samba - Sep 2016 - Samba Member NT_STATUS_NETWORK_SESSION_EXPIRED

hi,

now after 10 hours my samba has the next crash and need to restart winbind.

Here are the list/kinit:

# before kinit
pl0024:~# klist
klist: Credentials cache file '/tmp/krb5cc_0' not found
pl0024:~# kinit Administrator
Password for Administrator at HQ.KONTRAST:
pl0024:~# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: Administrator at HQ.KONTRAST

Valid starting       Expires              Service principal
23.09.2016 07:21:04  23.09.2016 17:21:04  krbtgt/HQ.KONTRAST at HQ.KONTRAST
	renew until 24.09.2016 07:20:56

thats the only one kerberos cache file in /tmp right now.

looks like kerberos does not renew the ticket :(?
OLIVER WERNER
Systemadministrator



 

Kontrast Communication Services GmbH 
Grafenberger Allee 100, 40237 Düsseldorf, Germany

Fon  +49-211-91505-500
Fax  +49-211-91505-530
www.kontrast.de <http://www.kontrast.de/>

Amtsgericht Düsseldorf: HRB 26934
Geschäftsführer: Joachim Fischer, Anja Grote-Lutter, Leontine van der Vlist 

 <https://www.facebook.com/kontrast.communication>    
<https://twitter.com/KONTRAST_de>    
<http://www.xing.com/companies/kontrastcommunicationservicesgmbh>    
<http://www.linkedin.com/company/kontrast-communication-services-gmbh>    
<https://vimeo.com/kontrastcs>    
<http://instagram.com/kontrast_de>

Note: The information contained in this message may be privileged and
confidential and protected from disclosure. If the reader of this message is not
the intended recipient, or an employee or agent responsible for delivering this
message to the intended recipient, you are hereby notified that any
dissemination, distribution or copying of this communication is strictly
prohibited. If you have received this communication in error, please notify us
immediately by replying to the message and deleting it from your computer.

Please consider the environment and only print this if required.

> Am 22.09.2016 um 20:17 schrieb Rowland Penny via samba <samba at
lists.samba.org>:
> 
> Unless you have run 'kinit Administrator' there wont be one

On Fri, 23 Sep 2016 07:25:40 +0200
Oliver Werner <oliver.werner at kontrast.de> wrote:
> hi,
> 
> now after 10 hours my samba has the next crash and need to restart
> winbind.
> 
> Here are the list/kinit:
> 
> # before kinit
> pl0024:~# klist
> klist: Credentials cache file '/tmp/krb5cc_0' not found
> pl0024:~# kinit Administrator
> Password for Administrator at HQ.KONTRAST:
> pl0024:~# klist
> Ticket cache: FILE:/tmp/krb5cc_0
> Default principal: Administrator at HQ.KONTRAST
> 
> Valid starting       Expires              Service principal
> 23.09.2016 07:21:04  23.09.2016 17:21:04
> krbtgt/HQ.KONTRAST at HQ.KONTRAST renew until 24.09.2016 07:20:56
> 
> thats the only one kerberos cache file in /tmp right now.
> 
> looks like kerberos does not renew the ticket :(?
> OLIVER WERNER
> Systemadministrator
> 
failing after 10hrs is very probably kerberos related, you should have
a kerberos cache in /tmp for the machine. Does /etc/krb5.keytab exist ?
Did you have the kereberos lines in smb.conf when you joined the
machine ?

Rowland

Yes the file /etc/krb5.keytab is exists.

You mean this lines?

       dedicated keytab file = /etc/krb5.keytab
       kerberos method = secrets and keytab
       winbind refresh tickets = yes

there was edits when i join the system.
OLIVER WERNER
Systemadministrator



> Am 23.09.2016 um 08:55 schrieb Rowland Penny via samba <samba at
lists.samba.org>:
> 
> On Fri, 23 Sep 2016 07:25:40 +0200
> Oliver Werner <oliver.werner at kontrast.de <mailto:oliver.werner at
kontrast.de>> wrote:
> 
>> hi,
>> 
>> now after 10 hours my samba has the next crash and need to restart
>> winbind.
>> 
>> Here are the list/kinit:
>> 
>> # before kinit
>> pl0024:~# klist
>> klist: Credentials cache file '/tmp/krb5cc_0' not found
>> pl0024:~# kinit Administrator
>> Password for Administrator at HQ.KONTRAST:
>> pl0024:~# klist
>> Ticket cache: FILE:/tmp/krb5cc_0
>> Default principal: Administrator at HQ.KONTRAST
>> 
>> Valid starting       Expires              Service principal
>> 23.09.2016 07:21:04  23.09.2016 17:21:04
>> krbtgt/HQ.KONTRAST at HQ.KONTRAST renew until 24.09.2016 07:20:56
>> 
>> thats the only one kerberos cache file in /tmp right now.
>> 
>> looks like kerberos does not renew the ticket :(?
>> OLIVER WERNER
>> Systemadministrator
>> 
> 
> failing after 10hrs is very probably kerberos related, you should have
> a kerberos cache in /tmp for the machine. Does /etc/krb5.keytab exist ?
> Did you have the kereberos lines in smb.conf when you joined the
> machine ?
> 
> Rowland
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
<https://lists.samba.org/mailman/options/samba>