thr3ads.net - samba - [Samba] Samba 4.8 RODC not working [May 2018]

If this information is useful, please help other people find it:
Share via:

Gaetan SLONGO

2018-May-24 09:30 UTC

[Samba] Samba 4.8 RODC not working

Hi, 




It's my first try to setup RODC using Samba 4.8. We have latest Samba 4.7
environnement with 2 DC and some file servers.
Joining the DC to the domain is OK using samba-tool domain join command. The
domain controller appears in the DC list (MMC)


However, users cannot be authenticated. Samba is running but these ports are
closed :


netbios-ssn 139/tcp # NETBIOS session service 
netbios-ssn 139/udp 
microsoft-ds 445/tcp 
microsoft-ds 445/udp 

Some other ports are available : 



[root at dmzrodc ~]# netstat -tlpn 
Connexions Internet actives (seulement serveurs) 
Proto Recv-Q Send-Q Adresse locale Adresse distante Etat PID/Program name 
tcp 0 0 0.0.0.0:636 0.0.0.0:* LISTEN 23622/samba 
tcp 0 0 0.0.0.0:49152 0.0.0.0:* LISTEN 23619/samba 
tcp 0 0 0.0.0.0:49153 0.0.0.0:* LISTEN 23619/samba 
tcp 0 0 0.0.0.0:49154 0.0.0.0:* LISTEN 23619/samba 
tcp 0 0 0.0.0.0:3268 0.0.0.0:* LISTEN 23622/samba 
tcp 0 0 0.0.0.0:3269 0.0.0.0:* LISTEN 23622/samba 
tcp 0 0 0.0.0.0:389 0.0.0.0:* LISTEN 23622/samba 
tcp 0 0 0.0.0.0:135 0.0.0.0:* LISTEN 23619/samba 
tcp 0 0 0.0.0.0:464 0.0.0.0:* LISTEN 23624/samba 
tcp 0 0 0.0.0.0:53 0.0.0.0:* LISTEN 23632/samba 
tcp 0 0 0.0.0.0:88 0.0.0.0:* LISTEN 23624/samba 






Winbind is not working : 



[root at dmzrodc ~]# wbinfo -u 
could not obtain winbind interface details: WBC_ERR_WINBIND_NOT_AVAILABLE 
could not obtain winbind domain name! 
Error looking up domain users 


Logs are not showing something clear : 





==> /var/log/samba/log.samba <== 
[2018/05/24 11:29:24.038701, 0]
../source4/smbd/process_standard.c:81(sigterm_signal_handler)
sigterm_signal_handler: Exiting pid 23632 on SIGTERM 
[2018/05/24 11:29:25.178372, 0] ../source4/smbd/server.c:466(binary_smbd_main) 
samba version 4.8.2-SerNet-RedHat-10.el7 started. 
Copyright Andrew Tridgell and the Samba Team 1992-2018 
[2018/05/24 11:29:25.369162, 0] ../source4/smbd/server.c:638(binary_smbd_main) 
binary_smbd_main: samba: using 'standard' process model 
[2018/05/24 11:29:25.382292, 0] ../lib/util/become_daemon.c:138(daemon_ready) 
daemon_ready: STATUS=daemon 'samba' finished starting up and ready to
serve connections
[2018/05/24 11:29:25.520009, 0]
../file_server/file_server.c:46(file_server_smbd_done)
file_server smbd daemon died with exit status 1 
[2018/05/24 11:29:25.520167, 0]
../source4/smbd/service_task.c:36(task_server_terminate)
task_server_terminate: task_server_terminate: [smbd child process exited] 
[2018/05/24 11:29:25.530008, 0] ../source4/winbind/winbindd.c:47(winbindd_done) 
winbindd daemon died with exit status 1 
[2018/05/24 11:29:25.530169, 0]
../source4/smbd/service_task.c:36(task_server_terminate)
task_server_terminate: task_server_terminate: [winbindd child process exited] 
[2018/05/24 11:29:26.029093, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: Traceback (most recent call last): 
[2018/05/24 11:29:26.029286, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: File "/usr/sbin/samba_dnsupdate", line 917,
in <module>
[2018/05/24 11:29:26.029317, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: call_rodc_update(d) 
[2018/05/24 11:29:26.029344, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: File "/usr/sbin/samba_dnsupdate", line 714,
in call_rodc_update
[2018/05/24 11:29:26.029375, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: rodc_dns_update(d, t, op) 
[2018/05/24 11:29:26.029402, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: File "/usr/sbin/samba_dnsupdate", line 657,
in rodc_dns_update
[2018/05/24 11:29:26.029428, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: w = winbind.winbind("irpc:winbind_server",
lp)
[2018/05/24 11:29:26.029454, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: samba.NTSTATUSError: (3221225645, 'The named pipe
is not in the connected or closing state.')
[2018/05/24 11:29:26.035872, 0]
../source4/dsdb/dns/dns_update.c:330(dnsupdate_nameupdate_done)
../source4/dsdb/dns/dns_update.c:330: Failed DNS update - with error code 1 




Do you have any idea about what is causing the issue ? 


Thanks ! 
--

Rowland Penny

2018-May-24 18:48 UTC

head link

[Samba] Samba 4.8 RODC not working

On Thu, 24 May 2018 11:30:40 +0200 (CEST)
Gaetan SLONGO via samba <samba at lists.samba.org> wrote:
> Hi, 
> 
> 
> 
> 
> It's my first try to setup RODC using Samba 4.8. We have latest Samba
> 4.7 environnement with 2 DC and some file servers. Joining the DC to
> the domain is OK using samba-tool domain join command. The domain
> controller appears in the DC list (MMC) 
> 
> 
> However, users cannot be authenticated. Samba is running but these
> ports are closed : 
> 
> 
> netbios-ssn 139/tcp # NETBIOS session service 
> netbios-ssn 139/udp 
> microsoft-ds 445/tcp 
> microsoft-ds 445/udp 
> 
> Some other ports are available : 
> 
> 
> 
> [root at dmzrodc ~]# netstat -tlpn 
> Connexions Internet actives (seulement serveurs) 
> Proto Recv-Q Send-Q Adresse locale Adresse distante Etat PID/Program
> name tcp 0 0 0.0.0.0:636 0.0.0.0:* LISTEN 23622/samba 
> tcp 0 0 0.0.0.0:49152 0.0.0.0:* LISTEN 23619/samba 
> tcp 0 0 0.0.0.0:49153 0.0.0.0:* LISTEN 23619/samba 
> tcp 0 0 0.0.0.0:49154 0.0.0.0:* LISTEN 23619/samba 
> tcp 0 0 0.0.0.0:3268 0.0.0.0:* LISTEN 23622/samba 
> tcp 0 0 0.0.0.0:3269 0.0.0.0:* LISTEN 23622/samba 
> tcp 0 0 0.0.0.0:389 0.0.0.0:* LISTEN 23622/samba 
> tcp 0 0 0.0.0.0:135 0.0.0.0:* LISTEN 23619/samba 
> tcp 0 0 0.0.0.0:464 0.0.0.0:* LISTEN 23624/samba 
> tcp 0 0 0.0.0.0:53 0.0.0.0:* LISTEN 23632/samba 
> tcp 0 0 0.0.0.0:88 0.0.0.0:* LISTEN 23624/samba 
> 
> 
> Winbind is not working : 
> 
> [root at dmzrodc ~]# wbinfo -u 
> could not obtain winbind interface details:
> WBC_ERR_WINBIND_NOT_AVAILABLE could not obtain winbind domain name! 
> Error looking up domain users 
Is winbind actually installed ??

Rowland

Andrew Bartlett

2018-May-24 18:54 UTC

head link

[Samba] Samba 4.8 RODC not working

On Thu, 2018-05-24 at 11:30 +0200, Gaetan SLONGO via samba
wrote:> Hi, 
> 
> 
> 
> 
> It's my first try to setup RODC using Samba 4.8. We have latest Samba
4.7 environnement with 2 DC and some file servers.
> Joining the DC to the domain is OK using samba-tool domain join command.
The domain controller appears in the DC list (MMC)
> Winbind is not working : 
> 
> 
> 
> [root at dmzrodc ~]# wbinfo -u 
> could not obtain winbind interface details: WBC_ERR_WINBIND_NOT_AVAILABLE 
> could not obtain winbind domain name! 
> Error looking up domain users 
> 
> 
> Logs are not showing something clear : 
> 
> 
> 
> Do you have any idea about what is causing the issue ? 
> 
I suggest turning up the log level until it becomes clear.

Thanks,

Andrew Bartlett
-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba

Gaetan SLONGO

2018-May-29 08:58 UTC

head link

[Samba] Samba 4.8 RODC not working

Hi, 


Thank your for your answers. 


