Hi *, I use samba 3.2.3 actually and have problems to switch between two nodes in a cluster in an active directory environment. I know of CTDB but I want to keep it simple and so I use a shared folder for the .tdb files. But it does not work since samba 3.2 anymore. After switching from one node to another I have to delete the .tdb files and join again to the domain to have access to samba. What I'm doing wrong here? Thanks and regards, Aleksander
are you sure that the uid and gid of samba is the item on the node? Aleksander Gudalo ha scritto:> Hi *, > > I use samba 3.2.3 actually and have problems to switch between two > nodes in a cluster in an active directory environment. I know of CTDB > but I want to keep it simple and so I use a shared folder for the .tdb > files. > But it does not work since samba 3.2 anymore. After switching from one > node to another I have to delete the .tdb files and join again to the > domain to have access to samba. > What I'm doing wrong here? > > Thanks and regards, > Aleksander >
Bruno La Torre wrote:> are you sure that the uid and gid of samba is the item on the node?The permission mask of the item is set to 777. "wbinfo -u" did not work after changing the node and I get this error output in the logfiles: ... [2008/10/15 11:38:57, 1] smbd/sesssetup.c:reply_spnego_kerberos(350) Failed to verify incoming ticket with error NT_STATUS_LOGON_FAILURE! ... [2008/10/15 11:38:56, 1] winbindd/idmap_ldap.c:idmap_ldap_allocate_id(504) Failed to allocate new gidNumber. smbldap_modify() failed. ... [2008/10/15 11:38:51, 1] winbindd/winbindd_ads.c:ads_cached_connection(127) ads_connect for domain TEST failed: Preauthentication failed [2008/10/15 11:43:51, 0] libsmb/cliconnect.c:cli_session_setup_spnego(858) Kinit failed: Preauthentication failed ... [2008/10/15 11:38:51, 1] winbindd/winbindd_ads.c:ads_cached_connection(127) ads_connect for domain TEST failed: Preauthentication failed [2008/10/15 11:43:51, 0] libsmb/cliconnect.c:cli_session_setup_spnego(858) Kinit failed: Preauthentication failed
Each computer account have a SID. The ADS server cannot accept a client which have a other SID than the SID of registred client. And also I think that you cannot have both SID (actif) on the network. I have a cluster PDC, one is actif (samba running) and the other is standby (samba is not running) and these servers have the same SID. ----------------------------------- St?phane PURNELLE stephane.purnelle@corman.be Service Informatique Corman S.A. Tel : 00 32 087/342467 samba-bounces+stephane.purnelle=corman.be@lists.samba.org a ?crit sur 15/10/2008 11:51:38 :> Bruno La Torre wrote: > > are you sure that the uid and gid of samba is the item on the node? > > The permission mask of the item is set to 777. > "wbinfo -u" did not work after changing the node and I get this error > output in the logfiles: > > ... > [2008/10/15 11:38:57, 1] smbd/sesssetup.c:reply_spnego_kerberos(350) > Failed to verify incoming ticket with error NT_STATUS_LOGON_FAILURE! > > ... > [2008/10/15 11:38:56, 1]winbindd/idmap_ldap.c:idmap_ldap_allocate_id(504)> Failed to allocate new gidNumber. smbldap_modify() failed. > > ... > [2008/10/15 11:38:51, 1]winbindd/winbindd_ads.c:ads_cached_connection(127)> ads_connect for domain TEST failed: Preauthentication failed > [2008/10/15 11:43:51, 0]libsmb/cliconnect.c:cli_session_setup_spnego(858)> Kinit failed: Preauthentication failed > > ... > [2008/10/15 11:38:51, 1]winbindd/winbindd_ads.c:ads_cached_connection(127)> ads_connect for domain TEST failed: Preauthentication failed > [2008/10/15 11:43:51, 0]libsmb/cliconnect.c:cli_session_setup_spnego(858)> Kinit failed: Preauthentication failed > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/listinfo/samba