samba - Nov 2019 - security = ads parameter not working in samba 4.9.5

Hi Rowland,

The line 60 contains "{" in the script. The exit 1 statement is on
line
number 58. Am I missing something?

Regards
Sachin Kumar

On Fri, Nov 29, 2019 at 5:21 PM Rowland penny via samba <
samba at lists.samba.org> wrote:
> On 29/11/2019 11:28, Sac Isilia wrote:
> > Hi Rowland,
> >
> > I get below error while running the script again.
> >
> > bash samba-collect-debug-info.sh > samba-output
> > kinit: Client's credentials have been revoked while getting
initial
> > credentials
> Open the script, go to line 60, comment out the line close and save,
> then rerun the script
> >
> > Below is my /etc/krb5.conf
> >
> > [libdefaults]
> >         default_realm = EMEA.MEDIA.GLOBAL.LOC
>
> Is that the same realm as on the DCs ?
>
> The script output should help ;-)
>
> Rowland
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

On 29/11/2019 11:58, Sac Isilia wrote:
> Hi Rowland,
>
> The line 60 contains "{" in the script. The exit 1 statement is
on
> line number 58. Am I?missing something?
>
Hmm, just checked again:

https://github.com/thctlo/samba4/blob/master/samba-collect-debug-info.sh

And weirdly, the two blanks lines at 45 & 47 disappear in you cut and 
paste that page, so line 60 becomes line 58, To ensure you comment the 
correct line it is the 'exit 1' line here:

if [ "${?}" -ge 1 ]
then
 ??? {
 ??? echo "WARNING: kinit Administrator will fail and this needs to be 
fixed first."
 ??? echo "unable to verify DNS kerberos._tcp SRV records"
 ??? echo " "
 ??? echo "$(nslookup -type=SRV _kerberos._tcp.${DOMAIN})"
 ??? }? >> $LOGFILE
 ??? exit 1
else

The lines do not disappear if you cut & paste the 'raw' output.

Rowland

Hi Rowland,

Exactly. I commented the same line that you mentioned, but the same error
persists.

Regards
Sachin Kumar

On Fri, Nov 29, 2019 at 5:43 PM Rowland penny via samba <
samba at lists.samba.org> wrote:
> On 29/11/2019 11:58, Sac Isilia wrote:
> > Hi Rowland,
> >
> > The line 60 contains "{" in the script. The exit 1 statement
is on
> > line number 58. Am I missing something?
> >
> Hmm, just checked again:
>
> https://github.com/thctlo/samba4/blob/master/samba-collect-debug-info.sh
>
> And weirdly, the two blanks lines at 45 & 47 disappear in you cut and
> paste that page, so line 60 becomes line 58, To ensure you comment the
> correct line it is the 'exit 1' line here:
>
> if [ "${?}" -ge 1 ]
> then
>      {
>      echo "WARNING: kinit Administrator will fail and this needs to be
> fixed first."
>      echo "unable to verify DNS kerberos._tcp SRV records"
>      echo " "
>      echo "$(nslookup -type=SRV _kerberos._tcp.${DOMAIN})"
>      }  >> $LOGFILE
>      exit 1
> else
>
> The lines do not disappear if you cut & paste the 'raw' output.
>
> Rowland
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>