#20 found. get_dc_list: returning 1 ip addresses in an ordered list get_dc_list: 192.168.1.230:389 ads_try_connect: sending CLDAP request to 192.168.1.230 (realm: auth.chrjsn.se) Successfully contacted LDAP server 192.168.1.230 sitename_fetch: Returning sitename for realm 'auth.chrjsn.se': "Default-First-Site-Name" saf_fetch[join]: Returning "dc01.auth.chrjsn.se" for "auth.chrjsn.se" domain get_dc_list: preferred server list: "dc01.auth.chrjsn.se, *" resolve_ads: Attempting to resolve KDCs for auth.chrjsn.se using DNS ads_dns_lookup_srv: 1 records returned in the answer section. sitename_fetch: Returning sitename for realm 'AUTH.CHRJSN.SE': "Default-First-Site-Name" name dc01.auth.chrjsn.se#20 found. get_dc_list: returning 1 ip addresses in an ordered list get_dc_list: 192.168.1.230:88 saf_fetch[join]: Returning "dc01.auth.chrjsn.se" for "auth.chrjsn.se" domain get_dc_list: preferred server list: "dc01.auth.chrjsn.se, *" resolve_ads: Attempting to resolve KDCs for auth.chrjsn.se using DNS ads_dns_lookup_srv: 1 records returned in the answer section. sitename_fetch: Returning sitename for realm 'AUTH.CHRJSN.SE': "Default-First-Site-Name" name dc01.auth.chrjsn.se#20 found. get_dc_list: returning 1 ip addresses in an ordered list get_dc_list: 192.168.1.230:88 create_local_private_krb5_conf_for_domain: wrote file /var/lib/samba/lock/smb_krb5/krb5.conf.AUTH with realm AUTH.CHRJSN.SE KDC list = kdc = 192.168.1.230 ads_dc_name: using server='DC01.AUTH.CHRJSN.SE' IP=192.168.1.230 ads_try_connect: sending CLDAP request to 192.168.1.230 (realm: auth.chrjsn.se) Successfully contacted LDAP server 192.168.1.230 Connected to LDAP server dc01.auth.chrjsn.se KDC time offset is 0 seconds Found SASL mechanism GSS-SPNEGO ads_sasl_spnego_bind: got OID=1.2.840.48018.1.2.2 ads_sasl_spnego_bind: got OID=1.2.840.113554.1.2.2 ads_sasl_spnego_bind: got OID=1.3.6.1.4.1.311.2.2.10 Starting GENSEC mechanism spnego Starting GENSEC submechanism gse_krb5 Search for (objectclass=*) in <> gave 1 replies Plain-text authentication for user AUTH.CHRJSN.SE\adtest returned NT_STATUS_OK (PAM: 0) Finished processing child request 13