Сервер сообщает об ошибке err password mismatch

Version: 8.5.4.334
OS/Distro: Ubuntu desktop 16.04 — unity desktop
Issue/Impact: Can’t join domain

PBIS has been working fine since I finally got it working around 6 weeks ago. About a week ago I used clonezilla to clone this machine on which I run pbis, I refer to it as ‘myserver’ though it is running Ubuntu desktop. After cloning onto another computer, I successfully ran the cli-join command on that clone (though there was an issue on the clone yet to be solved, but that isn’t the problem I’m reporting here).

When I replaced the clone with my regular computer (myserver), re-ran the cli-join command, much to my surprise I got the ‘password_mismatch’ error detailed below. I’ve spent several hours exploring this problem eg reading all issue reports here, eg #74 which has a similar error message but different symptoms, #27 which seems more similar though not quite, also tried all of the investigative/solving ideas given to no avail, and #22 leading me to try both removing samba and adding the lines listed in that issue report to the global section. I’ve also looked at several other pages I’ve googled with similar error messages, all to no avail.
Any ideas?
Thanks,
David
PS My best guess at the moment comes from this line in the syslog (also given below) which says it’s using my computer username, not my AD username:

Nov 3 08:02:11 myserver lsass: [LwKrb5GetTgtImpl /builder/src-git/Platform/src/linux/lwadvapi/threaded/krbtgt.c:346] KRB5 Error code: -1765328360 (Message: Preauthentication failed)
Nov 3 08:02:11 myserver lsass: [lsass] The cached machine account password was rejected by the DC.
Nov 3 08:02:11 myserver lsass: [lsass] Failed to validate user for login (name = ‘GIVEN IS MY SERVER USERNAME, NOT MY AD USERNAME’) -> error = 40022, symbol = LW_ERROR_PASSWORD_MISMATCH, client pid = 5851

● lwsmd.service — BeyondTrust PBIS Service Manager

Loaded: loaded (/lib/systemd/system/lwsmd.service; enabled; vendor preset: enabled)
Active: active (running) since Thu 2017-11-02 16:14:59 CDT; 7h ago
Process: 962 ExecStart=/opt/pbis/sbin/lwsmd —start-as-daemon (code=exited, status=0/SUCCESS)
Main PID: 971 (lwsmd)
CGroup: /system.slice/lwsmd.service
├─ 971 /opt/pbis/sbin/lwsmd —start-as-daemon
├─ 993 lw-container lwreg
├─1020 lw-container eventlog
├─1099 lw-container netlogon
├─1125 lw-container lwio
├─1151 lw-container lsass
└─1181 lw-container reapsysl

(repeated several times:) Nov 02 23:00:59 myserver lsass[1151]: [LwKrb5GetTgtImpl /builder/src-git/Platform/src/linux/lwadvapi/threaded/krbtgt.c:346] KRB5 Error code: -1765328360 (Message: Preauthentication failed)
Nov 02 23:00:59 myserver lsass[1151]: [lsass] The cached machine account password was rejected by the DC.

1. /opt/pbis/bin/lwsm list

lwreg running (container: 993)
dcerpc stopped
eventlog running (container: 1020)
lsass running (container: 1151)
lwio running (container: 1125)
netlogon running (container: 1099)
rdr running (io: 1125)
reapsysl running (container: 1181)
usermonitor stopped

1. /opt/pbis/bin/domainjoin-cli query

Error: LW_ERROR_ACCESS_DENIED [code 0x00009cde]
Incorrect access attempt

1. pbis status

I subbed in (my domain) etc for site-specific info

1. /opt/pbis/bin/enum-users
   [if I used «sudo…» on these commands, then command returned nothing and back to prompt]

Failed to enumerate users. Error code 40022 (LW_ERROR_PASSWORD_MISMATCH).
The password is incorrect for the given account

1. attach logs

• /opt/pbis/bin/lwsm set-log-target -p lsass — file /tmp/lsass.log

Error: LW_ERROR_ACCESS_DENIED (40158)
Incorrect access attempt

• /opt/pbis/bin/lwsm set-log-level -p lsass — debug

Error: LW_ERROR_ACCESS_DENIED (40158)
Incorrect access attempt

• attach log
  In syslog I get this repeated many dozens of times each our:

