Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- root@proxy ~]# msktutil -c -b "CN=COMPUTERS" -s HTTP/proxy.informatics.ftk -h proxy.informatics.ftk -k /root/HTTP.keytab --computer-name PROXY --upn HTTP/proxy.informatics.ftk --server 192.168.88.10 --verbose
- -- init_password: Wiping the computer password structure
- -- finalize_exec: Determining user principal name
- -- finalize_exec: User Principal Name is: HTTP/proxy.informatics.ftk@INFORMATICS.FTK
- -- create_fake_krb5_conf: Created a fake krb5.conf file: /tmp/.mskt-2071krb5.conf
- -- get_krb5_context: Creating Kerberos Context
- -- try_machine_keytab: Using the local credential cache: /tmp/.mskt-2071krb5_ccache
- -- try_machine_keytab: krb5_get_init_creds_keytab failed (No such file or directory)
- -- try_machine_keytab: Unable to authenticate using the local keytab
- -- try_ldap_connect: Connecting to LDAP server: 192.168.88.10
- -- try_ldap_connect: Connecting to LDAP server: 192.168.88.10
- SASL/GSSAPI authentication started
- SASL username: admin@INFORMATICS.FTK
- SASL SSF: 56
- SASL installing layers
- -- ldap_get_base_dn: Determining default LDAP base: dc=informatics,dc=ftk
- -- get_short_hostname: Determined short hostname: proxy
- -- finalize_exec: SAM Account Name is: PROXY$
- Updating all entries for proxy.informatics.ftk in the keytab /root/HTTP.keytab
- -- try_set_password: Attempting to reset computer's password
- -- ldap_check_account: Checking that a computer account for PROXY$ exists
- No computer account for PROXY found, creating a new one.
- -- ldap_check_account_strings: Inspecting (and updating) computer account attributes
- -- get_user_principal: Obtaining Principal for the executing user
- -- get_user_dn: Determined executing user's DN to be CN=Администратор,CN=Users,DC=informatics,DC=ftk
- -- generate_new_password: Generating a new, random password for the computer account
- -- try_set_password: krb5_get_init_creds_keytab failed (Client not found in Kerberos database)
- -- try_set_password: Attempting to reset computer's password
- -- ldap_check_account: Checking that a computer account for PROXY$ exists
- -- ldap_check_account: Checking computer account found
- -- ldap_check_account_strings: Inspecting (and updating) computer account attributes
- -- get_user_principal: Obtaining Principal for the executing user
- -- get_user_dn: Determined executing user's DN to be CN=Администратор,CN=Users,DC=informatics,DC=ftk
- -- generate_new_password: Generating a new, random password for the computer account
- -- ldap_get_pwdLastSet: pwdLastSet is 0
- Error: Unable to set machine password for proxy: (3) Authentication error
- Error: set_password failed
- -- krb5_cleanup: Destroying Kerberos Context
- -- ldap_cleanup: Disconnecting from LDAP server
- -- init_password: Wiping the computer password structure
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement