thr3ads.net - samba - [Samba] After Update Member Server not working [Apr 2015]

If this information is useful, please help other people find it:
Share via:

L.P.H. van Belle

2015-Apr-09 14:21 UTC

[Samba] After Update Member Server not working

The bios of the server did not know about summer and winter time.. 

And your welkom ;-) if they were all this easy to fix  ;-))  


Greetz, 

Louis

>-----Oorspronkelijk bericht-----
>Van: lists at kiuni.de [mailto:samba-bounces at lists.samba.org] Namens Tim
>Verzonden: donderdag 9 april 2015 16:19
>Aan: samba at lists.samba.org
>Onderwerp: Re: [Samba] After Update Member Server not working
>
>Hey Louis,
>
>it was the time. For some reason ntp did not work correctly 
>anymore. Thank you very much. It was 1 hour behind.
>
>Regards
>Tim
>
>
>
>
>Am 09.04.2015 um 14:26 schrieb L.P.H. van Belle:
>> Did you reboot your server?
>>
>> I would start with check the time on the member and DC server.
>> make sure its withing 5 min.
>>
>> check the resolv.conf file.
>>
>> check your keytab file rights
>>
>> try to init.
>> kinit administrator
>> klist -e
>>
>> klist -k /etc/krb5.keytab -e
>>
>> and you can try to change:
>> interfaces = lo enp0s25
>> to
>> interfaces = lo ipnumber
>>
>> I stoppped using the interface name because of bug in 
>detecting the names. ( ubuntu mostly )
>>
>>
>> Louis
>>
>>
>>
>>> -----Oorspronkelijk bericht-----
>>> Van: lists at kiuni.de [mailto:samba-bounces at lists.samba.org] 
>Namens Tim
>>> Verzonden: donderdag 9 april 2015 14:10
>>> Aan: samba at lists.samba.org
>>> Onderwerp: [Samba] After Update Member Server not working
>>>
>>> Hello all,
>>>
>>> I got some updates for my centos 7 (core), but nothing for the
>>> sernet-samba-packages.
>>>
>>> But now, my (test) member server isn't accessable anymore. Its
>>> smb.conf:
>>>
>>> [global]
>>>
>>>     netbios name = SERVERNAME
>>>     workgroup = DOMAIN
>>>     security = ADS
>>>     realm = DOMAIN.EXAMPLE.COM
>>>     dedicated keytab file = /etc/krb5.keytab
>>>     kerberos method = secrets and keytab
>>>     log level = 10 winbind:2
>>>
>>>      bind interfaces only = yes
>>>     interfaces = lo enp0s25
>>>
>>>     username map = /etc/samba/user.map
>>>
>>>     idmap config *:backend = tdb
>>>     idmap config *:range = 2000-8999
>>>     idmap config DOMAIN:backend = ad
>>>     idmap config DOMAIN:schema_mode = rfc2307
>>>     idmap config DOMAIN:range = 10000-99999
>>>
>>>     winbind nss info = rfc2307
>>>     winbind trusted domains only = no
>>>     winbind use default domain = yes
>>>     winbind enum users  = yes
>>>     winbind enum groups = yes
>>>     winbind refresh tickets = Yes
>>>     winbind expand groups = 4
>>>     winbind normalize names = Yes
>>>     domain master = no
>>>     local master = no
>>>
>>>     vfs objects = acl_xattr
>>>     map acl inherit = Yes
>>>     store dos attributes = Yes
>>>
>>> [share]
>>>     path = /srv/share
>>>     read only = no
>>>
>>> The behaviour is the following: If I hit \\<IP adress>, I
>>> can/must authenticate with administrator, normal domain users
>>> do not work anymore. When I hit \\<Servername>, nothing is
>>> working. There is only a message, I am not authorized to use
>>> the resource.
>>>
>>>
>>> Here your are a log of smbd:
>>> grep LOGON /var/log/samba/log.smbd
>>>    SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
>>>    SPNEGO login failed: NT_STATUS_LOGON_FAILURE
>>>    smbd_smb2_request_error_ex: idx[1]
>>> status[NT_STATUS_LOGON_FAILURE] || at
>>> ../source3/smbd/smb2_sesssetup.c:131
>>>    smbd_smb2_request_done_ex: idx[1]
>>> status[NT_STATUS_LOGON_FAILURE] body[8] dyn[yes:1] at
>>> ../source3/smbd/smb2_server.c:2646
>>>    SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
>>>    SPNEGO login failed: NT_STATUS_LOGON_FAILURE
>>>    smbd_smb2_request_error_ex: idx[1]
>>> status[NT_STATUS_LOGON_FAILURE] || at
>>> ../source3/smbd/smb2_sesssetup.c:131
>>>    smbd_smb2_request_done_ex: idx[1]
>>> status[NT_STATUS_LOGON_FAILURE] body[8] dyn[yes:1] at
>>> ../source3/smbd/smb2_server.c:2646
>>>    SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
>>>    SPNEGO login failed: NT_STATUS_LOGON_FAILURE
>>>    smbd_smb2_request_error_ex: idx[1]
>>> status[NT_STATUS_LOGON_FAILURE] || at
>>> ../source3/smbd/smb2_sesssetup.c:131
>>>    smbd_smb2_request_done_ex: idx[1]
>>> status[NT_STATUS_LOGON_FAILURE] body[8] dyn[yes:1] at
>>> ../source3/smbd/smb2_server.c:2646
>>>    SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
>>>    SPNEGO login failed: NT_STATUS_LOGON_FAILURE
>>>    smbd_smb2_request_error_ex: idx[1]
>>> status[NT_STATUS_LOGON_FAILURE] || at
>>> ../source3/smbd/smb2_sesssetup.c:131
>>>    smbd_smb2_request_done_ex: idx[1]
>>> status[NT_STATUS_LOGON_FAILURE] body[8] dyn[yes:1] at
>>> ../source3/smbd/smb2_server.c:2646
>>>    SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
>>>    SPNEGO login failed: NT_STATUS_LOGON_FAILURE
>>>    smbd_smb2_request_error_ex: idx[1]
>>> status[NT_STATUS_LOGON_FAILURE] || at
>>> ../source3/smbd/smb2_sesssetup.c:131
>>>    smbd_smb2_request_done_ex: idx[1]
>>> status[NT_STATUS_LOGON_FAILURE] body[8] dyn[yes:1] at
>>> ../source3/smbd/smb2_server.c:2646
>>>    SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
>>>    SPNEGO login failed: NT_STATUS_LOGON_FAILURE
>>>    smbd_smb2_request_error_ex: idx[1]
>>> status[NT_STATUS_LOGON_FAILURE] || at
>>> ../source3/smbd/smb2_sesssetup.c:131
>>>    smbd_smb2_request_done_ex: idx[1]
>>> status[NT_STATUS_LOGON_FAILURE] body[8] dyn[yes:1] at
>>> ../source3/smbd/smb2_server.c:2646
>>>
>>> My krb5.conf
>>> [libdefaults]
>>>   dns_lookup_realm = true
>>>   ticket_lifetime = 24h
>>>   renew_lifetime = 7d
>>>   forwardable = true
>>>   rdns = false
>>>   default_realm = Q007DPK2.Q007.INTERN
>>>   dns_lookup_kdc = true
>>>
>>> I would appreciate your help. Thanks in advance.
>>>
>>> Regards
>>> Tim
>>> --
>>> To unsubscribe from this list go to the following URL and read the
>>> instructions:  https://lists.samba.org/mailman/options/samba
>>>
>>>
>>
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba
>
>

