<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 08/01/15 05:09, Ashish Yadav wrote:<br>
</div>
<blockquote
cite="mid:CAPm7S=728_w9esR+MAuTyo-_nxXQaet+=tqshvbrraKgXwRkeA@mail.gmail.com"
type="cite">
<div dir="ltr">Hi,<br>
<div class="gmail_extra"><br>
<div class="gmail_quote">
<blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><span
class="">
<br>
</span>What happens if you call<br>
<br>
kinit <a moz-do-not-send="true"
href="mailto:sambauser@INTRA.EXAMPLE.COM">sambauser@INTRA.EXAMPLE.COM</a></blockquote>
<div><br>
</div>
<div>It asks for password and current password is working
for getting kerberos ticket and not asking me to reset the
password.</div>
<div> </div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><br>
<br>
on the Linux command line. Are you asekd you for new
password here? If<br>
not Samba might not return the right error code to
indicate that the<br>
password is expired. </blockquote>
<div><br>
</div>
<div>I posted this query in samba mailing list also but they
told me that if Windows 7 client is working fine then
Samba is working fine.<br>
</div>
</div>
</div>
</div>
</blockquote>
<br>
No you weren't, you were told that you might have a better chance of
getting it fixed on the sssd list because it worked from a windows
client, so this meant it was *probably* a sssd problem, it may in
the end turn out to be a samba problem, but sssd needs ruling out
first and as I pointed out to you on the samba list, sssd is not
part of samba.<br>
<br>
Rowland<br>
<br>
<blockquote
cite="mid:CAPm7S=728_w9esR+MAuTyo-_nxXQaet+=tqshvbrraKgXwRkeA@mail.gmail.com"
type="cite">
<div dir="ltr">
<div class="gmail_extra">
<div class="gmail_quote">
<div> </div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">In
this case it would be nice if you can send the<br>
output of<br>
<br>
KRB5_TRACE=/dev/stdout kinit <a moz-do-not-send="true"
href="mailto:sambauser@INTRA.EXAMPLE.COM">sambauser@INTRA.EXAMPLE.COM</a><br>
<br>
</blockquote>
<div><br>
</div>
<div>Here is the output of the above command,</div>
<div><br>
</div>
<div> # KRB5_TRACE=/dev/stdout kinit test</div>
<div>[2507] 1420693228.971649: Getting initial credentials
for <a moz-do-not-send="true"
href="mailto:test@INTRA.EXAMPLE.COM">test@INTRA.EXAMPLE.COM</a></div>
<div>[2507] 1420693228.974468: Sending request (210 bytes)
to <a moz-do-not-send="true"
href="http://INTRA.EXAMPLE.COM">INTRA.EXAMPLE.COM</a></div>
<div>[2507] 1420693228.976230: Sending initial UDP request
to dgram <a moz-do-not-send="true"
href="http://172.16.0.170:8880">172.16.0.170:8880</a></div>
<div>[2507] 1420693228.981059: Received answer from dgram <a
moz-do-not-send="true" href="http://172.16.0.170:8880">172.16.0.170:8880</a></div>
<div>[2507] 1420693228.981167: Response was not from master
KDC</div>
<div>[2507] 1420693228.981252: Received error from KDC:
-1765328359/Additional pre-authentication required</div>
<div>[2507] 1420693228.981413: Processing preauth types: 16,
15, 2, 138, 136, 11, 19</div>
<div>[2507] 1420693228.981477: Selected etype info: etype
rc4-hmac, salt "INTRA.EXAMPLE.COMtest", params ""</div>
<div>[2507] 1420693228.981532: Selected etype info: etype
rc4-hmac, salt "INTRA.EXAMPLE.COMtest", params ""</div>
<div>Password for <a moz-do-not-send="true"
href="mailto:test@INTRA.EXAMPLE.COM">test@INTRA.EXAMPLE.COM</a>: </div>
<div>[2507] 1420693231.111979: AS key obtained for encrypted
timestamp: rc4-hmac/3CC1</div>
<div>[2507] 1420693231.112235: Encrypted timestamp (for
1420693231.112064): plain
301AA011180F32303135303130383035303033315AA105020301B5C0,
encrypted
