[2023/01/25 16:43:29.062573, 3] ../../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: AS-REQ z3@MYDOMAIN from ipv4:10.42.0.5:49789 for krbtgt/MYDOMAIN@MYDOMAIN [2023/01/25 16:43:29.064144, 3] ../../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: Client sent patypes: 128 [2023/01/25 16:43:29.064175, 3] ../../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: Looking for PKINIT pa-data -- z3@MYDOMAIN [2023/01/25 16:43:29.064200, 3] ../../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: Looking for ENC-TS pa-data -- z3@MYDOMAIN [2023/01/25 16:43:29.064230, 3] ../../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: No preauth found, returning PREAUTH-REQUIRED -- z3@MYDOMAIN [2023/01/25 16:43:29.064476, 3] ../../source4/smbd/service_stream.c:67(stream_terminate_connection) stream_terminate_connection: Terminating connection - 'kdc_tcp_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED' [2023/01/25 16:43:29.073935, 3] ../../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: AS-REQ z3@MYDOMAIN from ipv4:10.42.0.5:49790 for krbtgt/MYDOMAIN@MYDOMAIN [2023/01/25 16:43:29.076604, 3] ../../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: Client sent patypes: encrypted-timestamp, 128 [2023/01/25 16:43:29.076641, 3] ../../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: Looking for PKINIT pa-data -- z3@MYDOMAIN [2023/01/25 16:43:29.076659, 3] ../../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: Looking for ENC-TS pa-data -- z3@MYDOMAIN [2023/01/25 16:43:29.076703, 3] ../../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: ENC-TS Pre-authentication succeeded -- z3@MYDOMAIN using aes256-cts-hmac-sha1-96 [2023/01/25 16:43:29.076750, 3] ../../auth/auth_log.c:635(log_authentication_event_human_readable) Auth: [Kerberos KDC,ENC-TS Pre-authentication] user [(null)]\[z3@MYDOMAIN] at [Wed, 25 Jan 2023 16:43:29.076736 CET] with [aes256-cts-hmac-sha1-96] status [NT_STATUS_OK] workstation [(null)] remote host [ipv4:10.42.0.5:49790] became [MYDOMAIN]\[z3] [S-1-5-21-2881346579-1737490813-1042431440-11652]. local host [NULL] {"timestamp": "2023-01-25T16:43:29.076832+0100", "type": "Authentication", "Authentication": {"version": {"major": 1, "minor": 2}, "eventId": 4624, "logonId": "9a6ba125c2a4aa8b", "logonType": 3, "status": "NT_STATUS_OK", "localAddress": null, "remoteAddress": "ipv4:10.42.0.5:49790", "serviceDescription": "Kerberos KDC", "authDescription": "ENC-TS Pre-authentication", "clientDomain": null, "clientAccount": "z3@MYDOMAIN", "workstation": null, "becameAccount": "z3", "becameDomain": "MYDOMAIN", "becameSid": "S-1-5-21-2881346579-1737490813-1042431440-11652", "mappedAccount": "z3", "mappedDomain": "MYDOMAIN", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "aes256-cts-hmac-sha1-96", "duration": 2928}} [2023/01/25 16:43:29.108151, 3] ../../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: AS-REQ authtime: 2023-01-25T16:43:29 starttime: unset endtime: 2023-01-26T02:43:29 renew till: 2023-02-01T16:43:29 [2023/01/25 16:43:29.108194, 3] ../../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: Client supported enctypes: aes256-cts-hmac-sha1-96, aes128-cts-hmac-sha1-96, arcfour-hmac-md5, 24, -135, 3, using aes256-cts-hmac-sha1-96/aes256-cts-hmac-sha1-96 [2023/01/25 16:43:29.108211, 3] ../../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: Requested flags: renewable-ok, canonicalize, renewable, forwardable [2023/01/25 16:43:29.108594, 3] ../../source4/smbd/service_stream.c:67(stream_terminate_connection) stream_terminate_connection: Terminating connection - 