On 07/25/2019 02:33 AM, Rowland penny via samba wrote:> On 24/07/2019 22:21, Robert A Wooldridge via samba wrote: >> I'm still trying to figure out of my samba DC which has received by >> transfer all 7 FSMO roles is actually doing DNS.? When I do this >> serverinfo command it fails: >> >> >> athena:~# samba-tool dns serverinfo athena > > Do you have a user called 'athena' ? > >> Password for [administrator at EDM-INC.COM]: > If you do have a user called 'athena', why are you being asked for the > 'Administrator' password ?No, athena is the name of the samba DC. I did this to verify that there is no user athena: wbinfo -u | grep athena Nothing returns. If I do kinit administrator the command runs without prompting for administrator password. -- Bob Wooldridge EDM Incorporated
On 25/07/2019 15:33, Robert A Wooldridge via samba wrote:> On 07/25/2019 02:33 AM, Rowland penny via samba wrote: >> On 24/07/2019 22:21, Robert A Wooldridge via samba wrote: >>> I'm still trying to figure out of my samba DC which has received by >>> transfer all 7 FSMO roles is actually doing DNS.? When I do this >>> serverinfo command it fails: >>> >>> >>> athena:~# samba-tool dns serverinfo athena >> >> Do you have a user called 'athena' ? >> >>> Password for [administrator at EDM-INC.COM]: >> If you do have a user called 'athena', why are you being asked for >> the 'Administrator' password ? > No, athena is the name of the samba DC. > > I did this to verify that there is no user athena: wbinfo -u | grep > athena > Nothing returns. > > If I do kinit administrator the command runs without prompting for > administrator password. > >Then you do not have a Serverinfo Error Rowland
On 07/25/2019 09:50 AM, Rowland penny via samba wrote:> On 25/07/2019 15:33, Robert A Wooldridge via samba wrote: >> No, athena is the name of the samba DC. >> >> I did this to verify that there is no user athena: wbinfo -u | grep >> athena >> Nothing returns. >> >> If I do kinit administrator the command runs without prompting for >> administrator password. >> >> > Then you do not have a Serverinfo ErrorYes, I do.? Here's the command again after I have done kinit: athena:~# samba-tool dns serverinfo athena ERROR(runtime): uncaught exception - (9717, 'WERR_DNS_ERROR_DS_UNAVAILABLE') ? File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 177, in _run ??? return self.run(*args, **kwargs) ? File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 564, in run ??? None, 'ServerInfo') -- Bob Wooldridge EDM Incorporated
Try : kinit Administrator samba-tool dns serverinfo athena -k yes Greetz, Louis> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Robert A Wooldridge via samba > Verzonden: donderdag 25 juli 2019 16:55 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Serverinfo Error > > On 07/25/2019 09:50 AM, Rowland penny via samba wrote: > > On 25/07/2019 15:33, Robert A Wooldridge via samba wrote: > >> No, athena is the name of the samba DC. > >> > >> I did this to verify that there is no user athena: wbinfo > -u | grep > >> athena > >> Nothing returns. > >> > >> If I do kinit administrator the command runs without prompting for > >> administrator password. > >> > >> > > Then you do not have a Serverinfo Error > Yes, I do.? Here's the command again after I have done kinit: > > athena:~# samba-tool dns serverinfo athena > ERROR(runtime): uncaught exception - (9717, > 'WERR_DNS_ERROR_DS_UNAVAILABLE') > ? File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", > line 177, in _run > ??? return self.run(*args, **kwargs) > ? File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line > 564, in run > ??? None, 'ServerInfo') > > > -- > Bob Wooldridge > EDM Incorporated > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > >
On 25/07/2019 15:54, Robert A Wooldridge wrote:> On 07/25/2019 09:50 AM, Rowland penny via samba wrote: >> On 25/07/2019 15:33, Robert A Wooldridge via samba wrote: >>> No, athena is the name of the samba DC. >>> >>> I did this to verify that there is no user athena: wbinfo -u | grep >>> athena >>> Nothing returns. >>> >>> If I do kinit administrator the command runs without prompting for >>> administrator password. >>> >>> >> Then you do not have a Serverinfo Error > Yes, I do.? Here's the command again after I have done kinit: > > athena:~# samba-tool dns serverinfo athena > ERROR(runtime): uncaught exception - (9717, > 'WERR_DNS_ERROR_DS_UNAVAILABLE') > ? File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", > line 177, in _run > ??? return self.run(*args, **kwargs) > ? File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line > 564, in run > ??? None, 'ServerInfo')How are you logging in to the DC and who as ? If I login as the user 'rowland' to one of my DCs I get this prompt: SAMDOM\rowland at dc4:~$ If I login as root, I get this: root at dc4:~# Your prompt is: athena:~# Which I think means you are doing this as 'root', so you should be able to kinit as Administrator and get this response: root at dc4:~# kinit Administrator Password for Administrator at SAMDOM.EXAMPLE.COM: root at dc4:~# samba-tool dns serverinfo dc4 ? dwVersion?????????????????? : 0xece0205 ? fBootMethod???????????????? : DNS_BOOT_METHOD_DIRECTORY ? fAdminConfigured??????????? : FALSE ? fAllowUpdate??????????????? : TRUE ? fDsAvailable??????????????? : TRUE ? ............................... ? ..................... ? .............. ? .......... If you run, on 'athena': getent passwd Administrator You should get something similar to this (if you have set up the libnns-winbind links): SAMDOM\administrator:*:0:10000::/home/SAMDOM/administrator:/bin/false The first '0' is the important item, if it isn't '0', then 'Administrator' is just a normal user, as far as Unix is concerned. Rowland
On 07/25/2019 10:10 AM, Rowland penny via samba wrote:> How are you logging in to the DC and who as ? > > If I login as the user 'rowland' to one of my DCs I get this prompt: > > SAMDOM\rowland at dc4:~$ > > If I login as root, I get this: > > root at dc4:~# > > Your prompt is: > > athena:~# > > Which I think means you are doing this as 'root', so you should be > able to kinit as Administrator and get this response:Yes, I'm logged in as root.> > root at dc4:~# kinit Administrator > Password for Administrator at SAMDOM.EXAMPLE.COM: > root at dc4:~# samba-tool dns serverinfo dc4 > ? dwVersion?????????????????? : 0xece0205 > ? fBootMethod???????????????? : DNS_BOOT_METHOD_DIRECTORY > ? fAdminConfigured??????????? : FALSE > ? fAllowUpdate??????????????? : TRUE > ? fDsAvailable??????????????? : TRUE > ? ............................... > ? ..................... > ? .............. > ? ..........Every time I do kinit Administrator I get prompted for a password and then nothing returns. If I do klist I get this: athena:~# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: Administrator at EDM-INC.COM Valid starting?????? Expires????????????? Service principal 07/25/2019 10:23:36? 07/25/2019 20:23:36 krbtgt/EDM-INC.COM at EDM-INC.COM ??????? renew until 07/26/2019 10:23:30> > If you run, on 'athena': > > getent passwd Administrator > > You should get something similar to this (if you have set up the > libnns-winbind links): > > SAMDOM\administrator:*:0:10000::/home/SAMDOM/administrator:/bin/false > > The first '0' is the important item, if it isn't '0', then > 'Administrator' is just a normal user, as far as Unix is concerned.If I run getent passwd Administrator nothing returns. -- Bob Wooldridge EDM Incorporated