Tranquil IT Forum

Published: **April 17, 2024 - 11:45 AM**

Good morning,

WAPT2.5 / Debian 12 Bookworm

The problem I'm describing occurs on my production Windows domain controller + WAPT 2.5
I have also just installed a Hyper-V on a new test domain controller under Windows Server 2022 and a fresh installation of Debian 12 / WAPT 2.5 and I am observing the same problem.

Following @sfonteneau's recommendations, I used the libnginx-mod-http-auth-spnego package which can be found here:
https://wapt.tranquil.it/debian/wapt-2. ... th-spnego/

I'm not getting any updates from my WPAT server "srv-wapt" in the "prosioning" folder I created. I followed the It-Connect tutorial, which I had already used for WAPT 2.3.

I even tested with another organizational unit folder (I gave the rights to the "wapt" account on both folders (delegation of control for the wapt account with only objects of type "computers" with creation/deletion in "create" permissions for all child objects).

When I enter my kinit wapt (+password): no error
Then Klist correctly gives me the Kerberos ticket for the wapt account:

Code: Select all

root@srv-wapt:~# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: wapt@ADTEST.LOCAL

Valid starting       Expires              Service principal
17/04/2024 11:14:59  17/04/2024 21:14:59  krbtgt/ADTEST.LOCAL@ADTEST.LOCAL
        renew until 18/04/2024 11:14:52
17/04/2024 11:16:54  17/04/2024 21:14:59  ldap/serv2022adtest.adtest.local@
        renew until 18/04/2024 11:14:52
        Ticket server: ldap/serv2022adtest.adtest.local@ADTEST.LOCAL
17/04/2024 11:16:54  17/04/2024 11:18:54  kadmin/changepw@ADTEST.LOCAL
        renew until 17/04/2024 11:18:54

Next, I enter the two commands:

Code: Select all

msktutil --server Serv2022ADTEST.adtest.local --precreate --host $(hostname) -b ou=Provisioning,dc=adtest,dc=local --service HTTP --description "host account for wapt server" --enctypes 24 -N

Then :

Code: Select all

msktutil --server Serv2022ADTEST.adtest.local --auto-update --keytab /etc/nginx/http-krb5.keytab --host $(hostname) -N

And nothing happens in the "provisioning" folder or any other test folder (even though I've done it before with WAPT 2.3). I'm waiting for the srv-wapt machine to register there with the description "host account for wapt server"

If I try to go a little further (installing Waptconsole on a Windows machine), I log in to the "waptconsole" configuration, the server address is OK, the username and password are correct, and I then get this error message:

If anyone has any leads, I'm all ears.

THANKS.

Gregory.

Published: **April 23, 2024 - 10:52 AM**

Hello everyone,

For your information, when I talk about retrieving the WAPT server name, I followed the following tutorial from It-connect:

https://www.it-connect.fr/installer-wap ... logiciels/

It uses the same information found here to create the HTTP Keytab:
https://www.wapt.fr/fr/doc-2.5/wapt-sec ... entication

He simply added the following to the command:

Code: Select all

sudo msktutil --server DOMAIN_CONTROLER --precreate --host $(hostname) -b cn=computers --service HTTP --description "host account for wapt server" --enctypes 24 -N

An OR partition to separate it and place it within a "Provisioning" OR, preventing it from going directly into Computer, if I understand correctly. Which, on my system, looks like this:

Code: Select all

msktutil --server Serv2022ADTEST.adtest.local --precreate --host $(hostname) -b ou=Provisioning, dc=adtest,dc=local --service HTTP --description "host account for wapt server" --enctypes 24 -N

If this resonates with anyone, I don't see where I could have gone wrong so far.

THANKS,

Gregory.

Tranquil IT Forum

No results were found in the Active Directory after the mskutil command

No results were found in the Active Directory after the mskutil command

Re: No results appearing in AD directory after mskutil command