F92A0E3BEF336E51C24C4CB9E8EB1ACE49ECA2BE32C9ABD207062898FD593268EEA31CF0185BE2B2B05F3A4A47328E9B1149AFA0</div>
<div>[2507] 1420693231.112272: Preauth module
encrypted_timestamp (2) (flags=1) returned: 0/Success</div>
<div>[2507] 1420693231.112292: Produced preauth for next
request: 2</div>
<div>[2507] 1420693231.112341: Sending request (286 bytes)
to <a moz-do-not-send="true"
href="http://INTRA.EXAMPLE.COM">INTRA.EXAMPLE.COM</a></div>
<div>[2507] 1420693231.112611: Sending initial UDP request
to dgram <a moz-do-not-send="true"
href="http://172.16.0.170:8880">172.16.0.170:8880</a></div>
<div>[2507] 1420693231.116296: Received answer from dgram <a
moz-do-not-send="true" href="http://172.16.0.170:8880">172.16.0.170:8880</a></div>
<div>[2507] 1420693231.116448: Response was not from master
KDC</div>
<div>[2507] 1420693231.116573: Processing preauth types: 3</div>
<div>[2507] 1420693231.116586: Received salt "��" via padata
type 3</div>
<div>[2507] 1420693231.116597: Produced preauth for next
request: (empty)</div>
<div>[2507] 1420693231.116616: AS key determined by preauth:
rc4-hmac/3CC1</div>
<div>[2507] 1420693231.116694: Decrypted AS reply; session
key is: rc4-hmac/4D55</div>
<div>[2507] 1420693231.116724: FAST negotiation: available</div>
<div>[2507] 1420693231.116729: Initializing
<a class="moz-txt-link-freetext" href="FILE:/tmp/krb5cc_0">FILE:/tmp/krb5cc_0</a> with default princ <a
moz-do-not-send="true"
href="mailto:test@INTRA.EXAMPLE.COM">test@INTRA.EXAMPLE.COM</a></div>
<div>[2507] 1420693231.117523: Removing <a
moz-do-not-send="true"
href="mailto:test@INTRA.EXAMPLE.COM">test@INTRA.EXAMPLE.COM</a>
-> krbtgt/<a moz-do-not-send="true"
href="mailto:INTRA.EXAMPLE.COM@INTRA.EXAMPLE.COM">INTRA.EXAMPLE.COM@INTRA.EXAMPLE.COM</a>
from <a class="moz-txt-link-freetext" href="FILE:/tmp/krb5cc_0">FILE:/tmp/krb5cc_0</a></div>
<div>[2507] 1420693231.117542: Storing <a
moz-do-not-send="true"
href="mailto:test@INTRA.EXAMPLE.COM">test@INTRA.EXAMPLE.COM</a>
-> krbtgt/<a moz-do-not-send="true"
href="mailto:INTRA.EXAMPLE.COM@INTRA.EXAMPLE.COM">INTRA.EXAMPLE.COM@INTRA.EXAMPLE.COM</a>
in <a class="moz-txt-link-freetext" href="FILE:/tmp/krb5cc_0">FILE:/tmp/krb5cc_0</a></div>
<div>[2507] 1420693231.117710: Storing config in
<a class="moz-txt-link-freetext" href="FILE:/tmp/krb5cc_0">FILE:/tmp/krb5cc_0</a> for krbtgt/<a moz-do-not-send="true"
href="mailto:INTRA.EXAMPLE.COM@INTRA.EXAMPLE.COM">INTRA.EXAMPLE.COM@INTRA.EXAMPLE.COM</a>:
fast_avail: yes</div>
<div>[2507] 1420693231.117903: Removing <a
moz-do-not-send="true"
href="mailto:test@INTRA.EXAMPLE.COM">test@INTRA.EXAMPLE.COM</a>
-> krb5_ccache_conf_data/fast_avail/krbtgt\/<a
moz-do-not-send="true" href="http://INTRA.EXAMPLE.COM">INTRA.EXAMPLE.COM</a>\@INTRA.EXAMPLE.COM@X-CACHECONF:
from <a class="moz-txt-link-freetext" href="FILE:/tmp/krb5cc_0">FILE:/tmp/krb5cc_0</a></div>
<div>[2507] 1420693231.117920: Storing <a
moz-do-not-send="true"
href="mailto:test@INTRA.EXAMPLE.COM">test@INTRA.EXAMPLE.COM</a>
-> krb5_ccache_conf_data/fast_avail/krbtgt\/<a
moz-do-not-send="true" href="http://INTRA.EXAMPLE.COM">INTRA.EXAMPLE.COM</a>\@INTRA.EXAMPLE.COM@X-CACHECONF:
in <a class="moz-txt-link-freetext" href="FILE:/tmp/krb5cc_0">FILE:/tmp/krb5cc_0</a></div>
<div><br>
</div>
<span style="font-family:arial"><br class="">
--Regards</span><br style="font-family:arial">
<div><span style="font-family:arial">Ashishkumar S. Yadav</span> </div>
</div>
<br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
sssd-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a>
<a class="moz-txt-link-freetext" href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a>
</pre>
</blockquote>
<br>
</body>
</html>