@Rowland: Yes, Winbind is installed but it seems it is not started (or cannot
start)


@Andrew: Please find extract in log level 4 during a service restart and a
connection test with smbclient from another machine. I hope this could help,
this is not clear to me :





==> /var/log/samba/log.samba <== 
[2018/05/29 10:54:00.173894, 0]
../source4/smbd/process_standard.c:81(sigterm_signal_handler)
sigterm_signal_handler: Exiting pid 23727 on SIGTERM 
[2018/05/29 10:54:01.313993, 0] ../source4/smbd/server.c:466(binary_smbd_main) 
samba version 4.8.2-SerNet-RedHat-10.el7 started. 
Copyright Andrew Tridgell and the Samba Team 1992-2018 
[2018/05/29 10:54:01.314359, 3] ../source4/smbd/server.c:484(binary_smbd_main) 
binary_smbd_main: Becoming a daemon. 
[2018/05/29 10:54:01.317090, 3]
../auth/gensec/gensec_start.c:977(gensec_register)
GENSEC backend 'gssapi_spnego' registered 
[2018/05/29 10:54:01.317142, 3]
../auth/gensec/gensec_start.c:977(gensec_register)
GENSEC backend 'gssapi_krb5' registered 
[2018/05/29 10:54:01.317160, 3]
../auth/gensec/gensec_start.c:977(gensec_register)
GENSEC backend 'gssapi_krb5_sasl' registered 
[2018/05/29 10:54:01.317180, 3]
../auth/gensec/gensec_start.c:977(gensec_register)
GENSEC backend 'spnego' registered 
[2018/05/29 10:54:01.317201, 3]
../auth/gensec/gensec_start.c:977(gensec_register)
GENSEC backend 'schannel' registered 
[2018/05/29 10:54:01.317219, 3]
../auth/gensec/gensec_start.c:977(gensec_register)
GENSEC backend 'naclrpc_as_system' registered 
[2018/05/29 10:54:01.317237, 3]
../auth/gensec/gensec_start.c:977(gensec_register)
GENSEC backend 'sasl-EXTERNAL' registered 
[2018/05/29 10:54:01.317254, 3]
../auth/gensec/gensec_start.c:977(gensec_register)
GENSEC backend 'ntlmssp' registered 
[2018/05/29 10:54:01.317270, 3]
../auth/gensec/gensec_start.c:977(gensec_register)
GENSEC backend 'ntlmssp_resume_ccache' registered 
[2018/05/29 10:54:01.317286, 3]
../auth/gensec/gensec_start.c:977(gensec_register)
GENSEC backend 'http_basic' registered 
[2018/05/29 10:54:01.317305, 3]
../auth/gensec/gensec_start.c:977(gensec_register)
GENSEC backend 'http_ntlm' registered 
[2018/05/29 10:54:01.317326, 3]
../auth/gensec/gensec_start.c:977(gensec_register)
GENSEC backend 'http_negotiate' registered 
[2018/05/29 10:54:01.317346, 3]
../auth/gensec/gensec_start.c:977(gensec_register)
GENSEC backend 'krb5' registered 
[2018/05/29 10:54:01.317361, 3]
../auth/gensec/gensec_start.c:977(gensec_register)
GENSEC backend 'fake_gssapi_krb5' registered 
[2018/05/29 10:54:01.318538, 3]
../source4/smbd/process_model.c:96(register_process_model)
register_process_model: PROCESS_MODEL 'single' registered 
[2018/05/29 10:54:01.318567, 3]
../source4/smbd/process_model.c:96(register_process_model)
register_process_model: PROCESS_MODEL 'standard' registered 
[2018/05/29 10:54:01.318586, 3]
../source4/smbd/process_model.c:96(register_process_model)
register_process_model: PROCESS_MODEL 'prefork' registered 
[2018/05/29 10:54:01.384697, 3] ../source4/auth/ntlm/auth.c:857(auth_register) 
AUTH backend 'sam' registered 
[2018/05/29 10:54:01.384733, 3] ../source4/auth/ntlm/auth.c:857(auth_register) 
AUTH backend 'sam_ignoredomain' registered 
[2018/05/29 10:54:01.384755, 3] ../source4/auth/ntlm/auth.c:857(auth_register) 
AUTH backend 'anonymous' registered 
[2018/05/29 10:54:01.384771, 3] ../source4/auth/ntlm/auth.c:857(auth_register) 
AUTH backend 'winbind' registered 
[2018/05/29 10:54:01.384788, 3] ../source4/auth/ntlm/auth.c:857(auth_register) 
AUTH backend 'name_to_ntstatus' registered 
[2018/05/29 10:54:01.384805, 3] ../source4/auth/ntlm/auth.c:857(auth_register) 
AUTH backend 'unix' registered 
[2018/05/29 10:54:01.505046, 3]
../lib/ldb-samba/ldb_wrap.c:326(ldb_wrap_connect)
ldb_wrap open of privilege.ldb 
[2018/05/29 10:54:01.519262, 0] ../source4/smbd/server.c:638(binary_smbd_main) 
binary_smbd_main: samba: using 'standard' process model 
[2018/05/29 10:54:01.522285, 3]
../source4/rpc_server/dcerpc_server.c:2314(dcerpc_register_ep_server)
DCERPC endpoint server 'rpcecho' registered 
[2018/05/29 10:54:01.522358, 3]
../source4/rpc_server/dcerpc_server.c:2314(dcerpc_register_ep_server)
DCERPC endpoint server 'epmapper' registered 
[2018/05/29 10:54:01.522384, 3]
../source4/rpc_server/dcerpc_server.c:2314(dcerpc_register_ep_server)
DCERPC endpoint server 'remote' registered 
[2018/05/29 10:54:01.522888, 3]
../source4/rpc_server/dcerpc_server.c:2314(dcerpc_register_ep_server)
DCERPC endpoint server 'wkssvc' registered 
[2018/05/29 10:54:01.522918, 3]
../source4/rpc_server/dcerpc_server.c:2314(dcerpc_register_ep_server)
DCERPC endpoint server 'unixinfo' registered 
[2018/05/29 10:54:01.522938, 3]
../source4/rpc_server/dcerpc_server.c:2314(dcerpc_register_ep_server)
DCERPC endpoint server 'samr' registered 
[2018/05/29 10:54:01.522962, 3]
../source4/rpc_server/dcerpc_server.c:2314(dcerpc_register_ep_server)
DCERPC endpoint server 'netlogon' registered 
[2018/05/29 10:54:01.522982, 3]
../source4/rpc_server/dcerpc_server.c:2314(dcerpc_register_ep_server)
DCERPC endpoint server 'dssetup' registered 
[2018/05/29 10:54:01.522997, 3]
../source4/rpc_server/dcerpc_server.c:2314(dcerpc_register_ep_server)
DCERPC endpoint server 'lsarpc' registered 
[2018/05/29 10:54:01.523023, 3]
../source4/rpc_server/dcerpc_server.c:2314(dcerpc_register_ep_server)
DCERPC endpoint server 'backupkey' registered 
[2018/05/29 10:54:01.523044, 3]
../source4/rpc_server/dcerpc_server.c:2314(dcerpc_register_ep_server)
DCERPC endpoint server 'drsuapi' registered 
[2018/05/29 10:54:01.523063, 3]
../source4/rpc_server/dcerpc_server.c:2314(dcerpc_register_ep_server)
DCERPC endpoint server 'browser' registered 
[2018/05/29 10:54:01.523087, 3]
../source4/rpc_server/dcerpc_server.c:2314(dcerpc_register_ep_server)
DCERPC endpoint server 'eventlog6' registered 
[2018/05/29 10:54:01.523110, 3]
../source4/rpc_server/dcerpc_server.c:2314(dcerpc_register_ep_server)
DCERPC endpoint server 'dnsserver' registered 
[2018/05/29 10:54:01.524990, 4]
../source4/rpc_server/dcerpc_server.c:3052(add_socket_rpc_tcp_iface)
Successfully listening on ncacn_ip_tcp endpoint [::]:[49152] for dnsserver
backupkey eventlog6 browser unixinfo dssetup drsuapi lsarpc mgmt
[2018/05/29 10:54:01.525112, 4]
../source4/rpc_server/dcerpc_server.c:3052(add_socket_rpc_tcp_iface)
Successfully listening on ncacn_ip_tcp endpoint [0.0.0.0]:[49152] for dnsserver
backupkey eventlog6 browser unixinfo dssetup drsuapi lsarpc mgmt
[2018/05/29 10:54:01.525480, 4]
../source4/rpc_server/dcerpc_server.c:3052(add_socket_rpc_tcp_iface)
Successfully listening on ncacn_ip_tcp endpoint [::]:[49153] for netlogon mgmt 
[2018/05/29 10:54:01.525599, 4]
../source4/rpc_server/dcerpc_server.c:3052(add_socket_rpc_tcp_iface)
Successfully listening on ncacn_ip_tcp endpoint [0.0.0.0]:[49153] for netlogon
mgmt
[2018/05/29 10:54:01.526166, 4]
../source4/rpc_server/dcerpc_server.c:3052(add_socket_rpc_tcp_iface)
Successfully listening on ncacn_ip_tcp endpoint [::]:[49154] for samr rpcecho
wkssvc mgmt
[2018/05/29 10:54:01.526269, 4]
../source4/rpc_server/dcerpc_server.c:3052(add_socket_rpc_tcp_iface)
Successfully listening on ncacn_ip_tcp endpoint [0.0.0.0]:[49154] for samr
rpcecho wkssvc mgmt
[2018/05/29 10:54:01.526695, 4]
../source4/rpc_server/dcerpc_server.c:3052(add_socket_rpc_tcp_iface)
Successfully listening on ncacn_ip_tcp endpoint [::]:[135] for epmapper mgmt 
[2018/05/29 10:54:01.526805, 4]
../source4/rpc_server/dcerpc_server.c:3052(add_socket_rpc_tcp_iface)
Successfully listening on ncacn_ip_tcp endpoint [0.0.0.0]:[135] for epmapper
mgmt
[2018/05/29 10:54:01.529676, 4]
../source4/lib/socket/interface.c:116(add_interface)
added interface eth0 ip=192.168.19.5 bcast=192.168.19.255 netmask=255.255.255.0 
[2018/05/29 10:54:01.547564, 0] ../lib/util/become_daemon.c:138(daemon_ready) 
daemon_ready: STATUS=daemon 'samba' finished starting up and ready to
serve connections
[2018/05/29 10:54:01.549580, 4]
../source4/lib/socket/interface.c:116(add_interface)
added interface eth0 ip=192.168.19.5 bcast=192.168.19.255 netmask=255.255.255.0 
