samba - Oct 2019 - message error NT_STATUS_OBJECT_NAME_NOT_FOUND regulary in the log

Hello,

I need help you to understand my error.

I have juste generate samba ad with the following command

samba-tool domain provision --use-rfc2307 --interactive
Realm:? SAMBADOM.CALAIS.FR
Domain [SAMBADOM]:
Server Role (dc, member, standalone) [dc]:? dc
DNS backend (SAMBA_INTERNAL, BIND9_FLATFILE, BIND9_DLZ, NONE) 
[SAMBA_INTERNAL]:? SAMBA_INTERNAL
DNS forwarder IP address (write 'none' to disable forwarding) 
[xxx.xxx.xxx.xxx]:
Administrator password:
Retype password:


I want first test my samba server .


when i execute /usr/sbin/samba -i? I have the following error regulary


/usr/sbin/smbd: reloading printcap cache
/usr/sbin/smbd: reload status: ok
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun 
fichier ou dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 15718 failed: 
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: samba_tevent: EPOLL_CTL_DEL EBADF for 
fde[0x55b6941c2c20] mpx_fde[(nil)] fd[35] - disabling

I don't understand why . what a mistake I made ?


I juste install the packages krb5-config, krb5-user, samba and winbind.? 
My debian is? 5.2.0-3-amd64.
I have the same message with the debian 4.19.0-2-amd64.

I add in my krb5.conf

dns_lookup_realm = false
dns_lookup_kdc = true

My smb.conf was generated by the provision - I have juste add at the end 
of my global section

log level? =3
log file = /var/log/samba/log.%M

Thanks for your help .

-- 
Nathalie RAMAT-LECLERCQ

Service Informatique

Universite du Littoral-C?te d'Opale
SCoSI - Service Commun du Syst?me d'Information
P?le Syst?mes et r?seaux

Centre de Gestion Universitaire de Calais
50 rue ferdinand Buisson
C.S 80699
62228 CALAIS CEDEX

On 16/10/2019 07:56, nathalie ramat via samba wrote:
> Hello,
>
> I need help you to understand my error.
>
> I have juste generate samba ad with the following command
>
> samba-tool domain provision --use-rfc2307 --interactive
> Realm:? SAMBADOM.CALAIS.FR
> Domain [SAMBADOM]:
> Server Role (dc, member, standalone) [dc]:? dc
> DNS backend (SAMBA_INTERNAL, BIND9_FLATFILE, BIND9_DLZ, NONE) 
> [SAMBA_INTERNAL]:? SAMBA_INTERNAL
> DNS forwarder IP address (write 'none' to disable forwarding) 
> [xxx.xxx.xxx.xxx]:
> Administrator password:
> Retype password:
>
>
> I want first test my samba server .
>
>
> when i execute /usr/sbin/samba -i? I have the following error regulary
>
>
> /usr/sbin/smbd: reloading printcap cache
> /usr/sbin/smbd: reload status: ok
> /usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun 
> fichier ou dossier de ce type
In English: No file or folder of this type
> /usr/sbin/smbd: send_all_fn: messaging_send_buf to 15718 failed: 
> NT_STATUS_OBJECT_NAME_NOT_FOUND
> /usr/sbin/smbd: samba_tevent: EPOLL_CTL_DEL EBADF for 
> fde[0x55b6941c2c20] mpx_fde[(nil)] fd[35] - disabling
>
> I don't understand why . what a mistake I made ?
>
>
> I juste install the packages krb5-config, krb5-user, samba and 
> winbind.? My debian is? 5.2.0-3-amd64.
> I have the same message with the debian 4.19.0-2-amd64.
No, I think you mean Linux 5.2.0-3-amd64 and Linux 4.19.0-2-amd64

Can you download this script and run it on the DC:

https://github.com/thctlo/samba4/blob/master/samba-collect-debug-info.sh

Check the output (sanitise it if required) and post it in a reply to 
this thread, do not attached it, the mailing list strips off attachments.

The script output will help in identifying just what you have and any 
possible basic errors.

