Guest User

msktuil output

a guest
Apr 4th, 2012
324
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.33 KB | None | 0 0
  1. [root@NS1 ~]# msktutil -c -b "CN=COMPUTERS" -s HTTP/ns1.example.internal -h ns1.example.internal -k /etc/squid/HTTP.keytab --computer-name ns1 --upn HTTP/ns1.example.internal --server dc-hbt-01.mulawa.internal --verbose
  2. -- init_password: Wiping the computer password structure
  3. -- create_fake_krb5_conf: Created a fake krb5.conf file: /tmp/.msktkrb5.conf-1xdMgS
  4. -- reload: Reloading Kerberos Context
  5. -- finalize_exec: SAM Account Name is: ns1$
  6. -- try_machine_keytab_princ: Trying to authenticate for ns1$ from local keytab...
  7. -- try_machine_keytab_princ: Error: krb5_get_init_creds_keytab failed (Client not found in Kerberos database)
  8. -- try_machine_keytab_princ: Authentication with keytab failed
  9. -- try_machine_keytab_princ: Trying to authenticate for host/ns1.example.internal from local keytab...
  10. -- try_machine_keytab_princ: Error: krb5_get_init_creds_keytab failed (Client not found in Kerberos database)
  11. -- try_machine_keytab_princ: Authentication with keytab failed
  12. -- try_machine_password: Trying to authenticate for ns1$ with password.
  13. -- try_machine_password: Error: krb5_get_init_creds_keytab failed (Client not found in Kerberos database)
  14. -- try_machine_password: Authentication with password failed
  15. -- try_user_creds: Checking if default ticket cache has tickets...
  16. -- finalize_exec: Authenticated using method 4
  17.  
  18. -- ldap_connect: Connecting to LDAP server: dc-hbt-01.example.internal try_tls=YES
  19. -- ldap_connect: Connecting to LDAP server: dc-hbt-01.example.internal try_tls=NO
  20. SASL/GSSAPI authentication started
  21. SASL username: [email protected]
  22. SASL SSF: 56
  23. SASL data security layer installed.
  24. -- ldap_connect: LDAP_OPT_X_SASL_SSF=56
  25.  
  26. -- ldap_get_base_dn: Determining default LDAP base: dc=EXAMPLE,dc=INTERNAL
  27. -- init_password: Wiping the computer password structure
  28. -- generate_new_password: Generating a new, random password for the computer account
  29. -- generate_new_password: Characters read from /dev/udandom = 86
  30. -- ldap_check_account: Checking that a computer account for ns1$ exists
  31. -- ldap_check_account: Computer account not found, create the account
  32.  
  33. No computer account for ns1 found, creating a new one.
  34. dn: cn=ns1,CN=COMPUTERS,dc=EXAMPLE,dc=INTERNAL
  35. -- ldap_check_account_strings: Inspecting (and updating) computer account attributes
  36. -- ldap_simple_set_attr: Calling ldap_modify_ext_s to set dNSHostName to ns1.example.internal
  37. -- ldap_simple_set_attr: Calling ldap_modify_ext_s to set userPrincipalName to HTTP/[email protected]
  38. -- ldap_set_supportedEncryptionTypes: DEE dn=cn=ns1,CN=COMPUTERS,dc=EXAMPLE,dc=INTERNAL old=7 new=28
  39.  
  40. -- ldap_simple_set_attr: Calling ldap_modify_ext_s to set msDs-supportedEncryptionTypes to 28
  41. -- ldap_set_userAccountControl_flag: Setting userAccountControl bit at 0x200000 to 0x0
  42. -- ldap_set_userAccountControl_flag: userAccountControl not changed 0x1000
  43.  
  44. -- set_password: Attempting to reset computer's password
  45. -- set_password: Try change password using user's ticket cache
  46.  
  47. -- ldap_get_pwdLastSet: pwdLastSet is 0
  48. Error: krb5_set_password_using_ccache failed (Cannot contact any KDC for requested realm)
  49. Error: set_password failed
  50. -- ~msktutil_exec: Destroying msktutil_exec
  51. -- ldap_cleanup: Disconnecting from LDAP server
  52. -- init_password: Wiping the computer password structure
  53. -- ~KRB5Context: Destroying Kerberos Context
Advertisement
Add Comment
Please, Sign In to add comment