Nov 3 08:02:11 myserver lsass: [LwKrb5GetTgtImpl /builder/src-git/Platform/src/linux/lwadvapi/threaded/krbtgt.c:346] KRB5 Error code: -1765328360 (Message: Preauthentication failed)
Nov 3 08:02:11 myserver lsass: [lsass] The cached machine account password was rejected by the DC.
Nov 3 08:02:11 myserver lsass: [lsass] Failed to validate user for login (name = ‘NOTE:THIS IS MY SERVER USERNAME, NOT MY AD USERNAME‘) -> error = 40022, symbol = LW_ERROR_PASSWORD_MISMATCH, client pid = 5851

Output/Error:
Shown above

Steps to Reproduce:

1. Domainjoin command

sudo /opt/pbis/bin/domainjoin-cli join MYDOMAIN ADusername
Error: LW_ERROR_PASSWORD_MISMATCH [code 0x00009c56]

The password is incorrect for the given account

[and just saw that you fixed the domainjoin-gui and ran that. The popup says that status was «Joined» (but still can’t authenticate at clients) and when I pressed the ‘Leave Domain’ button I got: ERROR_ACCESS_DENIED message.]

Email and password mismatch error on login is a common problem encountered by many users. It occurs when the login credentials that are entered are incorrect or do not match. This error can be frustrating and can prevent users from accessing their email accounts.

Causes of Email and Password Mismatch Error on Login

There are several reasons why users may encounter this error. Some of the common causes include:

• Incorrect email address or password: If the email address and password entered are incorrect, users will not be able to log in to their email account.

• Account hack or hijack: If a user’s email account has been hacked or hijacked, the password may have been changed, leading to the email and password mismatch error.

• Browser cookies: Sometimes cookies stored by the browser may interfere with the login procedure and result in this error.

• Server issues: Occasionally, server problems at the email provider’s end can cause login issues.

How to Fix Email and Password Mismatch Error on Login

Here are some troubleshooting steps that can be followed to fix this error:

1. Double-check the email address and password entered and ensure they are correct.

2. Reset the password: If the email and password mismatch error is caused by an incorrect password, resetting the password can solve the problem. Most email providers have password reset options on their login page.

3. Clear browser cookies: Clearing browser cookies may help solve login errors caused by cookies interfering with the login procedure. This can be done in the settings or preferences section of the web browser being used.

4. Check the email provider’s server status: If the problem is not at the user’s end, it may be the provider’s server causing the issue. In this case, checking the email provider’s social media platforms or website for any updates or notifications on server status can be helpful.

5. Contact customer support: If none of the above steps work, contacting the email provider’s customer support team for assistance is the next best option.

Conclusion

The email and password mismatch error on login can be frustrating, but it can be easily resolved with a few troubleshooting steps. Double-checking the login details, resetting the password, clearing browser cookies, checking server status, and contacting customer support are effective ways to solve this issue. With a little patience and perseverance, users can regain access to their email accounts in no time.

from django.contrib.auth import login
from django.http import HttpResponse
from django.shortcuts import render
from django.contrib.auth.forms import AuthenticationForm, UserCreationForm


def user_login(request):
	if request.method == "POST":
		form = AuthenticationForm()
		if form.is_valid():
			usr = form.get_user()
			login(request, usr)
			return HttpResponse("<h1>good</h1>")
		else:
			return HttpResponse(form.error_messages)
	else:
		form = AuthenticationForm()
		return render(request, "UserAuth/login.html", {"form": form})


def user_register(request):
	if request.method == "POST":
		form = UserCreationForm()
		if form.is_valid():
			usr = form.save()
			login(request, usr)
			return HttpResponse("<h1>good</h1>")
		else:
			return HttpResponse(form.error_messages)

	else:
		form = UserCreationForm()
		return render(request, "UserAuth/register.html", {"form": form})

from django.urls import path
from .views import *

urlpatterns = [
	path("login/", user_login),
	path("register/", user_register),
]

<!doctype html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport"
          content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <title>Log in</title>
</head>
    <body>
    <form method="post">
        {% csrf_token %}
        {{ form.as_p }}
        <button type="submit">Go</button>
    </form>
    </body>
</html>

<!doctype html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport"
          content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <title>Document</title>
</head>
    <body>
    <form method="post">
        {% csrf_token %}
        {{ form.as_p }}
        <button type="submit">Go</button>
    </form>
    </body>
</html>

• 
  Вопрос задан
  
  более двух лет назад
  

• 161 просмотр