Rowland

Le 16/10/2019 ? 09:33, Rowland penny via samba a ?crit?:
> On 16/10/2019 07:56, nathalie ramat via samba wrote:
>> Hello,
>>
>> I need help you to understand my error.
>>
>> I have juste generate samba ad with the following command
>>
>> samba-tool domain provision --use-rfc2307 --interactive
>> Realm:?? SAMBADOM.CALAIS.FR
>> Domain [SAMBADOM]:
>> Server Role (dc, member, standalone) [dc]:?? dc
>> DNS backend (SAMBA_INTERNAL, BIND9_FLATFILE, BIND9_DLZ, NONE) 
>> [SAMBA_INTERNAL]:?? SAMBA_INTERNAL
>> DNS forwarder IP address (write 'none' to disable forwarding) 
>> [xxx.xxx.xxx.xxx]:
>> Administrator password:
>> Retype password:
>>
>>
>> I want first test my samba server .
>>
>>
>> when i execute /usr/sbin/samba -i?? I have the following error regulary
>>
>>
>> /usr/sbin/smbd: reloading printcap cache
>> /usr/sbin/smbd: reload status: ok
>> /usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun 
>> fichier ou dossier de ce type
> In English: No file or folder of this type
>> /usr/sbin/smbd: send_all_fn: messaging_send_buf to 15718 failed: 
>> NT_STATUS_OBJECT_NAME_NOT_FOUND
>> /usr/sbin/smbd: samba_tevent: EPOLL_CTL_DEL EBADF for 
>> fde[0x55b6941c2c20] mpx_fde[(nil)] fd[35] - disabling
>>
>> I don't understand why . what a mistake I made ?
>>
>>
>> I juste install the packages krb5-config, krb5-user, samba and 
>> winbind.?? My debian is?? 5.2.0-3-amd64.
>> I have the same message with the debian 4.19.0-2-amd64.
> No, I think you mean Linux 5.2.0-3-amd64 and Linux 4.19.0-2-amd64
>
> Can you download this script and run it on the DC:
>
> https://github.com/thctlo/samba4/blob/master/samba-collect-debug-info.sh
>
> Check the output (sanitise it if required) and post it in a reply to 
> this thread, do not attached it, the mailing list strips off attachments.
>
> The script output will help in identifying just what you have and any 
> possible basic errors.
I put the trace of the script :

Collected config? --- 2019-10-16-10:23 -----------

Hostname: blueyestest
DNS Domain: sambadom.calais.fr
FQDN: blueyestest.sambadom.calais.fr
ipaddress: 192.168.xx.230

-----------

Kerberos SRV _kerberos._tcp.sambadom.calais.fr record verified ok, 
sample output:
Server:??? ??? 192.168.xx.230
Address:??? 192.168.xx.230#53

_kerberos._tcp.sambadom.calais.fr??? service = 0 100 88 
blueyestest.sambadom.calais.fr.
Samba is running as an AD DC

-----------
 ?????? Checking file: /etc/os-release

PRETTY_NAME="Debian GNU/Linux bullseye/sid"
NAME="Debian GNU/Linux"
ID=debian
HOME_URL="https://www.debian.org/"
SUPPORT_URL="https://www.debian.org/support"
BUG_REPORT_URL="https://bugs.debian.org/"

-----------


This computer is running Debian bullseye/sid x86_64

-----------
running command : ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
group default qlen 1000
 ??? link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
 ??? inet 127.0.0.1/8 scope host lo
 ??? inet6 ::1/128 scope host
2: ens18: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
state UP group default qlen 1000
 ??? link/ether xx:xx:xx:xx:xx:xx brd ff:ff:ff:ff:ff:ff
 ??? inet 192.168.xx.230/24 brd 192.168.22.255 scope global ens18


-----------
 ?????? Checking file: /etc/hosts

127.0.0.1??? localhost
192.168.xx.230??? blueyestest.sambadom.calais.fr sambadom.calais.fr 
blueyestest

# The following lines are desirable for IPv6 capable hosts
::1???? localhost ip6-localhost ip6-loopback
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters

-----------

 ?????? Checking file: /etc/resolv.conf

nameserver 192.168.xx.230
nameserver xxx.xxx.xxx.xx


-----------

 ?????? Checking file: /etc/krb5.conf

[libdefaults]
 ??? default_realm = SAMBADOM.CALAIS.FR
 ??? dns_lookup_realm = false
 ??? dns_lookup_kdc = true

# The following krb5.conf variables are only for MIT Kerberos.
 ??? kdc_timesync = 1
 ??? ccache_type = 4
 ??? forwardable = true
 ??? proxiable = true

# The following encryption type specification will be used by MIT Kerberos
# if uncommented.? In general, the defaults in the MIT Kerberos code are
# correct and overriding these specifications only serves to disable new
# encryption types as they are added, creating interoperability problems.
#
# The only time when you might need to uncomment these lines and change
# the enctypes is if you have local software that will break on ticket
# caches containing ticket encryption types it doesn't know about (such as
# old versions of Sun Java).