'kdc_tcp_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED' [2023/01/25 16:43:29.110031, 3] ../../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: TGS-REQ z3@MYDOMAIN.LAN from ipv4:10.42.0.5:49791 for host/windows-1.mydomain.lan@MYDOMAIN.LAN [canonicalize, renewable, forwardable] [2023/01/25 16:43:29.114752, 3] ../../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: TGS-REQ authtime: 2023-01-25T16:43:29 starttime: 2023-01-25T16:43:29 endtime: 2023-01-26T02:43:29 renew till: 2023-02-01T16:43:29 [2023/01/25 16:43:29.115300, 3] ../../source4/smbd/service_stream.c:67(stream_terminate_connection) stream_terminate_connection: Terminating connection - 'kdc_tcp_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED' [2023/01/25 16:43:29.173135, 3] ../../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: TGS-REQ z3@MYDOMAIN.LAN from ipv4:10.42.0.5:49792 for LDAP/srv.mydomain.lan/mydomain.lan@MYDOMAIN.LAN [renewable, forwardable] [2023/01/25 16:43:29.174370, 2] ../../source4/kdc/db-glue.c:641(samba_kdc_message2entry_keys) Unsupported keytype ignored - type 3 [2023/01/25 16:43:29.174398, 2] ../../source4/kdc/db-glue.c:641(samba_kdc_message2entry_keys) Unsupported keytype ignored - type 1 [2023/01/25 16:43:29.176702, 3] ../../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: TGS-REQ authtime: 2023-01-25T16:43:29 starttime: 2023-01-25T16:43:29 endtime: 2023-01-26T02:43:29 renew till: 2023-02-01T16:43:29 [2023/01/25 16:43:29.177179, 3] ../../source4/smbd/service_stream.c:67(stream_terminate_connection) stream_terminate_connection: Terminating connection - 'kdc_tcp_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED' [2023/01/25 16:43:29.178290, 3] ../../lib/ldb-samba/ldb_wrap.c:332(ldb_wrap_connect) ldb_wrap open of secrets.ldb [2023/01/25 16:43:29.181100, 3] ../../lib/ldb-samba/ldb_wrap.c:332(ldb_wrap_connect) ldb_wrap open of privilege.ldb [2023/01/25 16:43:29.193622, 3] ../../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: TGS-REQ z3@MYDOMAIN.LAN from ipv4:10.42.0.5:49793 for cifs/SRV@MYDOMAIN.LAN [canonicalize, renewable, forwardable] [2023/01/25 16:43:29.195094, 2] ../../source4/kdc/db-glue.c:641(samba_kdc_message2entry_keys) Unsupported keytype ignored - type 3 [2023/01/25 16:43:29.195125, 2] ../../source4/kdc/db-glue.c:641(samba_kdc_message2entry_keys) Unsupported keytype ignored - type 1 [2023/01/25 16:43:29.197116, 3] ../../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: TGS-REQ authtime: 2023-01-25T16:43:29 starttime: 2023-01-25T16:43:29 endtime: 2023-01-26T02:43:29 renew till: 2023-02-01T16:43:29 [2023/01/25 16:43:29.197595, 3] ../../source4/smbd/service_stream.c:67(stream_terminate_connection) stream_terminate_connection: Terminating connection - 'kdc_tcp_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED' [2023/01/25 16:43:29.198750, 3] ../../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: TGS-REQ z3@MYDOMAIN.LAN from ipv4:10.42.0.5:49794 for krbtgt/MYDOMAIN.LAN@MYDOMAIN.LAN [renewable-ok, canonicalize, renewable, forwarded, forwardable] [2023/01/25 16:43:29.201107, 3] ../../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: TGS-REQ authtime: 2023-01-25T16:43:29 starttime: 2023-01-25T16:43:29 endtime: 2023-01-26T02:43:29 renew till: 2023-02-01T16:43:29 [2023/01/25 16:43:29.201450, 3] ../../source4/smbd/service_stream.c:67(stream_terminate_connection) stream_terminate_connection: Terminating connection - 'kdc_tcp_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED' [2023/01/25 16:43:30.128476, 3] ../../lib/ldb-samba/ldb_wrap.c:332(ldb_wrap_connect) ldb_wrap open