[2018/05/29 10:54:01.565070, 2]
../source4/dsdb/repl/drepl_partitions.c:119(dreplsrv_load_partitions)
dreplsrv_partition[DC=ForestDnsZones,DC=ads,DC=MYDOMAIN,DC=be] loaded 
[2018/05/29 10:54:01.565165, 2]
../source4/dsdb/repl/drepl_partitions.c:119(dreplsrv_load_partitions)
dreplsrv_partition[DC=DomainDnsZones,DC=ads,DC=MYDOMAIN,DC=be] loaded 
[2018/05/29 10:54:01.565199, 2]
../source4/dsdb/repl/drepl_partitions.c:119(dreplsrv_load_partitions)
dreplsrv_partition[CN=Schema,CN=Configuration,DC=ads,DC=MYDOMAIN,DC=be] loaded 
[2018/05/29 10:54:01.565228, 2]
../source4/dsdb/repl/drepl_partitions.c:119(dreplsrv_load_partitions)
dreplsrv_partition[CN=Configuration,DC=ads,DC=MYDOMAIN,DC=be] loaded 
[2018/05/29 10:54:01.565261, 2]
../source4/dsdb/repl/drepl_partitions.c:119(dreplsrv_load_partitions)
dreplsrv_partition[DC=ads,DC=MYDOMAIN,DC=be] loaded 
[2018/05/29 10:54:01.565288, 4]
../source4/dsdb/repl/drepl_partitions.c:578(dreplsrv_refresh_partition)
dreplsrv_refresh_partition(DC=ads,DC=MYDOMAIN,DC=be) 
[2018/05/29 10:54:01.568733, 4]
../source4/dsdb/repl/drepl_partitions.c:353(dreplsrv_out_connection_attach)
dreplsrv_out_connection_attach(c5675dd9-746c-4940-be0c-aa39f4e7da23._msdcs.ads.MYDOMAIN.be):
create
[2018/05/29 10:54:01.568723, 4]
../source4/lib/socket/interface.c:116(add_interface)
[2018/05/29 10:54:01.568766, 4]
../source4/dsdb/repl/drepl_partitions.c:578(dreplsrv_refresh_partition)
dreplsrv_refresh_partition(CN=Configuration,DC=ads,DC=MYDOMAIN,DC=be) 
added interface eth0 ip=192.168.19.5 bcast=192.168.19.255 netmask=255.255.255.0 
[2018/05/29 10:54:01.569273, 4]
../source4/dsdb/repl/drepl_partitions.c:355(dreplsrv_out_connection_attach)
dreplsrv_out_connection_attach(c5675dd9-746c-4940-be0c-aa39f4e7da23._msdcs.ads.MYDOMAIN.be):
attach
[2018/05/29 10:54:01.569301, 4]
../source4/dsdb/repl/drepl_partitions.c:578(dreplsrv_refresh_partition)
dreplsrv_refresh_partition(CN=Schema,CN=Configuration,DC=ads,DC=MYDOMAIN,DC=be) 
[2018/05/29 10:54:01.575899, 3]
../source4/dsdb/dns/dns_update.c:370(dnsupdate_check_names)
Calling DNS name update script 
[2018/05/29 10:54:01.576506, 2]
../source4/dsdb/kcc/kcc_service.c:127(kccsrv_load_partitions)
kccsrv_partition[CN=Schema,CN=Configuration,DC=ads,DC=MYDOMAIN,DC=be] loaded 
[2018/05/29 10:54:01.576589, 2]
../source4/dsdb/kcc/kcc_service.c:127(kccsrv_load_partitions)
kccsrv_partition[CN=Configuration,DC=ads,DC=MYDOMAIN,DC=be] loaded 
[2018/05/29 10:54:01.576625, 2]
../source4/dsdb/kcc/kcc_service.c:127(kccsrv_load_partitions)
kccsrv_partition[DC=ads,DC=MYDOMAIN,DC=be] loaded 
[2018/05/29 10:54:01.576684, 2]
../source4/dsdb/kcc/kcc_service.c:127(kccsrv_load_partitions)
kccsrv_partition[DC=DomainDnsZones,DC=ads,DC=MYDOMAIN,DC=be] loaded 
[2018/05/29 10:54:01.576743, 2]
../source4/dsdb/kcc/kcc_service.c:127(kccsrv_load_partitions)
kccsrv_partition[DC=ForestDnsZones,DC=ads,DC=MYDOMAIN,DC=be] loaded 
[2018/05/29 10:54:01.576818, 4]
../source4/dsdb/kcc/kcc_periodic.c:589(kccsrv_periodic_schedule)
kccsrv_periodic_schedule(15) scheduled for: Tue May 29 10:54:17 2018 CEST 
[2018/05/29 10:54:01.580001, 4]
../source4/dsdb/repl/drepl_partitions.c:355(dreplsrv_out_connection_attach)
dreplsrv_out_connection_attach(c5675dd9-746c-4940-be0c-aa39f4e7da23._msdcs.ads.MYDOMAIN.be):
attach
[2018/05/29 10:54:01.580036, 4]
../source4/dsdb/repl/drepl_partitions.c:578(dreplsrv_refresh_partition)
dreplsrv_refresh_partition(DC=DomainDnsZones,DC=ads,DC=MYDOMAIN,DC=be) 
[2018/05/29 10:54:01.580458, 3]
../lib/ldb-samba/ldb_wrap.c:326(ldb_wrap_connect)
ldb_wrap open of secrets.ldb 
[2018/05/29 10:54:01.580613, 4]
../source4/dsdb/repl/drepl_partitions.c:355(dreplsrv_out_connection_attach)
dreplsrv_out_connection_attach(c5675dd9-746c-4940-be0c-aa39f4e7da23._msdcs.ads.MYDOMAIN.be):
attach
[2018/05/29 10:54:01.580645, 4]
../source4/dsdb/repl/drepl_partitions.c:578(dreplsrv_refresh_partition)
dreplsrv_refresh_partition(DC=ForestDnsZones,DC=ads,DC=MYDOMAIN,DC=be) 
[2018/05/29 10:54:01.581124, 4]
../source4/dsdb/repl/drepl_partitions.c:355(dreplsrv_out_connection_attach)
dreplsrv_out_connection_attach(c5675dd9-746c-4940-be0c-aa39f4e7da23._msdcs.ads.MYDOMAIN.be):
attach
[2018/05/29 10:54:01.581156, 4]
../source4/dsdb/repl/drepl_periodic.c:89(dreplsrv_periodic_schedule)
dreplsrv_periodic_schedule(15) scheduled for: Tue May 29 10:54:17 2018 CEST 
[2018/05/29 10:54:01.616633, 3]
../source4/dsdb/dns/dns_update.c:385(dnsupdate_check_names)
Calling SPN name update script 
[2018/05/29 10:54:01.623252, 3]
../lib/util/util_runcmd.c:291(samba_runcmd_io_handler)
samba_runcmd_io_handler: Child /usr/sbin/smbd exited 1 
[2018/05/29 10:54:01.623337, 0]
../file_server/file_server.c:46(file_server_smbd_done)
file_server smbd daemon died with exit status 1 
[2018/05/29 10:54:01.623454, 0]
../source4/smbd/service_task.c:36(task_server_terminate)
task_server_terminate: task_server_terminate: [smbd child process exited] 
[2018/05/29 10:54:01.635279, 3]
../lib/util/util_runcmd.c:291(samba_runcmd_io_handler)
samba_runcmd_io_handler: Child /usr/sbin/winbindd exited 1 
[2018/05/29 10:54:01.635375, 0] ../source4/winbind/winbindd.c:47(winbindd_done) 
winbindd daemon died with exit status 1 
[2018/05/29 10:54:01.635491, 0]
../source4/smbd/service_task.c:36(task_server_terminate)
task_server_terminate: task_server_terminate: [winbindd child process exited] 
[2018/05/29 10:54:01.732553, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: Processing section "[netlogon]" 
[2018/05/29 10:54:01.732736, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: Processing section "[sysvol]" 
[2018/05/29 10:54:01.732769, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: pm_process() returned Yes 
[2018/05/29 10:54:01.841550, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: Processing section "[netlogon]" 
[2018/05/29 10:54:01.841631, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: Processing section "[sysvol]" 
[2018/05/29 10:54:01.841662, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: pm_process() returned Yes 
[2018/05/29 10:54:01.841690, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: added interface eth0 ip=192.168.19.5
bcast=192.168.19.255 netmask=255.255.255.0
[2018/05/29 10:54:01.954029, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: ldb_wrap open of secrets.ldb 
[2018/05/29 10:54:01.954105, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: GENSEC backend 'gssapi_spnego' registered 
[2018/05/29 10:54:01.954137, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: GENSEC backend 'gssapi_krb5' registered 
[2018/05/29 10:54:01.954165, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: GENSEC backend 'gssapi_krb5_sasl' registered 
[2018/05/29 10:54:01.954193, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: GENSEC backend 'spnego' registered 
[2018/05/29 10:54:01.954220, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: GENSEC backend 'schannel' registered 
[2018/05/29 10:54:01.954248, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: GENSEC backend 'naclrpc_as_system' registered
[2018/05/29 10:54:01.954276, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: GENSEC backend 'sasl-EXTERNAL' registered 
[2018/05/29 10:54:01.954303, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: GENSEC backend 'ntlmssp' registered 
[2018/05/29 10:54:01.954330, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: GENSEC backend 'ntlmssp_resume_ccache'
registered
[2018/05/29 10:54:01.954358, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: GENSEC backend 'http_basic' registered 
[2018/05/29 10:54:01.954386, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: GENSEC backend 'http_ntlm' registered 
[2018/05/29 10:54:01.954413, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: GENSEC backend 'http_negotiate' registered 
[2018/05/29 10:54:01.954441, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: GENSEC backend 'krb5' registered 
[2018/05/29 10:54:01.954468, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: GENSEC backend 'fake_gssapi_krb5' registered 