#??? default_tgs_enctypes = des3-hmac-sha1
#??? default_tkt_enctypes = des3-hmac-sha1
#??? permitted_enctypes = des3-hmac-sha1

# The following libdefaults parameters are only for Heimdal Kerberos.
 ??? fcc-mit-ticketflags = true

[realms]
 ??? SAMBADOM.CALAIS.FR = {
 ??? ??? kdc = blueyestest.sambadom.calais.fr
 ??? ??? admin_server = blueyestest.sambadom.calais.fr
 ??? }
 ??? ATHENA.MIT.EDU = {
 ??? ??? kdc = kerberos.mit.edu
 ??? ??? kdc = kerberos-1.mit.edu
 ??? ??? kdc = kerberos-2.mit.edu:88
 ??? ??? admin_server = kerberos.mit.edu
 ??? ??? default_domain = mit.edu
 ??? }
 ??? ZONE.MIT.EDU = {
 ??? ??? kdc = casio.mit.edu
 ??? ??? kdc = seiko.mit.edu
 ??? ??? admin_server = casio.mit.edu
 ??? }
 ??? CSAIL.MIT.EDU = {
 ??? ??? admin_server = kerberos.csail.mit.edu
 ??? ??? default_domain = csail.mit.edu
 ??? }
 ??? IHTFP.ORG = {
 ??? ??? kdc = kerberos.ihtfp.org
 ??? ??? admin_server = kerberos.ihtfp.org
 ??? }
 ??? 1TS.ORG = {
 ??? ??? kdc = kerberos.1ts.org
 ??? ??? admin_server = kerberos.1ts.org
 ??? }
 ??? ANDREW.CMU.EDU = {
 ??? ??? admin_server = kerberos.andrew.cmu.edu
 ??? ??? default_domain = andrew.cmu.edu
 ??? }
 ??????? CS.CMU.EDU = {
 ??????????????? kdc = kerberos-1.srv.cs.cmu.edu
 ??????????????? kdc = kerberos-2.srv.cs.cmu.edu
 ??????????????? kdc = kerberos-3.srv.cs.cmu.edu
 ??????????????? admin_server = kerberos.cs.cmu.edu
 ??????? }
 ??? DEMENTIA.ORG = {
 ??? ??? kdc = kerberos.dementix.org
 ??? ??? kdc = kerberos2.dementix.org
 ??? ??? admin_server = kerberos.dementix.org
 ??? }
 ??? stanford.edu = {
 ??? ??? kdc = krb5auth1.stanford.edu
 ??? ??? kdc = krb5auth2.stanford.edu
 ??? ??? kdc = krb5auth3.stanford.edu
 ??? ??? master_kdc = krb5auth1.stanford.edu
 ??? ??? admin_server = krb5-admin.stanford.edu
 ??? ??? default_domain = stanford.edu
 ??? }
 ??????? UTORONTO.CA = {
 ??????????????? kdc = kerberos1.utoronto.ca
 ??????????????? kdc = kerberos2.utoronto.ca
 ??????????????? kdc = kerberos3.utoronto.ca
 ??????????????? admin_server = kerberos1.utoronto.ca
 ??????????????? default_domain = utoronto.ca
 ??? }

[domain_realm]
 ??? .mit.edu = ATHENA.MIT.EDU
 ??? mit.edu = ATHENA.MIT.EDU
 ??? .media.mit.edu = MEDIA-LAB.MIT.EDU
 ??? media.mit.edu = MEDIA-LAB.MIT.EDU
 ??? .csail.mit.edu = CSAIL.MIT.EDU
 ??? csail.mit.edu = CSAIL.MIT.EDU
 ??? .whoi.edu = ATHENA.MIT.EDU
 ??? whoi.edu = ATHENA.MIT.EDU
 ??? .stanford.edu = stanford.edu
 ??? .slac.stanford.edu = SLAC.STANFORD.EDU
 ??????? .toronto.edu = UTORONTO.CA
 ??????? .utoronto.ca = UTORONTO.CA