of secrets.ldb [2023/01/25 16:43:30.131790, 3] ../../lib/ldb-samba/ldb_wrap.c:332(ldb_wrap_connect) ldb_wrap open of privilege.ldb [2023/01/25 16:43:30.139826, 3] ../../lib/ldb-samba/ldb_wrap.c:332(ldb_wrap_connect) ldb_wrap open of secrets.ldb [2023/01/25 16:43:30.143423, 3] ../../lib/ldb-samba/ldb_wrap.c:332(ldb_wrap_connect) ldb_wrap open of privilege.ldb [2023/01/25 16:43:30.459550, 3] ../../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: TGS-REQ z3@MYDOMAIN.LAN from ipv4:10.42.0.5:49797 for cifs/srv.mydomain.lan/mydomain.lan@MYDOMAIN.LAN [renewable, forwardable] [2023/01/25 16:43:30.460606, 2] ../../source4/kdc/db-glue.c:641(samba_kdc_message2entry_keys) Unsupported keytype ignored - type 3 [2023/01/25 16:43:30.460628, 2] ../../source4/kdc/db-glue.c:641(samba_kdc_message2entry_keys) Unsupported keytype ignored - type 1 [2023/01/25 16:43:30.462303, 3] ../../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: TGS-REQ authtime: 2023-01-25T16:43:29 starttime: 2023-01-25T16:43:30 endtime: 2023-01-26T02:43:29 renew till: 2023-02-01T16:43:29 [2023/01/25 16:43:30.462723, 3] ../../source4/smbd/service_stream.c:67(stream_terminate_connection) stream_terminate_connection: Terminating connection - 'kdc_tcp_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED' [2023/01/25 16:43:30.478286, 3] ../../source4/smbd/service_stream.c:67(stream_terminate_connection) stream_terminate_connection: Terminating connection - 'ldapsrv_call_wait_done: call->wait_recv() - NT_STATUS_LOCAL_DISCONNECT' [2023/01/25 16:43:30.704422, 3] ../../source4/smbd/service_stream.c:67(stream_terminate_connection) stream_terminate_connection: Terminating connection - 'ldapsrv_call_wait_done: call->wait_recv() - NT_STATUS_LOCAL_DISCONNECT' [2023/01/25 16:43:31.198506, 3] ../../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: TGS-REQ z3@MYDOMAIN.LAN from ipv4:10.42.0.5:49799 for ProtectedStorage/srv.mydomain.lan@MYDOMAIN.LAN [canonicalize, renewable, forwardable] [2023/01/25 16:43:31.200110, 2] ../../source4/kdc/db-glue.c:641(samba_kdc_message2entry_keys) Unsupported keytype ignored - type 3 [2023/01/25 16:43:31.200140, 2] ../../source4/kdc/db-glue.c:641(samba_kdc_message2entry_keys) Unsupported keytype ignored - type 1 [2023/01/25 16:43:31.201970, 3] ../../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: TGS-REQ authtime: 2023-01-25T16:43:29 starttime: 2023-01-25T16:43:31 endtime: 2023-01-26T02:43:29 renew till: 2023-02-01T16:43:29 [2023/01/25 16:43:31.202356, 3] ../../source4/smbd/service_stream.c:67(stream_terminate_connection) stream_terminate_connection: Terminating connection - 'kdc_tcp_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED' [2023/01/25 16:43:31.203265, 3] ../../lib/ldb-samba/ldb_wrap.c:332(ldb_wrap_connect) ldb_wrap open of secrets.ldb [2023/01/25 16:43:31.206136, 3] ../../lib/ldb-samba/ldb_wrap.c:332(ldb_wrap_connect) ldb_wrap open of privilege.ldb [2023/01/25 16:43:31.209375, 3] ../../source4/smbd/service_stream.c:67(stream_terminate_connection) stream_terminate_connection: Terminating connection - 'dcesrv: NT_STATUS_CONNECTION_DISCONNECTED' [2023/01/25 16:43:32.723410, 1] ../../source4/dns_server/dns_server.c:578(dns_udp_call_process_done) dns_process returned WERR_INVALID_PARAMETER [2023/01/25 16:43:32.723883, 3] ../../lib/ldb-samba/ldb_wrap.c:332(ldb_wrap_connect) ldb_wrap open of secrets.ldb [2023/01/25 16:43:32.725456, 3] ../../source4/smbd/service_stream.c:67(stream_terminate_connection) stream_terminate_connection: Terminating connection - 'ldapsrv_accept_tls_loop: tstream_tls_accept_recv() - 32:Broken pipe'