Tim

2015-Apr-09 15:52 UTC

head link

[Samba] After Update Member Server not working

I hate this time change twice a year. Really! Should be banned and sent to the
moon.

Dank je wel!


Am 09.04.2015 um 16:21 schrieb L.P.H. van Belle:> The bios of the server did not know about summer and winter time..
>
> And your welkom ;-) if they were all this easy to fix  ;-))
>
>
> Greetz,
>
> Louis
>
>
>> -----Oorspronkelijk bericht-----
>> Van: lists at kiuni.de [mailto:samba-bounces at lists.samba.org] Namens
Tim
>> Verzonden: donderdag 9 april 2015 16:19
>> Aan: samba at lists.samba.org
>> Onderwerp: Re: [Samba] After Update Member Server not working
>>
>> Hey Louis,
>>
>> it was the time. For some reason ntp did not work correctly
>> anymore. Thank you very much. It was 1 hour behind.
>>
>> Regards
>> Tim
>>
>>
>>
>>
>> Am 09.04.2015 um 14:26 schrieb L.P.H. van Belle:
>>> Did you reboot your server?
>>>
>>> I would start with check the time on the member and DC server.
>>> make sure its withing 5 min.
>>>
>>> check the resolv.conf file.
>>>
>>> check your keytab file rights
>>>
>>> try to init.
>>> kinit administrator
>>> klist -e
>>>
>>> klist -k /etc/krb5.keytab -e
>>>
>>> and you can try to change:
>>> interfaces = lo enp0s25
>>> to
>>> interfaces = lo ipnumber
>>>
>>> I stoppped using the interface name because of bug in
>> detecting the names. ( ubuntu mostly )
>>>
>>>
>>> Louis
>>>
>>>
>>>
>>>> -----Oorspronkelijk bericht-----
>>>> Van: lists at kiuni.de [mailto:samba-bounces at
lists.samba.org]
>> Namens Tim
>>>> Verzonden: donderdag 9 april 2015 14:10
>>>> Aan: samba at lists.samba.org
>>>> Onderwerp: [Samba] After Update Member Server not working
>>>>
>>>> Hello all,
>>>>
>>>> I got some updates for my centos 7 (core), but nothing for the
>>>> sernet-samba-packages.
>>>>
>>>> But now, my (test) member server isn't accessable anymore.
Its
>>>> smb.conf:
>>>>
>>>> [global]
>>>>
>>>>      netbios name = SERVERNAME
>>>>      workgroup = DOMAIN
>>>>      security = ADS
>>>>      realm = DOMAIN.EXAMPLE.COM
>>>>      dedicated keytab file = /etc/krb5.keytab
>>>>      kerberos method = secrets and keytab
>>>>      log level = 10 winbind:2
>>>>
>>>>       bind interfaces only = yes
>>>>      interfaces = lo enp0s25
>>>>
>>>>      username map = /etc/samba/user.map
>>>>
>>>>      idmap config *:backend = tdb
>>>>      idmap config *:range = 2000-8999
>>>>      idmap config DOMAIN:backend = ad
>>>>      idmap config DOMAIN:schema_mode = rfc2307
>>>>      idmap config DOMAIN:range = 10000-99999
>>>>
>>>>      winbind nss info = rfc2307
>>>>      winbind trusted domains only = no
>>>>      winbind use default domain = yes
>>>>      winbind enum users  = yes
>>>>      winbind enum groups = yes
>>>>      winbind refresh tickets = Yes
>>>>      winbind expand groups = 4