-----------

 ?????? Checking file: /etc/nsswitch.conf

# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference' and `info' packages installed,
try:
# `info libc "Name Service Switch"' for information about this
file.

passwd:???????? files systemd
group:????????? files systemd
shadow:???????? files
gshadow:??????? files

hosts:????????? files mdns4_minimal [NOTFOUND=return] dns
networks:?????? files

protocols:????? db files
services:?????? db files
ethers:???????? db files
rpc:??????????? db files

netgroup:?????? nis

-----------

 ??? Warning,? does not exist

-----------

BIND_DLZ not detected in smb.conf

-----------

Installed packages:
ii? acl 2.2.53-5??????????????????????? amd64??????? access control list 
- utilities
ii? attr 1:2.4.48-5????????????????????? amd64??????? utilities for 
manipulating filesystem extended attributes
ii? fonts-quicksand 0.2016-2??????????????????????? all????????? 
sans-serif font with round attributes
ii? krb5-config 2.6???????????????????????????? all????????? 
Configuration files for Kerberos Version 5
ii? krb5-locales 1.17-6????????????????????????? all????????? 
internationalization support for MIT Kerberos
ii? krb5-user 1.17-6????????????????????????? amd64??????? basic 
programs to authenticate using MIT Kerberos
ii? libacl1:amd64 2.2.53-5??????????????????????? amd64??????? access 
control list - shared library
ii? libattr1:amd64 1:2.4.48-5????????????????????? amd64??????? extended 
attribute handling - shared library
ii? libgssapi-krb5-2:amd64 1.17-6????????????????????????? amd64??????? 
MIT Kerberos runtime libraries - krb5 GSS-API Mechanism
ii? libkrb5-3:amd64 1.17-6????????????????????????? amd64??????? MIT 
Kerberos runtime libraries
ii? libkrb5support0:amd64 1.17-6????????????????????????? amd64??????? 
MIT Kerberos runtime libraries - Support library
ii? libsmbclient:amd64 2:4.11.0+dfsg-10??????????????? amd64??????? 
shared library for communication with SMB/CIFS servers
ii? libwbclient0:amd64 2:4.11.0+dfsg-10??????????????? amd64??????? 
Samba winbind client library
ii? python-attr 18.2.0-1??????????????????????? all????????? Attributes 
without boilerplate (Python 2)
ii? python3-pyxattr 0.6.1-1???????????????????????? amd64??????? module 
for manipulating filesystem extended attributes (Python3)
ii? python3-samba 2:4.11.0+dfsg-10??????????????? amd64??????? Python 3 
bindings for Samba
ii? samba 2:4.11.0+dfsg-10??????????????? amd64??????? SMB/CIFS file, 
print, and login server for Unix
ii? samba-common 2:4.11.0+dfsg-10??????????????? all????????? common 
files used by both the Samba server and client
ii? samba-common-bin 2:4.11.0+dfsg-10??????????????? amd64??????? Samba 
common files used by both the server and the client
ii? samba-dsdb-modules:amd64 2:4.11.0+dfsg-10??????????????? 
amd64??????? Samba Directory Services Database
ii? samba-libs:amd64 2:4.11.0+dfsg-10??????????????? amd64??????? Samba 
core libraries
ii? samba-vfs-modules:amd64 2:4.11.0+dfsg-10??????????????? amd64??????? 
Samba Virtual FileSystem plugins
ii? winbind 2:4.11.0+dfsg-10??????????????? amd64??????? service to 
resolve user and group information from Windows NT servers

-----------



>
> Rowland
>
>
>
>
>
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
>
-- 
Nathalie RAMAT-LECLERCQ

Service Informatique

Universite du Littoral-C?te d'Opale
SCoSI - Service Commun du Syst?me d'Information
P?le Syst?mes et r?seaux

Centre de Gestion Universitaire de Calais
50 rue ferdinand Buisson
C.S 80699
62228 CALAIS CEDEX