samba - Oct 2015 - net ads info: failed to get server's current time

Hi all,
We're having issues with Samba at work. I've searched a bit and the only
thing that have caught my eye is this: when I run the 'net ads info'
command on our DC --we have a Debian on which samba4 is installed and
configured as a AD DC-- I have the message "Failed to get server's
current time!", and "Server time: Thu, 01 Jan 1970 01:00:00 CET".

The thing is that if I run the 'date' command, it gives me the correct
date and time. I've checked ntpd and it looks alright too.

I've tried running 'net time set -S ipOfTheDC' thinking it would
maybe
set the time correctly with the output of the 'date' command but it
didn't.

Also, but I think this is a known issue, if I run 'net time' I have a
segfault.

Does anybody have an idea of what is going on ? I'm pretty sure
something's wrong here, but I may be wrong too...

Thanks

Guy-Laurent

On 21/10/15 18:35, Guy-Laurent Subri wrote:
> Hi all,
> We're having issues with Samba at work. I've searched a bit and the
only
> thing that have caught my eye is this: when I run the 'net ads
info'
> command on our DC --we have a Debian on which samba4 is installed and
> configured as a AD DC-- I have the message "Failed to get server's
> current time!", and "Server time: Thu, 01 Jan 1970 01:00:00
CET".
It works for me on a Debian 4.1.17 DC, so you may have something 
mis-configured, have you altered the smb.conf in any way ? do you have 
ntp installed and configured correctly ?

Rowland
>
> The thing is that if I run the 'date' command, it gives me the
correct
> date and time. I've checked ntpd and it looks alright too.
>
> I've tried running 'net time set -S ipOfTheDC' thinking it
would maybe
> set the time correctly with the output of the 'date' command but it
> didn't.
>
> Also, but I think this is a known issue, if I run 'net time' I have
a
> segfault.
>
> Does anybody have an idea of what is going on ? I'm pretty sure
> something's wrong here, but I may be wrong too...
>
> Thanks
>
> Guy-Laurent
>

On Wed, Oct 21, 2015 at 07:06:33PM +0100, Rowland Penny
wrote:
>On 21/10/15 18:35, Guy-Laurent Subri wrote:
>> Hi all,
>> We're having issues with Samba at work. I've searched a bit and
the only
>> thing that have caught my eye is this: when I run the 'net ads
info'
>> command on our DC --we have a Debian on which samba4 is installed and
>> configured as a AD DC-- I have the message "Failed to get
server's
>> current time!", and "Server time: Thu, 01 Jan 1970 01:00:00
CET".
>
>It works for me on a Debian 4.1.17 DC, so you may have something
>mis-configured, have you altered the smb.conf in any way ?
I don't think the modifications I did to smb.conf are relevant enough to
cause problem, but here's our smb.conf, just in case:

# Global parameters
[global]
    workgroup = TRS-CH
    realm = TRS-CH.COM
    netbios name = PDC
    server role = active directory domain controller
    server services = +s3fs, +rpc, +nbt, +wrepl, +ldap, +cldap, +kdc, +drepl,
                        +winbind, +ntp_signd, +kcc, +dnsupdate 

[netlogon]
   path = /var/lib/samba/sysvol/trs-ch.com/scripts
   read only = No

[sysvol]
   path = /var/lib/samba/sysvol
   read only = No
>do you have ntp installed and configured correctly ?
Yes, I have it installed and everything works fine.

I also already tested the DNS by running the commands described here:
https://wiki.samba.org/index.php/Setup_a_Samba_Active_Directory_Domain_Controller
Everything is reachable.

I tested kerberos by doing:
'kinit administrator at TRS-CH.COM'
It showed up when I did 'klist'.

Do you need more information ?

Thanks !
Cheers, 

Guy-Laurent Subri