Domain Member Server Authentication Failure
After a period of use, the domain member server displays an error when logging in via the graphical interface and Windows SMB. In Windows SMB, when accessing by name:
\files\Public: it reports an incorrect username and password, even though the user has the correct password and access permissions.
When accessing by IP:
\10.16.12.252\files\public: Windows cannot access the share.
When attempting to access the domain member server’s management console, the following error appears:
An error occurred
Internal server error.
{‘msgtype’: 97, ‘msgid’: 2, ‘result’: 49, ‘desc’: ‘Invalid credentials’, ‘ctrls’: }
and in the details:
Traceback (most recent call last):
File “/usr/lib/python3/dist-packages/univention/management/console/ldap.py”, line 159, in getter
raise KeyError()
KeyError
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File “/usr/lib/python3/dist-packages/tornado/web.py”, line 1735, in _execute
result = await result
^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/univention/management/console/resources.py”, line 450, in post
result = await session.authenticate(self.request.body_arguments)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/univention/management/console/session.py”, line 127, in authenticate
self.set_credentials(**result.credentials)
File “/usr/lib/python3/dist-packages/univention/management/console/session.py”, line 154, in set_credentials
self._search_user_dn()
File “/usr/lib/python3/dist-packages/univention/management/console/session.py”, line 165, in _search_user_dn
lo = get_machine_connection(write=False)[0]
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/univention/management/console/ldap.py”, line 115, in get_machine_connection
return connection()
^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/univention/management/console/ldap.py”, line 171, in _decorated
kwargs[loarg], kwargs[poarg] = lo, po = getter()
^^^^^^^^
File “/usr/lib/python3/dist-packages/univention/management/console/ldap.py”, line 161, in getter
conn = connection()
^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/univention/management/console/ldap.py”, line 72, in connection
return _getMachineConnection(**kwargs)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/univention/admin/uldap.py”, line 78, in getMachineConnection
lo = univention.uldap.getMachineConnection(start_tls, ldap_master=ldap_master)
I tried to perform a direct rejoin as root on the domain member server, but without success.
evidence attached
Traceback (most recent call last).txt (4,5,KB)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/univention/uldap.py”, line 150, in getMachineConnection
return access(host=server, port=port, base=ucr[‘ldap/base’], binddn=ucr[‘ldap/hostdn’], bindpw=bindpw, start_tls=start_tls, reconnect=reconnect)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/univention/uldap.py”, line 239, in init
self.__open(ca_certfile)
File “/usr/lib/python3/dist-packages/univention/uldap.py”, line 357, in __open
self.bind(self.binddn, self.bindpw)
File “/usr/lib/python3/dist-packages/univention/uldap.py”, line 166, in _decorated
return func(self, *args, **kwargs)
^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/univention/uldap.py”, line 270, in bind
self.lo.simple_bind_s(self.binddn, self.bindpw)
File “/usr/lib/python3/dist-packages/ldap/ldapobject.py”, line 993, in simple_bind_s
res = self._apply_method_s(SimpleLDAPObject.simple_bind_s,*args,**kwargs)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/ldap/ldapobject.py”, line 976, in _apply_method_s
return func(self,*args,**kwargs)
^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/ldap/ldapobject.py”, line 249, in simple_bind_s
resp_type, resp_data, resp_msgid, resp_ctrls = self.result3(msgid,all=1,timeout=self.timeout)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/ldap/ldapobject.py”, line 543, in result3
resp_type, resp_data, resp_msgid, decoded_resp_ctrls, retoid, retval = self.result4(
^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/ldap/ldapobject.py”, line 553, in result4
ldap_result = self._ldap_call(self._l.result4,msgid,all,timeout,add_ctrls,add_intermediates,add_extop)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/ldap/ldapobject.py”, line 128, in _ldap_call
result = func(*args,**kwargs)
^^^^^^^^^^^^^^^^^^^^
ldap.INVALID_CREDENTIALS: {‘msgtype’: 97, ‘msgid’: 2, ‘result’: 49, ‘desc’: ‘Invalid credentials’, ‘ctrls’: }
video error : https://youtu.be/0beANW412Rc
The currently installed release version is 5.2-5 errata441