[2018/05/29 10:54:01.954496, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: added interface eth0 ip=192.168.19.5
bcast=192.168.19.255 netmask=255.255.255.0
[2018/05/29 10:54:01.954537, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: added interface eth0 ip=192.168.19.5
bcast=192.168.19.255 netmask=255.255.255.0
[2018/05/29 10:54:01.954570, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: added interface eth0 ip=192.168.19.5
bcast=192.168.19.255 netmask=255.255.255.0
[2018/05/29 10:54:01.954598, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: added interface eth0 ip=192.168.19.5
bcast=192.168.19.255 netmask=255.255.255.0
[2018/05/29 10:54:01.954626, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: finddcs: searching for a DC by DNS domain
ADS.MYDOMAIN.BE
[2018/05/29 10:54:01.954660, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: finddcs: looking for SRV records for
_ldap._tcp.ADS.MYDOMAIN.BE
[2018/05/29 10:54:01.954689, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: resolve_lmhosts: Attempting lmhosts lookup for name
_ldap._tcp.ADS.MYDOMAIN.BE<0x0>
[2018/05/29 10:54:01.954717, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: startlmhosts: Can't open lmhosts file
/etc/samba/lmhosts. Error was No such file or directory
[2018/05/29 10:54:01.973124, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: ads_dns_lookup_srv: 2 records returned in the answer
section.
[2018/05/29 10:54:01.988501, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: finddcs: DNS SRV response 0 at
'10.17.253.167'
[2018/05/29 10:54:01.988568, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: finddcs: DNS SRV response 1 at
'10.17.253.164'
[2018/05/29 10:54:01.988600, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: finddcs: performing CLDAP query on 10.17.253.167 
[2018/05/29 10:54:01.993235, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: finddcs: Found matching DC 10.17.253.167 with
server_type=0x000003fd
[2018/05/29 10:54:01.993289, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: Using binding ncacn_ip_tcp:dc.ads.MYDOMAIN.be[,seal] 
[2018/05/29 10:54:01.993320, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: Mapped to DCERPC endpoint 135 
[2018/05/29 10:54:01.993348, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: added interface eth0 ip=192.168.19.5
bcast=192.168.19.255 netmask=255.255.255.0
[2018/05/29 10:54:01.993376, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: added interface eth0 ip=192.168.19.5
bcast=192.168.19.255 netmask=255.255.255.0
[2018/05/29 10:54:01.993404, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: resolve_lmhosts: Attempting lmhosts lookup for name
dc.ads.MYDOMAIN.be<0x20>
[2018/05/29 10:54:01.993432, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: startlmhosts: Can't open lmhosts file
/etc/samba/lmhosts. Error was No such file or directory
[2018/05/29 10:54:02.009080, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: Mapped to DCERPC endpoint 49152 
[2018/05/29 10:54:02.009140, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: added interface eth0 ip=192.168.19.5
bcast=192.168.19.255 netmask=255.255.255.0
[2018/05/29 10:54:02.009172, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: added interface eth0 ip=192.168.19.5
bcast=192.168.19.255 netmask=255.255.255.0
[2018/05/29 10:54:02.009200, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: resolve_lmhosts: Attempting lmhosts lookup for name
dc.ads.MYDOMAIN.be<0x20>
[2018/05/29 10:54:02.009227, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: startlmhosts: Can't open lmhosts file
/etc/samba/lmhosts. Error was No such file or directory
[2018/05/29 10:54:02.034021, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: Received smb_krb5 packet of length 255 
[2018/05/29 10:54:02.062185, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: Received smb_krb5 packet of length 1313 
[2018/05/29 10:54:02.088269, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: Received smb_krb5 packet of length 1380 
[2018/05/29 10:54:02.112539, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_spnupdate: Received smb_krb5 packet of length 1346 
[2018/05/29 10:54:02.137820, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: ldb_wrap open of secrets.ldb 
[2018/05/29 10:54:02.140335, 3]
../lib/util/util_runcmd.c:291(samba_runcmd_io_handler)
samba_runcmd_io_handler: Child /usr/sbin/samba_spnupdate exited 0 
[2018/05/29 10:54:02.140402, 3]
../source4/dsdb/dns/dns_update.c:355(dnsupdate_spnupdate_done)
Completed SPN update check OK 
[2018/05/29 10:54:02.151366, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: Received smb_krb5 packet of length 255 
[2018/05/29 10:54:02.179466, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: Received smb_krb5 packet of length 1297 
[2018/05/29 10:54:02.187099, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: GENSEC backend 'gssapi_spnego' registered 
[2018/05/29 10:54:02.187155, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: GENSEC backend 'gssapi_krb5' registered 
[2018/05/29 10:54:02.187186, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: GENSEC backend 'gssapi_krb5_sasl' registered 
[2018/05/29 10:54:02.187214, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: GENSEC backend 'spnego' registered 
[2018/05/29 10:54:02.187241, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: GENSEC backend 'schannel' registered 
[2018/05/29 10:54:02.187268, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: GENSEC backend 'naclrpc_as_system' registered
[2018/05/29 10:54:02.187296, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: GENSEC backend 'sasl-EXTERNAL' registered 
[2018/05/29 10:54:02.187328, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: GENSEC backend 'ntlmssp' registered 
[2018/05/29 10:54:02.187357, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: GENSEC backend 'ntlmssp_resume_ccache'
registered
[2018/05/29 10:54:02.187384, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: GENSEC backend 'http_basic' registered 
[2018/05/29 10:54:02.187411, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: GENSEC backend 'http_ntlm' registered 
[2018/05/29 10:54:02.187438, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: GENSEC backend 'http_negotiate' registered 
[2018/05/29 10:54:02.187465, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: GENSEC backend 'krb5' registered 
[2018/05/29 10:54:02.187493, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: GENSEC backend 'fake_gssapi_krb5' registered 
[2018/05/29 10:54:02.203699, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: Received smb_krb5 packet of length 1330 
[2018/05/29 10:54:02.204956, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: Traceback (most recent call last): 
[2018/05/29 10:54:02.205010, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: File "/usr/sbin/samba_dnsupdate", line 917,
in <module>
[2018/05/29 10:54:02.206032, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: call_rodc_update(d) 
[2018/05/29 10:54:02.206080, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: File "/usr/sbin/samba_dnsupdate", line 714,
in call_rodc_update
[2018/05/29 10:54:02.206116, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: rodc_dns_update(d, t, op) 
[2018/05/29 10:54:02.206144, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: File "/usr/sbin/samba_dnsupdate", line 657,
in rodc_dns_update
[2018/05/29 10:54:02.206172, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: w = winbind.winbind("irpc:winbind_server",
lp)
[2018/05/29 10:54:02.206200, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: samba.NTSTATUSError: (3221225645, 'The named pipe
is not in the connected or closing state.')
[2018/05/29 10:54:02.219740, 3]
../lib/util/util_runcmd.c:291(samba_runcmd_io_handler)
samba_runcmd_io_handler: Child /usr/sbin/samba_dnsupdate exited 1 
[2018/05/29 10:54:02.219795, 0]
../source4/dsdb/dns/dns_update.c:330(dnsupdate_nameupdate_done)
../source4/dsdb/dns/dns_update.c:330: Failed DNS update - with error code 1 








