The Samba-Bugzilla – Attachment 18483 Details for
Bug 15746
kinit/heimdal leaks information about password expiry
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
kinit.log
kinit.log (text/plain), 8.31 KB, created by
Felix Botner
on 2024-10-24 16:23:43 UTC
(
hide
)
Description:
kinit.log
Filename:
MIME Type:
Creator:
Felix Botner
Created:
2024-10-24 16:23:43 UTC
Size:
8.31 KB
patch
obsolete
>2024-10-24T18:12:51 error message: no support for shared object: -1765328137 >2024-10-24T18:12:51 error message: no support for shared object: -1765328137 >2024-10-24T18:12:51 error message: Can't list DIR caches unless its the default type: -1765328185 >2024-10-24T18:12:51 error message: Can't list DIR caches unless its the default type: -1765328185 >2024-10-24T18:12:51 error message: Reached end of credential caches: -1765328242 >2024-10-24T18:12:51 error message: Reached end of credential caches: -1765328242 >2024-10-24T18:12:51 error message: Principal foobar@FIVE.TWO not found in any credential cache: -1765328243 >2024-10-24T18:12:51 error message: Principal foobar@FIVE.TWO not found in any credential cache: -1765328243 >foobar@FIVE.TWO's Password: >2024-10-24T18:12:53 Adding PA mech: PKINIT(IETF) >2024-10-24T18:12:53 Adding PA mech: PKINIT(win) >2024-10-24T18:12:53 krb5_get_init_creds: loop 1 >2024-10-24T18:12:53 KDC sent 0 patypes >2024-10-24T18:12:53 pa-mech trying: PKINIT(IETF), searching for 17 >2024-10-24T18:12:53 Stepping pa-mech: PKINIT(IETF) >2024-10-24T18:12:53 PA type PKINIT(IETF) returned -1980176627 >2024-10-24T18:12:53 Continue needed for PKINIT(IETF) >2024-10-24T18:12:53 pamech need more stepping >2024-10-24T18:12:53 fast disabled, not doing any fast wrapping >2024-10-24T18:12:53 Trying to find service kdc for realm FIVE.TWO flags 0 >2024-10-24T18:12:53 configuration file for realm FIVE.TWO found >2024-10-24T18:12:53 submitting new requests to new host >2024-10-24T18:12:53 connecting to host: udp 127.0.0.1:88 (127.0.0.1) state=CONNECT tid: 00000001 >2024-10-24T18:12:53 writing packet: udp 127.0.0.1:88 (127.0.0.1) state=CONNECTED tid: 00000001 >2024-10-24T18:12:53 reading packet: udp 127.0.0.1:88 (127.0.0.1) state=WAITING_REPLY tid: 00000001 >2024-10-24T18:12:53 host completed: udp 127.0.0.1:88 (127.0.0.1) state=WAITING_REPLY tid: 00000001 >2024-10-24T18:12:53 error message: Client unknown: -1765328378 >2024-10-24T18:12:53 error message: Client unknown: -1765328378 >2024-10-24T18:12:53 krb5_sendto_context FIVE.TWO done: 0 hosts: 1 packets: 1 wc: 0.004296 nr: 0.000013 kh: 0.000023 tid: 00000001 >2024-10-24T18:12:53 krb5_get_init_creds: loop 2 >2024-10-24T18:12:53 krb5_get_init_creds: processing input >2024-10-24T18:12:53 krb5_get_init_creds: got an KRB-ERROR from KDC >2024-10-24T18:12:53 error message: Client (WELLKNOWN/ANONYMOUS@FIVE.TWO) unknown: -1765328378 >2024-10-24T18:12:53 error message: Client (WELLKNOWN/ANONYMOUS@FIVE.TWO) unknown: -1765328378 >2024-10-24T18:12:53 krb5_get_init_creds: KRB-ERROR -1765328378/Client (WELLKNOWN/ANONYMOUS@FIVE.TWO) unknown >2024-10-24T18:12:53 Preauth failed with optimistic FAST, trying w/o FAST >2024-10-24T18:12:53 Adding PA mech: ENCRYPTED_CHALLENGE >2024-10-24T18:12:53 Adding PA mech: ENCRYPTED_TIMESTAMP >2024-10-24T18:12:53 krb5_get_init_creds: loop 1 >2024-10-24T18:12:53 KDC sent 0 patypes >2024-10-24T18:12:53 dropped pa-mech ENCRYPTED_CHALLENGE since not running under FAST >2024-10-24T18:12:53 pa-mech trying: ENCRYPTED_TIMESTAMP, searching for 2 >2024-10-24T18:12:53 Stepping pa-mech: ENCRYPTED_TIMESTAMP >2024-10-24T18:12:53 TS-ENC: waiting for KDC to set pw-salt/etype_info{,2} >2024-10-24T18:12:53 PA type ENCRYPTED_TIMESTAMP returned -1980176627 >2024-10-24T18:12:53 Continue needed for ENCRYPTED_TIMESTAMP >2024-10-24T18:12:53 pamech need more stepping >2024-10-24T18:12:53 fast disabled, not doing any fast wrapping >2024-10-24T18:12:53 Trying to find service kdc for realm FIVE.TWO flags 0 >2024-10-24T18:12:53 configuration file for realm FIVE.TWO found >2024-10-24T18:12:53 submitting new requests to new host >2024-10-24T18:12:53 connecting to host: udp 127.0.0.1:88 (127.0.0.1) state=CONNECT tid: 00010001 >2024-10-24T18:12:53 writing packet: udp 127.0.0.1:88 (127.0.0.1) state=CONNECTED tid: 00010001 >2024-10-24T18:12:53 reading packet: udp 127.0.0.1:88 (127.0.0.1) state=WAITING_REPLY tid: 00010001 >2024-10-24T18:12:53 host completed: udp 127.0.0.1:88 (127.0.0.1) state=WAITING_REPLY tid: 00010001 >2024-10-24T18:12:53 krb5_sendto_context FIVE.TWO done: 0 hosts: 1 packets: 1 wc: 0.006461 nr: 0.000004 kh: 0.000022 tid: 00010001 >2024-10-24T18:12:53 krb5_get_init_creds: loop 2 >2024-10-24T18:12:53 krb5_get_init_creds: processing input >2024-10-24T18:12:53 krb5_get_init_creds: got an KRB-ERROR from KDC >2024-10-24T18:12:53 Failed to decode METHOD-DATA >2024-10-24T18:12:53 krb5_get_init_creds: KRB-ERROR -1765328361/Password has expired >Password has expired >2024-10-24T18:12:53 Adding PA mech: ENCRYPTED_CHALLENGE >2024-10-24T18:12:53 Adding PA mech: ENCRYPTED_TIMESTAMP >2024-10-24T18:12:53 krb5_get_init_creds: loop 1 >2024-10-24T18:12:53 KDC sent 0 patypes >2024-10-24T18:12:53 dropped pa-mech ENCRYPTED_CHALLENGE since not running under FAST >2024-10-24T18:12:53 pa-mech trying: ENCRYPTED_TIMESTAMP, searching for 2 >2024-10-24T18:12:53 Stepping pa-mech: ENCRYPTED_TIMESTAMP >2024-10-24T18:12:53 TS-ENC: waiting for KDC to set pw-salt/etype_info{,2} >2024-10-24T18:12:53 PA type ENCRYPTED_TIMESTAMP returned -1980176627 >2024-10-24T18:12:53 Continue needed for ENCRYPTED_TIMESTAMP >2024-10-24T18:12:53 pamech need more stepping >2024-10-24T18:12:53 fast disabled, not doing any fast wrapping >2024-10-24T18:12:53 Trying to find service kdc for realm FIVE.TWO flags 0 >2024-10-24T18:12:53 configuration file for realm FIVE.TWO found >2024-10-24T18:12:53 submitting new requests to new host >2024-10-24T18:12:53 connecting to host: udp 127.0.0.1:88 (127.0.0.1) state=CONNECT tid: 00020001 >2024-10-24T18:12:53 writing packet: udp 127.0.0.1:88 (127.0.0.1) state=CONNECTED tid: 00020001 >2024-10-24T18:12:53 reading packet: udp 127.0.0.1:88 (127.0.0.1) state=WAITING_REPLY tid: 00020001 >2024-10-24T18:12:53 host completed: udp 127.0.0.1:88 (127.0.0.1) state=WAITING_REPLY tid: 00020001 >2024-10-24T18:12:53 error message: Need to use PA-ENC-TIMESTAMP/PA-PK-AS-REQ: -1765328359 >2024-10-24T18:12:53 error message: Need to use PA-ENC-TIMESTAMP/PA-PK-AS-REQ: -1765328359 >2024-10-24T18:12:53 krb5_sendto_context FIVE.TWO done: 0 hosts: 1 packets: 1 wc: 0.005370 nr: 0.000004 kh: 0.000027 tid: 00020001 >2024-10-24T18:12:53 krb5_get_init_creds: loop 2 >2024-10-24T18:12:53 krb5_get_init_creds: processing input >2024-10-24T18:12:53 krb5_get_init_creds: got an KRB-ERROR from KDC >2024-10-24T18:12:53 error message: Need to use PA-ENC-TIMESTAMP/PA-PK-AS-REQ: -1765328359 >2024-10-24T18:12:53 error message: Need to use PA-ENC-TIMESTAMP/PA-PK-AS-REQ: -1765328359 >2024-10-24T18:12:53 krb5_get_init_creds: KRB-ERROR -1765328359/Need to use PA-ENC-TIMESTAMP/PA-PK-AS-REQ >2024-10-24T18:12:53 KDC sent 5 patypes >2024-10-24T18:12:53 KDC sent PA-DATA type: 16 (PK_AS_REQ) >2024-10-24T18:12:53 KDC sent PA-DATA type: 15 (PKINIT(win)) >2024-10-24T18:12:53 KDC sent PA-DATA type: 2 (ENCRYPTED_TIMESTAMP) >2024-10-24T18:12:53 KDC sent PA-DATA type: 136 (FX_FAST) >2024-10-24T18:12:53 KDC sent PA-DATA type: 19 (ETYPE_INFO2) >2024-10-24T18:12:53 pa-mech trying: ENCRYPTED_TIMESTAMP, searching for 2 >2024-10-24T18:12:53 Stepping pa-mech: ENCRYPTED_TIMESTAMP >2024-10-24T18:12:53 krb5_get_init_creds: using ENC-TS with enctype 18 >2024-10-24T18:12:53 krb5_get_init_creds: using default_s2k_func: aes256-cts-hmac-sha1-96 (18) >2024-10-24T18:12:53 PA type ENCRYPTED_TIMESTAMP returned -1980176627 >2024-10-24T18:12:53 Continue needed for ENCRYPTED_TIMESTAMP >2024-10-24T18:12:53 pamech need more stepping >2024-10-24T18:12:53 fast disabled, not doing any fast wrapping >2024-10-24T18:12:53 Trying to find service kdc for realm FIVE.TWO flags 0 >2024-10-24T18:12:53 configuration file for realm FIVE.TWO found >2024-10-24T18:12:53 submitting new requests to new host >2024-10-24T18:12:53 connecting to host: udp 127.0.0.1:88 (127.0.0.1) state=CONNECT tid: 00030001 >2024-10-24T18:12:53 writing packet: udp 127.0.0.1:88 (127.0.0.1) state=CONNECTED tid: 00030001 >2024-10-24T18:12:53 reading packet: udp 127.0.0.1:88 (127.0.0.1) state=WAITING_REPLY tid: 00030001 >2024-10-24T18:12:53 host completed: udp 127.0.0.1:88 (127.0.0.1) state=WAITING_REPLY tid: 00030001 >2024-10-24T18:12:53 krb5_sendto_context FIVE.TWO done: 0 hosts: 1 packets: 1 wc: 0.005009 nr: 0.000002 kh: 0.000045 tid: 00030001 >2024-10-24T18:12:53 krb5_get_init_creds: loop 3 >2024-10-24T18:12:53 krb5_get_init_creds: processing input >2024-10-24T18:12:53 krb5_get_init_creds: got an KRB-ERROR from KDC >2024-10-24T18:12:53 krb5_get_init_creds: KRB-ERROR -1765328360/Preauthentication failed >2024-10-24T18:12:53 Server sent PA data with KRB-ERROR, so not a pre 1.7 MIT KDC and won't retry w/o ENC-PA-REQ >samba4kinit.inst: Password incorrect
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 15746
: 18483