Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- [root@NS1 ~]# msktutil -c -b "CN=COMPUTERS" -s HTTP/ns1.example.internal -h ns1.example.internal -k /etc/squid/HTTP.keytab --computer-name ns1 --upn HTTP/ns1.example.internal --server dc-hbt-01.mulawa.internal --verbose
- -- init_password: Wiping the computer password structure
- -- create_fake_krb5_conf: Created a fake krb5.conf file: /tmp/.msktkrb5.conf-1xdMgS
- -- reload: Reloading Kerberos Context
- -- finalize_exec: SAM Account Name is: ns1$
- -- try_machine_keytab_princ: Trying to authenticate for ns1$ from local keytab...
- -- try_machine_keytab_princ: Error: krb5_get_init_creds_keytab failed (Client not found in Kerberos database)
- -- try_machine_keytab_princ: Authentication with keytab failed
- -- try_machine_keytab_princ: Trying to authenticate for host/ns1.example.internal from local keytab...
- -- try_machine_keytab_princ: Error: krb5_get_init_creds_keytab failed (Client not found in Kerberos database)
- -- try_machine_keytab_princ: Authentication with keytab failed
- -- try_machine_password: Trying to authenticate for ns1$ with password.
- -- try_machine_password: Error: krb5_get_init_creds_keytab failed (Client not found in Kerberos database)
- -- try_machine_password: Authentication with password failed
- -- try_user_creds: Checking if default ticket cache has tickets...
- -- finalize_exec: Authenticated using method 4
- -- ldap_connect: Connecting to LDAP server: dc-hbt-01.example.internal try_tls=YES
- -- ldap_connect: Connecting to LDAP server: dc-hbt-01.example.internal try_tls=NO
- SASL/GSSAPI authentication started
- SASL username: [email protected]
- SASL SSF: 56
- SASL data security layer installed.
- -- ldap_connect: LDAP_OPT_X_SASL_SSF=56
- -- ldap_get_base_dn: Determining default LDAP base: dc=EXAMPLE,dc=INTERNAL
- -- init_password: Wiping the computer password structure
- -- generate_new_password: Generating a new, random password for the computer account
- -- generate_new_password: Characters read from /dev/udandom = 86
- -- ldap_check_account: Checking that a computer account for ns1$ exists
- -- ldap_check_account: Computer account not found, create the account
- No computer account for ns1 found, creating a new one.
- dn: cn=ns1,CN=COMPUTERS,dc=EXAMPLE,dc=INTERNAL
- -- ldap_check_account_strings: Inspecting (and updating) computer account attributes
- -- ldap_simple_set_attr: Calling ldap_modify_ext_s to set dNSHostName to ns1.example.internal
- -- ldap_simple_set_attr: Calling ldap_modify_ext_s to set userPrincipalName to HTTP/[email protected]
- -- ldap_set_supportedEncryptionTypes: DEE dn=cn=ns1,CN=COMPUTERS,dc=EXAMPLE,dc=INTERNAL old=7 new=28
- -- ldap_simple_set_attr: Calling ldap_modify_ext_s to set msDs-supportedEncryptionTypes to 28
- -- ldap_set_userAccountControl_flag: Setting userAccountControl bit at 0x200000 to 0x0
- -- ldap_set_userAccountControl_flag: userAccountControl not changed 0x1000
- -- set_password: Attempting to reset computer's password
- -- set_password: Try change password using user's ticket cache
- -- ldap_get_pwdLastSet: pwdLastSet is 0
- Error: krb5_set_password_using_ccache failed (Cannot contact any KDC for requested realm)
- Error: set_password failed
- -- ~msktutil_exec: Destroying msktutil_exec
- -- ldap_cleanup: Disconnecting from LDAP server
- -- init_password: Wiping the computer password structure
- -- ~KRB5Context: Destroying Kerberos Context
Advertisement
Add Comment
Please, Sign In to add comment