[2018/05/29 10:54:05.537331, 3]
../source4/nbt_server/register.c:155(nbtd_register_name_handler)
Registered DMZRODC<00> with 192.168.19.5 on interface 192.168.19.255 
[2018/05/29 10:54:05.537447, 3]
../source4/nbt_server/register.c:155(nbtd_register_name_handler)
Registered DMZRODC<03> with 192.168.19.5 on interface 192.168.19.255 
[2018/05/29 10:54:05.537479, 3]
../source4/nbt_server/register.c:155(nbtd_register_name_handler)
Registered DMZRODC<20> with 192.168.19.5 on interface 192.168.19.255 
[2018/05/29 10:54:05.538639, 3]
../source4/nbt_server/register.c:155(nbtd_register_name_handler)
Registered MYDOMAIN<1c> with 192.168.19.5 on interface 192.168.19.255 
[2018/05/29 10:54:05.538694, 3]
../source4/nbt_server/register.c:155(nbtd_register_name_handler)
Registered MYDOMAIN<00> with 192.168.19.5 on interface 192.168.19.255 




[2018/05/29 10:54:16.579597, 4]
../source4/dsdb/kcc/kcc_periodic.c:651(kccsrv_periodic_run)
kccsrv_periodic_run(): update 
[2018/05/29 10:54:16.579692, 2]
../source4/dsdb/kcc/kcc_periodic.c:710(kccsrv_samba_kcc)
Calling samba_kcc script 
[2018/05/29 10:54:16.591772, 1]
../source4/dsdb/kcc/garbage_collect_tombstones.c:68(garbage_collect_tombstones_part)
Doing a full scan on DC=ForestDnsZones,DC=ads,DC=MYDOMAIN,DC=be and looking for
deleted objects
[2018/05/29 10:54:16.594621, 1]
../source4/dsdb/kcc/garbage_collect_tombstones.c:68(garbage_collect_tombstones_part)
Doing a full scan on DC=DomainDnsZones,DC=ads,DC=MYDOMAIN,DC=be and looking for
deleted objects
[2018/05/29 10:54:16.600095, 1]
../source4/dsdb/kcc/garbage_collect_tombstones.c:68(garbage_collect_tombstones_part)
Doing a full scan on DC=ads,DC=MYDOMAIN,DC=be and looking for deleted objects 
[2018/05/29 10:54:16.601545, 4]
../source4/dsdb/repl/drepl_periodic.c:102(dreplsrv_periodic_run)
dreplsrv_periodic_run(): schedule pull replication 
[2018/05/29 10:54:16.601589, 4]
../source4/dsdb/repl/drepl_partitions.c:578(dreplsrv_refresh_partition)
dreplsrv_refresh_partition(DC=ads,DC=MYDOMAIN,DC=be) 
[2018/05/29 10:54:16.602325, 4]
../source4/dsdb/repl/drepl_partitions.c:355(dreplsrv_out_connection_attach)
dreplsrv_out_connection_attach(c5675dd9-746c-4940-be0c-aa39f4e7da23._msdcs.ads.MYDOMAIN.be):
attach
[2018/05/29 10:54:16.602359, 4]
../source4/dsdb/repl/drepl_partitions.c:578(dreplsrv_refresh_partition)
dreplsrv_refresh_partition(CN=Configuration,DC=ads,DC=MYDOMAIN,DC=be) 
[2018/05/29 10:54:16.602934, 4]
../source4/dsdb/repl/drepl_partitions.c:355(dreplsrv_out_connection_attach)
dreplsrv_out_connection_attach(c5675dd9-746c-4940-be0c-aa39f4e7da23._msdcs.ads.MYDOMAIN.be):
attach
[2018/05/29 10:54:16.602970, 4]
../source4/dsdb/repl/drepl_partitions.c:578(dreplsrv_refresh_partition)
dreplsrv_refresh_partition(CN=Schema,CN=Configuration,DC=ads,DC=MYDOMAIN,DC=be) 
[2018/05/29 10:54:16.603462, 4]
../source4/dsdb/repl/drepl_partitions.c:355(dreplsrv_out_connection_attach)
dreplsrv_out_connection_attach(c5675dd9-746c-4940-be0c-aa39f4e7da23._msdcs.ads.MYDOMAIN.be):
attach
[2018/05/29 10:54:16.603493, 4]
../source4/dsdb/repl/drepl_partitions.c:578(dreplsrv_refresh_partition)
dreplsrv_refresh_partition(DC=DomainDnsZones,DC=ads,DC=MYDOMAIN,DC=be) 
[2018/05/29 10:54:16.604003, 4]
../source4/dsdb/repl/drepl_partitions.c:355(dreplsrv_out_connection_attach)
dreplsrv_out_connection_attach(c5675dd9-746c-4940-be0c-aa39f4e7da23._msdcs.ads.MYDOMAIN.be):
attach
[2018/05/29 10:54:16.604038, 4]
../source4/dsdb/repl/drepl_partitions.c:578(dreplsrv_refresh_partition)
dreplsrv_refresh_partition(DC=ForestDnsZones,DC=ads,DC=MYDOMAIN,DC=be) 
[2018/05/29 10:54:16.604563, 4]
../source4/dsdb/repl/drepl_partitions.c:355(dreplsrv_out_connection_attach)
dreplsrv_out_connection_attach(c5675dd9-746c-4940-be0c-aa39f4e7da23._msdcs.ads.MYDOMAIN.be):
attach
[2018/05/29 10:54:16.604601, 4]
../source4/dsdb/repl/drepl_periodic.c:116(dreplsrv_periodic_run)
dreplsrv_periodic_run(): run pending_ops memory=160 
[2018/05/29 10:54:16.605177, 4]
../source4/dsdb/repl/drepl_periodic.c:89(dreplsrv_periodic_schedule)
dreplsrv_periodic_schedule(300) scheduled for: Tue May 29 10:59:17 2018 CEST 
[2018/05/29 10:54:16.605231, 4]
../source4/librpc/rpc/dcerpc_connect.c:779(continue_map_binding)
Mapped to DCERPC endpoint 135 
[2018/05/29 10:54:16.605596, 4]
../source4/lib/socket/interface.c:116(add_interface)
added interface eth0 ip=192.168.19.5 bcast=192.168.19.255 netmask=255.255.255.0 
[2018/05/29 10:54:16.605771, 4]
../source4/lib/socket/interface.c:116(add_interface)
added interface eth0 ip=192.168.19.5 bcast=192.168.19.255 netmask=255.255.255.0 
[2018/05/29 10:54:16.605828, 3]
../libcli/nbt/lmhosts.c:184(resolve_lmhosts_file_as_sockaddr)
resolve_lmhosts: Attempting lmhosts lookup for name
c5675dd9-746c-4940-be0c-aa39f4e7da23._msdcs.ads.MYDOMAIN.be<0x20>
[2018/05/29 10:54:16.605866, 4] ../libcli/nbt/lmhosts.c:40(startlmhosts) 
startlmhosts: Can't open lmhosts file /etc/samba/lmhosts. Error was No such
file or directory
[2018/05/29 10:54:16.621961, 1]
../source4/dsdb/kcc/garbage_collect_tombstones.c:105(garbage_collect_tombstones_part)
../source4/dsdb/kcc/garbage_collect_tombstones.c:105: Failed to remove deleted
object CN=DOMADM-VM\0ADEL:cb112b02-4279-496f-9b94-9916ff1e0aa7,CN=Deleted
Objects,DC=ads,DC=MYDOMAIN,DC=be
[2018/05/29 10:54:16.622725, 1]
../source4/dsdb/kcc/garbage_collect_tombstones.c:68(garbage_collect_tombstones_part)
Doing a full scan on CN=Configuration,DC=ads,DC=MYDOMAIN,DC=be and looking for
deleted objects
[2018/05/29 10:54:16.662428, 4]
../source4/dsdb/kcc/kcc_periodic.c:589(kccsrv_periodic_schedule)
kccsrv_periodic_schedule(300) scheduled for: Tue May 29 10:59:17 2018 CEST 
[2018/05/29 10:54:16.666686, 4]
../source4/librpc/rpc/dcerpc_connect.c:779(continue_map_binding)
Mapped to DCERPC endpoint 49152 
[2018/05/29 10:54:16.666922, 4]
../source4/lib/socket/interface.c:116(add_interface)
added interface eth0 ip=192.168.19.5 bcast=192.168.19.255 netmask=255.255.255.0 
[2018/05/29 10:54:16.667132, 4]
../source4/lib/socket/interface.c:116(add_interface)
added interface eth0 ip=192.168.19.5 bcast=192.168.19.255 netmask=255.255.255.0 
[2018/05/29 10:54:16.667204, 3]
../libcli/nbt/lmhosts.c:184(resolve_lmhosts_file_as_sockaddr)
resolve_lmhosts: Attempting lmhosts lookup for name
c5675dd9-746c-4940-be0c-aa39f4e7da23._msdcs.ads.MYDOMAIN.be<0x20>
[2018/05/29 10:54:16.667235, 4] ../libcli/nbt/lmhosts.c:40(startlmhosts) 
startlmhosts: Can't open lmhosts file /etc/samba/lmhosts. Error was No such
file or directory
[2018/05/29 10:54:16.689162, 3]
../lib/ldb-samba/ldb_wrap.c:326(ldb_wrap_connect)
ldb_wrap open of secrets.ldb 
[2018/05/29 10:54:16.705647, 4]
../source4/auth/kerberos/krb5_init_context.c:121(smb_krb5_socket_recv)
Received smb_krb5 packet of length 255 
[2018/05/29 10:54:16.714448, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_kcc: Processing section "[netlogon]" 
[2018/05/29 10:54:16.714596, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_kcc: Processing section "[sysvol]" 
[2018/05/29 10:54:16.714641, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_kcc: pm_process() returned Yes 
[2018/05/29 10:54:16.736061, 4]
../source4/auth/kerberos/krb5_init_context.c:121(smb_krb5_socket_recv)
Received smb_krb5 packet of length 1313 
[2018/05/29 10:54:16.756072, 0]
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
/usr/sbin/samba_kcc: ldb_wrap open of secrets.ldb 
[2018/05/29 10:54:16.768936, 4]
../source4/auth/kerberos/krb5_init_context.c:121(smb_krb5_socket_recv)
Received smb_krb5 packet of length 1346 
[2018/05/29 10:54:16.834597, 4]
../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6327(replmd_store_linked_attributes)
linked_attributes_count=0 
[2018/05/29 10:54:16.835156, 4]
../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6769(replmd_replicated_uptodate_modify)
DRS replication uptodate modify message: 
dn: DC=ads,DC=MYDOMAIN,DC=be 
changetype: modify 
replace: replUpToDateVector 
replUpToDateVector:: AgAAAAAAAAAFAAAAAAAAALgUdhzCVXVMuxIfVOJ3GYADeAAAAAAAAACAP 
tXesZ0B6N0wH2ir0UWLy1PrObhn21kUAAAAAAAAAIA+1d6xnQFpTVVFfXpKT5ZoIfsOQTKriBQAAA 
AAAAAAgD7V3rGdAdaEZnKoXVNIkfFhZNHAvutIPgAAAAAAAACAPtXesZ0BwJM1kYDHnUaXglZY/WA 
t9SNJAAAAAAAAAIA+1d6xnQE= 
- 
replace: repsFrom 
repsFrom:: AQAAAAAAAAALAQAAAAAAADimHREDAAAAOKYdEQMAAAAAAAAA0AAAADsAAABkIEAAERE 
RERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERER 
ERERERERERERERERERERERERERERERERAAAAAEg+AAAAAAAAAAAAAAAAAABIPgAAAAAAANldZ8Vsd 
EBJvgyqOfTn2iPWhGZyqF1TSJHxYWTRwL7rAAAAAAAAAAAAAAAAAAAAADcAAABjNTY3NWRkOS03ND 
ZjLTQ5NDAtYmUwYy1hYTM5ZjRlN2RhMjMuX21zZGNzLmFkcy5mZnQuYmUA 
- 


[2018/05/29 10:54:16.852309, 2]
../source4/dsdb/repl/replicated_objects.c:1021(dsdb_replicated_objects_commit)
Replicated 0 objects (0 linked attributes) for DC=ads,DC=MYDOMAIN,DC=be 
[2018/05/29 10:54:16.852396, 4]
../source4/dsdb/repl/drepl_out_pull.c:182(dreplsrv_pending_op_callback)
dreplsrv_op_pull_source(WERR_OK) for DC=ads,DC=MYDOMAIN,DC=be 
[2018/05/29 10:54:16.930578, 4]
../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6327(replmd_store_linked_attributes)
linked_attributes_count=0 
[2018/05/29 10:54:16.931103, 4]
../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6769(replmd_replicated_uptodate_modify)
DRS replication uptodate modify message: 
dn: CN=Configuration,DC=ads,DC=MYDOMAIN,DC=be 
changetype: modify 
replace: replUpToDateVector 
replUpToDateVector:: AgAAAAAAAAAFAAAAAAAAALgUdhzCVXVMuxIfVOJ3GYADeAAAAAAAAACAP 
tXesZ0B6N0wH2ir0UWLy1PrObhn21oUAAAAAAAAAIA+1d6xnQFpTVVFfXpKT5ZoIfsOQTKriBQAAA 
AAAAAAgD7V3rGdAdaEZnKoXVNIkfFhZNHAvutIPgAAAAAAAACAPtXesZ0BwJM1kYDHnUaXglZY/WA 
t9SNJAAAAAAAAAIA+1d6xnQE= 
- 
replace: repsFrom 
repsFrom:: AQAAAAAAAAALAQAAAAAAADimHREDAAAAOKYdEQMAAAAAAAAA0AAAADsAAABkIEAAERE 
RERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERER 
ERERERERERERERERERERERERERERERERAAAAAEg+AAAAAAAAAAAAAAAAAABIPgAAAAAAANldZ8Vsd 
EBJvgyqOfTn2iPWhGZyqF1TSJHxYWTRwL7rAAAAAAAAAAAAAAAAAAAAADcAAABjNTY3NWRkOS03ND 
ZjLTQ5NDAtYmUwYy1hYTM5ZjRlN2RhMjMuX21zZGNzLmFkcy5mZnQuYmUA 
- 


