Oliver Werner
2016-Sep-22 18:06 UTC
[Samba] Samba Member NT_STATUS_NETWORK_SESSION_EXPIRED
Hi Jermey, I have checked now (when member look work fine) so i get this informations: klist -k /etc/krb5.keytab Keytab name: FILE:/etc/krb5.keytab KVNO Principal ---- -------------------------------------------------------------------------- 1 host/pl0024.hq.kontrast at HQ.KONTRAST 1 host/pl0024.hq.kontrast at HQ.KONTRAST 1 host/pl0024.hq.kontrast at HQ.KONTRAST 1 host/pl0024.hq.kontrast at HQ.KONTRAST 1 host/pl0024.hq.kontrast at HQ.KONTRAST 1 host/pl0024 at HQ.KONTRAST 1 host/pl0024 at HQ.KONTRAST 1 host/pl0024 at HQ.KONTRAST 1 host/pl0024 at HQ.KONTRAST 1 host/pl0024 at HQ.KONTRAST 1 PL0024$@HQ.KONTRAST 1 PL0024$@HQ.KONTRAST 1 PL0024$@HQ.KONTRAST 1 PL0024$@HQ.KONTRAST 1 PL0024$@HQ.KONTRAST 2 host/pl0024.hq.kontrast at HQ.KONTRAST 2 host/pl0024.hq.kontrast at HQ.KONTRAST 2 host/pl0024.hq.kontrast at HQ.KONTRAST 2 host/pl0024.hq.kontrast at HQ.KONTRAST 2 host/pl0024.hq.kontrast at HQ.KONTRAST 2 host/pl0024 at HQ.KONTRAST 2 host/pl0024 at HQ.KONTRAST 2 host/pl0024 at HQ.KONTRAST 2 host/pl0024 at HQ.KONTRAST 2 host/pl0024 at HQ.KONTRAST 2 PL0024$@HQ.KONTRAST 2 PL0024$@HQ.KONTRAST 2 PL0024$@HQ.KONTRAST 2 PL0024$@HQ.KONTRAST 2 PL0024$@HQ.KONTRAST <mailto:PL0024$@HQ.KONTRAST> pl0024:~# klist -A pl0024:~# klist -l Principal name Cache name -------------- ————— pl0024:~# klist klist: Credentials cache file '/tmp/krb5cc_0' not found pl0024:~# more /etc/krb5.conf [libdefaults] default_realm = HQ.KONTRAST dns_lookup_realm = false dns_lookup_kdc = true OLIVER WERNER Systemadministrator> Am 22.09.2016 um 19:06 schrieb Jeremy Allison via samba <samba at lists.samba.org>: > > On Thu, Sep 22, 2016 at 06:14:19PM +0200, Oliver Werner via samba wrote: >> Hi, >> >> After some hours (maybe 8-12h) i can’t connect to my Samba Member (SMB://). >> >> After restarting winbind works fine again. >> >> We using 4.5.0 right now. >> >> I hope the following informations will be enough at this moment > > Seems like your krb5 ticket expired. > > What does klist say ? > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba
Rowland Penny
2016-Sep-22 18:17 UTC
[Samba] Samba Member NT_STATUS_NETWORK_SESSION_EXPIRED
On Thu, 22 Sep 2016 20:06:41 +0200 Oliver Werner via samba <samba at lists.samba.org> wrote:> Hi Jermey, > > I have checked now (when member look work fine) so i get this > informations: > > klist -k /etc/krb5.keytab > Keytab name: FILE:/etc/krb5.keytab > KVNO Principal > ---- > -------------------------------------------------------------------------- > 1 host/pl0024.hq.kontrast at HQ.KONTRAST 1 > host/pl0024.hq.kontrast at HQ.KONTRAST 1 > host/pl0024.hq.kontrast at HQ.KONTRAST 1 > host/pl0024.hq.kontrast at HQ.KONTRAST 1 > host/pl0024.hq.kontrast at HQ.KONTRAST 1 host/pl0024 at HQ.KONTRAST > 1 host/pl0024 at HQ.KONTRAST > 1 host/pl0024 at HQ.KONTRAST > 1 host/pl0024 at HQ.KONTRAST > 1 host/pl0024 at HQ.KONTRAST > 1 PL0024$@HQ.KONTRAST > 1 PL0024$@HQ.KONTRAST > 1 PL0024$@HQ.KONTRAST > 1 PL0024$@HQ.KONTRAST > 1 PL0024$@HQ.KONTRAST > 2 host/pl0024.hq.kontrast at HQ.KONTRAST > 2 host/pl0024.hq.kontrast at HQ.KONTRAST > 2 host/pl0024.hq.kontrast at HQ.KONTRAST > 2 host/pl0024.hq.kontrast at HQ.KONTRAST > 2 host/pl0024.hq.kontrast at HQ.KONTRAST > 2 host/pl0024 at HQ.KONTRAST > 2 host/pl0024 at HQ.KONTRAST > 2 host/pl0024 at HQ.KONTRAST > 2 host/pl0024 at HQ.KONTRAST > 2 host/pl0024 at HQ.KONTRAST > 2 PL0024$@HQ.KONTRAST > 2 PL0024$@HQ.KONTRAST > 2 PL0024$@HQ.KONTRAST > 2 PL0024$@HQ.KONTRAST > 2 PL0024$@HQ.KONTRAST <mailto:PL0024$@HQ.KONTRAST> > > > pl0024:~# klist -A > pl0024:~# klist -l > Principal name Cache name > -------------- ————— > > pl0024:~# klist > klist: Credentials cache file '/tmp/krb5cc_0' not found > > pl0024:~# more /etc/krb5.conf > [libdefaults] > default_realm = HQ.KONTRAST > dns_lookup_realm = false > dns_lookup_kdc = true > OLIVER WERNERUnless you have run 'kinit Administrator' there wont be one, are there any kerberos caches in /tmp ? Rowland
Oliver Werner
2016-Sep-23 05:25 UTC
[Samba] Samba Member NT_STATUS_NETWORK_SESSION_EXPIRED
hi, now after 10 hours my samba has the next crash and need to restart winbind. Here are the list/kinit: # before kinit pl0024:~# klist klist: Credentials cache file '/tmp/krb5cc_0' not found pl0024:~# kinit Administrator Password for Administrator at HQ.KONTRAST: pl0024:~# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: Administrator at HQ.KONTRAST Valid starting Expires Service principal 23.09.2016 07:21:04 23.09.2016 17:21:04 krbtgt/HQ.KONTRAST at HQ.KONTRAST renew until 24.09.2016 07:20:56 thats the only one kerberos cache file in /tmp right now. looks like kerberos does not renew the ticket :(? OLIVER WERNER Systemadministrator Kontrast Communication Services GmbH Grafenberger Allee 100, 40237 Düsseldorf, Germany Fon +49-211-91505-500 Fax +49-211-91505-530 www.kontrast.de <http://www.kontrast.de/> Amtsgericht Düsseldorf: HRB 26934 Geschäftsführer: Joachim Fischer, Anja Grote-Lutter, Leontine van der Vlist <https://www.facebook.com/kontrast.communication> <https://twitter.com/KONTRAST_de> <http://www.xing.com/companies/kontrastcommunicationservicesgmbh> <http://www.linkedin.com/company/kontrast-communication-services-gmbh> <https://vimeo.com/kontrastcs> <http://instagram.com/kontrast_de> Note: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Please consider the environment and only print this if required.> Am 22.09.2016 um 20:17 schrieb Rowland Penny via samba <samba at lists.samba.org>: > > Unless you have run 'kinit Administrator' there wont be one