[2018/05/29 10:54:16.955740, 2]
../source4/dsdb/repl/replicated_objects.c:1021(dsdb_replicated_objects_commit)
Replicated 0 objects (0 linked attributes) for
CN=Configuration,DC=ads,DC=MYDOMAIN,DC=be
[2018/05/29 10:54:16.955831, 4]
../source4/dsdb/repl/drepl_out_pull.c:182(dreplsrv_pending_op_callback)
dreplsrv_op_pull_source(WERR_OK) for CN=Configuration,DC=ads,DC=MYDOMAIN,DC=be 
[2018/05/29 10:54:16.997377, 4]
../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6327(replmd_store_linked_attributes)
linked_attributes_count=0 
[2018/05/29 10:54:16.997943, 4]
../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6769(replmd_replicated_uptodate_modify)
DRS replication uptodate modify message: 
dn: CN=Schema,CN=Configuration,DC=ads,DC=MYDOMAIN,DC=be 
changetype: modify 
replace: replUpToDateVector 
replUpToDateVector:: AgAAAAAAAAAFAAAAAAAAALgUdhzCVXVMuxIfVOJ3GYADeAAAAAAAAACAP 
tXesZ0B6N0wH2ir0UWLy1PrObhn21kUAAAAAAAAAIA+1d6xnQFpTVVFfXpKT5ZoIfsOQTKriBQAAA 
AAAAAAgD7V3rGdAdaEZnKoXVNIkfFhZNHAvutIPgAAAAAAAACAPtXesZ0BwJM1kYDHnUaXglZY/WA 
t9SNJAAAAAAAAAIA+1d6xnQE= 
- 
replace: repsFrom 
repsFrom:: AQAAAAAAAAALAQAAAAAAADimHREDAAAAOKYdEQMAAAAAAAAA0AAAADsAAABkIEAAERE 
RERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERER 
ERERERERERERERERERERERERERERERERAAAAAEg+AAAAAAAAAAAAAAAAAABIPgAAAAAAANldZ8Vsd 
EBJvgyqOfTn2iPWhGZyqF1TSJHxYWTRwL7rAAAAAAAAAAAAAAAAAAAAADcAAABjNTY3NWRkOS03ND 
ZjLTQ5NDAtYmUwYy1hYTM5ZjRlN2RhMjMuX21zZGNzLmFkcy5mZnQuYmUA 
- 


[2018/05/29 10:54:17.009091, 2]
../source4/dsdb/repl/replicated_objects.c:1021(dsdb_replicated_objects_commit)
Replicated 0 objects (0 linked attributes) for
CN=Schema,CN=Configuration,DC=ads,DC=MYDOMAIN,DC=be
[2018/05/29 10:54:17.009159, 4]
../source4/dsdb/repl/drepl_out_pull.c:182(dreplsrv_pending_op_callback)
dreplsrv_op_pull_source(WERR_OK) for
CN=Schema,CN=Configuration,DC=ads,DC=MYDOMAIN,DC=be
[2018/05/29 10:54:17.048318, 3]
../lib/util/util_runcmd.c:291(samba_runcmd_io_handler)
samba_runcmd_io_handler: Child /usr/sbin/samba_kcc exited 0 
[2018/05/29 10:54:17.048402, 3]
../source4/dsdb/kcc/kcc_periodic.c:695(samba_kcc_done)
Completed samba_kcc OK 
[2018/05/29 10:54:17.071734, 4]
../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6327(replmd_store_linked_attributes)
linked_attributes_count=0 
[2018/05/29 10:54:17.072236, 4]
../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6769(replmd_replicated_uptodate_modify)
DRS replication uptodate modify message: 
dn: DC=DomainDnsZones,DC=ads,DC=MYDOMAIN,DC=be 
changetype: modify 
replace: replUpToDateVector 
replUpToDateVector:: AgAAAAAAAAAFAAAAAAAAALgUdhzCVXVMuxIfVOJ3GYADeAAAAAAAAACAP 
tXesZ0B6N0wH2ir0UWLy1PrObhn21kUAAAAAAAAAIA+1d6xnQFpTVVFfXpKT5ZoIfsOQTKriBQAAA 
AAAAAAgD7V3rGdAdaEZnKoXVNIkfFhZNHAvutIPgAAAAAAAACAPtXesZ0BwJM1kYDHnUaXglZY/WA 
t9SJJAAAAAAAAAIA+1d6xnQE= 
- 
replace: repsFrom 
repsFrom:: AQAAAAAAAAALAQAAAAAAADmmHREDAAAAOaYdEQMAAAAAAAAA0AAAADsAAABkIEAAERE 
RERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERER 
ERERERERERERERERERERERERERERERERAAAAAEg+AAAAAAAAAAAAAAAAAABIPgAAAAAAANldZ8Vsd 
EBJvgyqOfTn2iPWhGZyqF1TSJHxYWTRwL7rAAAAAAAAAAAAAAAAAAAAADcAAABjNTY3NWRkOS03ND 
ZjLTQ5NDAtYmUwYy1hYTM5ZjRlN2RhMjMuX21zZGNzLmFkcy5mZnQuYmUA 
- 


[2018/05/29 10:54:17.083630, 2]
../source4/dsdb/repl/replicated_objects.c:1021(dsdb_replicated_objects_commit)
Replicated 0 objects (0 linked attributes) for
DC=DomainDnsZones,DC=ads,DC=MYDOMAIN,DC=be
[2018/05/29 10:54:17.083691, 4]
../source4/dsdb/repl/drepl_out_pull.c:182(dreplsrv_pending_op_callback)
dreplsrv_op_pull_source(WERR_OK) for DC=DomainDnsZones,DC=ads,DC=MYDOMAIN,DC=be 
[2018/05/29 10:54:17.104425, 4]
../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6327(replmd_store_linked_attributes)
linked_attributes_count=0 
[2018/05/29 10:54:17.104924, 4]
../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6769(replmd_replicated_uptodate_modify)
DRS replication uptodate modify message: 
dn: DC=ForestDnsZones,DC=ads,DC=MYDOMAIN,DC=be 
changetype: modify 
replace: replUpToDateVector 
replUpToDateVector:: AgAAAAAAAAAFAAAAAAAAALgUdhzCVXVMuxIfVOJ3GYADeAAAAAAAAACAP 
tXesZ0B6N0wH2ir0UWLy1PrObhn21kUAAAAAAAAAIA+1d6xnQFpTVVFfXpKT5ZoIfsOQTKriBQAAA 
AAAAAAgD7V3rGdAdaEZnKoXVNIkfFhZNHAvutIPgAAAAAAAACAPtXesZ0BwJM1kYDHnUaXglZY/WA 
t9SJJAAAAAAAAAIA+1d6xnQE= 
- 
replace: repsFrom 
repsFrom:: AQAAAAAAAAALAQAAAAAAADmmHREDAAAAOaYdEQMAAAAAAAAA0AAAADsAAABkIEAAERE 
RERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERER 
ERERERERERERERERERERERERERERERERAAAAAEg+AAAAAAAAAAAAAAAAAABIPgAAAAAAANldZ8Vsd 
EBJvgyqOfTn2iPWhGZyqF1TSJHxYWTRwL7rAAAAAAAAAAAAAAAAAAAAADcAAABjNTY3NWRkOS03ND 
ZjLTQ5NDAtYmUwYy1hYTM5ZjRlN2RhMjMuX21zZGNzLmFkcy5mZnQuYmUA 
- 


[2018/05/29 10:54:17.115699, 2]
../source4/dsdb/repl/replicated_objects.c:1021(dsdb_replicated_objects_commit)
Replicated 0 objects (0 linked attributes) for
DC=ForestDnsZones,DC=ads,DC=MYDOMAIN,DC=be
[2018/05/29 10:54:17.115748, 4]
../source4/dsdb/repl/drepl_out_pull.c:182(dreplsrv_pending_op_callback)
dreplsrv_op_pull_source(WERR_OK) for DC=ForestDnsZones,DC=ads,DC=MYDOMAIN,DC=be 








Thank you ! 


----- Mail original -----

De: "Andrew Bartlett" <abartlet at samba.org> 
À: "Gaetan SLONGO" <gslongo at it-optics.com>, "samba"
<samba at lists.samba.org>
Envoyé: Jeudi 24 Mai 2018 20:54:24 
Objet : Re: [Samba] Samba 4.8 RODC not working 

On Thu, 2018-05-24 at 11:30 +0200, Gaetan SLONGO via samba wrote:
> Hi, 
> 
> 
> 
> 
> It's my first try to setup RODC using Samba 4.8. We have latest Samba
4.7 environnement with 2 DC and some file servers.
> Joining the DC to the domain is OK using samba-tool domain join command.
The domain controller appears in the DC list (MMC)
> Winbind is not working : 
> 
> 
> 
> [root at dmzrodc ~]# wbinfo -u 
> could not obtain winbind interface details: WBC_ERR_WINBIND_NOT_AVAILABLE 
> could not obtain winbind domain name! 
> Error looking up domain users 
> 
> 
> Logs are not showing something clear : 
> 
> 
> 
> Do you have any idea about what is causing the issue ? 
> 
I suggest turning up the log level until it becomes clear. 

Thanks, 

Andrew Bartlett 
-- 
Andrew Bartlett http://samba.org/~abartlet/ 
Authentication Developer, Samba Team http://samba.org 
Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba 




-- 




www.it-optics.com 
	
Gaëtan SLONGO | Head of Infrastructure Department 
Boulevard Initialis, 28 - 7000 Mons, BELGIUM 
Company : 	+32 (0)65 84 23 85 
Direct : 	+32 (0)65 32 85 88 
Fax : 	+32 (0)65 84 66 76 
Skype ID : 	gslongo.pro 
GPG Key : 	gslongo-gpg_key.asc 
	

- Please consider your environmental responsibility before printing this e-mail
-

Gaetan SLONGO

2018-May-29 14:39 UTC

head link

[Samba] Samba 4.8 RODC not working

Hi Rowland, 


As said into the reply sent to Andrew, Winbind is installed, but not started by
samba (this is sernet packages)


Thanks 

----- Mail original -----

De: "Rowland Penny via samba" <samba at lists.samba.org> 
À: samba at lists.samba.org 
Envoyé: Jeudi 24 Mai 2018 20:48:22 
Objet : Re: [Samba] Samba 4.8 RODC not working 

On Thu, 24 May 2018 11:30:40 +0200 (CEST) 
Gaetan SLONGO via samba <samba at lists.samba.org> wrote: 
> Hi, 
> 
> 
> 
> 
> It's my first try to setup RODC using Samba 4.8. We have latest Samba 
> 4.7 environnement with 2 DC and some file servers. Joining the DC to 
> the domain is OK using samba-tool domain join command. The domain 
> controller appears in the DC list (MMC) 
> 
> 
> However, users cannot be authenticated. Samba is running but these 
> ports are closed : 
> 
> 
> netbios-ssn 139/tcp # NETBIOS session service 
> netbios-ssn 139/udp 
> microsoft-ds 445/tcp 
> microsoft-ds 445/udp 
> 
> Some other ports are available : 
> 
> 
> 
> [root at dmzrodc ~]# netstat -tlpn 
> Connexions Internet actives (seulement serveurs) 
> Proto Recv-Q Send-Q Adresse locale Adresse distante Etat PID/Program 
> name tcp 0 0 0.0.0.0:636 0.0.0.0:* LISTEN 23622/samba 
> tcp 0 0 0.0.0.0:49152 0.0.0.0:* LISTEN 23619/samba 
> tcp 0 0 0.0.0.0:49153 0.0.0.0:* LISTEN 23619/samba 
> tcp 0 0 0.0.0.0:49154 0.0.0.0:* LISTEN 23619/samba 
> tcp 0 0 0.0.0.0:3268 0.0.0.0:* LISTEN 23622/samba 
> tcp 0 0 0.0.0.0:3269 0.0.0.0:* LISTEN 23622/samba 
> tcp 0 0 0.0.0.0:389 0.0.0.0:* LISTEN 23622/samba 
> tcp 0 0 0.0.0.0:135 0.0.0.0:* LISTEN 23619/samba 
> tcp 0 0 0.0.0.0:464 0.0.0.0:* LISTEN 23624/samba 
> tcp 0 0 0.0.0.0:53 0.0.0.0:* LISTEN 23632/samba 
> tcp 0 0 0.0.0.0:88 0.0.0.0:* LISTEN 23624/samba 
> 
> 
> Winbind is not working : 
> 
> [root at dmzrodc ~]# wbinfo -u 
> could not obtain winbind interface details: 
> WBC_ERR_WINBIND_NOT_AVAILABLE could not obtain winbind domain name! 
> Error looking up domain users 
Is winbind actually installed ?? 

Rowland 

-- 
To unsubscribe from this list go to the following URL and read the 
instructions: https://lists.samba.org/mailman/options/samba 



-- 




www.it-optics.com 
	
Gaëtan SLONGO | Head of Infrastructure Department 
Boulevard Initialis, 28 - 7000 Mons, BELGIUM 
Company : 	+32 (0)65 84 23 85 
Direct : 	+32 (0)65 32 85 88 
Fax : 	+32 (0)65 84 66 76 
Skype ID : 	gslongo.pro 
GPG Key : 	gslongo-gpg_key.asc 
	

- Please consider your environmental responsibility before printing this e-mail
-

L.P.H. van Belle

2018-May-29 15:08 UTC

head link

[Samba] Samba 4.8 RODC not working

I think you missed these in the firewall, if you allowed the "in" for
the DC, you also need the OUT.

 49152:65535/tcp ALLOW OUT  


Greetz, 

Louis

 
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Gaetan SLONGO via samba
> Verzonden: dinsdag 29 mei 2018 16:40
> Aan: Rowland Penny
> CC: samba at lists.samba.org
> Onderwerp: Re: [Samba] Samba 4.8 RODC not working
> 
> Hi Rowland, 
> 
> 
> As said into the reply sent to Andrew, Winbind is installed, 
> but not started by samba (this is sernet packages) 
> 
> 
> Thanks 
> 
> ----- Mail original -----
> 
> De: "Rowland Penny via samba" <samba at lists.samba.org> 
> À: samba at lists.samba.org 
> Envoyé: Jeudi 24 Mai 2018 20:48:22 
> Objet : Re: [Samba] Samba 4.8 RODC not working 
> 
> On Thu, 24 May 2018 11:30:40 +0200 (CEST) 
> Gaetan SLONGO via samba <samba at lists.samba.org> wrote: 
> 
> > Hi, 
> > 
> > 
> > 
> > 
> > It's my first try to setup RODC using Samba 4.8. We have 
> latest Samba 
> > 4.7 environnement with 2 DC and some file servers. Joining 
> the DC to 
> > the domain is OK using samba-tool domain join command. The domain 
> > controller appears in the DC list (MMC) 
> > 
> > 
> > However, users cannot be authenticated. Samba is running but these 
> > ports are closed : 
> > 
> > 
> > netbios-ssn 139/tcp # NETBIOS session service 
> > netbios-ssn 139/udp 
> > microsoft-ds 445/tcp 
> > microsoft-ds 445/udp 
> > 
> > Some other ports are available : 
> > 
> > 
> > 
> > [root at dmzrodc ~]# netstat -tlpn 
> > Connexions Internet actives (seulement serveurs) 
> > Proto Recv-Q Send-Q Adresse locale Adresse distante Etat 
> PID/Program 
> > name tcp 0 0 0.0.0.0:636 0.0.0.0:* LISTEN 23622/samba 
> > tcp 0 0 0.0.0.0:49152 0.0.0.0:* LISTEN 23619/samba 
> > tcp 0 0 0.0.0.0:49153 0.0.0.0:* LISTEN 23619/samba 
> > tcp 0 0 0.0.0.0:49154 0.0.0.0:* LISTEN 23619/samba 
> > tcp 0 0 0.0.0.0:3268 0.0.0.0:* LISTEN 23622/samba 
> > tcp 0 0 0.0.0.0:3269 0.0.0.0:* LISTEN 23622/samba 
> > tcp 0 0 0.0.0.0:389 0.0.0.0:* LISTEN 23622/samba 
> > tcp 0 0 0.0.0.0:135 0.0.0.0:* LISTEN 23619/samba 
> > tcp 0 0 0.0.0.0:464 0.0.0.0:* LISTEN 23624/samba 
> > tcp 0 0 0.0.0.0:53 0.0.0.0:* LISTEN 23632/samba 
> > tcp 0 0 0.0.0.0:88 0.0.0.0:* LISTEN 23624/samba 
> > 
> > 
> > Winbind is not working : 
> > 
> > [root at dmzrodc ~]# wbinfo -u 
> > could not obtain winbind interface details: 
> > WBC_ERR_WINBIND_NOT_AVAILABLE could not obtain winbind domain name! 
> > Error looking up domain users 
> 
> Is winbind actually installed ?? 
> 
> Rowland 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the 
> instructions: https://lists.samba.org/mailman/options/samba 
> 
> 
> 
> -- 
> 
> 
> 
> 
> www.it-optics.com 
> 	
> Gaëtan SLONGO | Head of Infrastructure Department 
> Boulevard Initialis, 28 - 7000 Mons, BELGIUM 
> Company : 	+32 (0)65 84 23 85 
> Direct : 	+32 (0)65 32 85 88 
> Fax : 	+32 (0)65 84 66 76 
> Skype ID : 	gslongo.pro 
> GPG Key : 	gslongo-gpg_key.asc 
> 	
> 
> - Please consider your environmental responsibility before 
> printing this e-mail - 
> 
> 
> 
> 
> 
> 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>

Seemingly Similar Threads

Search for more apparently analagous threads

samba - May 2018 - Samba 4.8 RODC not working

[Samba] Samba 4.8 RODC not working

[Samba] Samba 4.8 RODC not working

[Samba] Samba 4.8 RODC not working

[Samba] Samba 4.8 RODC not working

[Samba] Samba 4.8 RODC not working

[Samba] Samba 4.8 RODC not working

Seemingly Similar Threads