>>>>      winbind normalize names = Yes
>>>>      domain master = no
>>>>      local master = no
>>>>
>>>>      vfs objects = acl_xattr
>>>>      map acl inherit = Yes
>>>>      store dos attributes = Yes
>>>>
>>>> [share]
>>>>      path = /srv/share
>>>>      read only = no
>>>>
>>>> The behaviour is the following: If I hit \\<IP adress>, I
>>>> can/must authenticate with administrator, normal domain users
>>>> do not work anymore. When I hit \\<Servername>, nothing
is
>>>> working. There is only a message, I am not authorized to use
>>>> the resource.
>>>>
>>>>
>>>> Here your are a log of smbd:
>>>> grep LOGON /var/log/samba/log.smbd
>>>>     SPNEGO(gse_krb5) NEG_TOKEN_INIT failed:
NT_STATUS_LOGON_FAILURE
>>>>     SPNEGO login failed: NT_STATUS_LOGON_FAILURE
>>>>     smbd_smb2_request_error_ex: idx[1]
>>>> status[NT_STATUS_LOGON_FAILURE] || at
>>>> ../source3/smbd/smb2_sesssetup.c:131
>>>>     smbd_smb2_request_done_ex: idx[1]
>>>> status[NT_STATUS_LOGON_FAILURE] body[8] dyn[yes:1] at
>>>> ../source3/smbd/smb2_server.c:2646
>>>>     SPNEGO(gse_krb5) NEG_TOKEN_INIT failed:
NT_STATUS_LOGON_FAILURE
>>>>     SPNEGO login failed: NT_STATUS_LOGON_FAILURE
>>>>     smbd_smb2_request_error_ex: idx[1]
>>>> status[NT_STATUS_LOGON_FAILURE] || at
>>>> ../source3/smbd/smb2_sesssetup.c:131
>>>>     smbd_smb2_request_done_ex: idx[1]
>>>> status[NT_STATUS_LOGON_FAILURE] body[8] dyn[yes:1] at
>>>> ../source3/smbd/smb2_server.c:2646
>>>>     SPNEGO(gse_krb5) NEG_TOKEN_INIT failed:
NT_STATUS_LOGON_FAILURE
>>>>     SPNEGO login failed: NT_STATUS_LOGON_FAILURE
>>>>     smbd_smb2_request_error_ex: idx[1]
>>>> status[NT_STATUS_LOGON_FAILURE] || at
>>>> ../source3/smbd/smb2_sesssetup.c:131
>>>>     smbd_smb2_request_done_ex: idx[1]
>>>> status[NT_STATUS_LOGON_FAILURE] body[8] dyn[yes:1] at
>>>> ../source3/smbd/smb2_server.c:2646
>>>>     SPNEGO(gse_krb5) NEG_TOKEN_INIT failed:
NT_STATUS_LOGON_FAILURE
>>>>     SPNEGO login failed: NT_STATUS_LOGON_FAILURE
>>>>     smbd_smb2_request_error_ex: idx[1]
>>>> status[NT_STATUS_LOGON_FAILURE] || at
>>>> ../source3/smbd/smb2_sesssetup.c:131
>>>>     smbd_smb2_request_done_ex: idx[1]
>>>> status[NT_STATUS_LOGON_FAILURE] body[8] dyn[yes:1] at
>>>> ../source3/smbd/smb2_server.c:2646
>>>>     SPNEGO(gse_krb5) NEG_TOKEN_INIT failed:
NT_STATUS_LOGON_FAILURE
>>>>     SPNEGO login failed: NT_STATUS_LOGON_FAILURE
>>>>     smbd_smb2_request_error_ex: idx[1]
>>>> status[NT_STATUS_LOGON_FAILURE] || at
>>>> ../source3/smbd/smb2_sesssetup.c:131
>>>>     smbd_smb2_request_done_ex: idx[1]
>>>> status[NT_STATUS_LOGON_FAILURE] body[8] dyn[yes:1] at
>>>> ../source3/smbd/smb2_server.c:2646
>>>>     SPNEGO(gse_krb5) NEG_TOKEN_INIT failed:
NT_STATUS_LOGON_FAILURE
>>>>     SPNEGO login failed: NT_STATUS_LOGON_FAILURE
>>>>     smbd_smb2_request_error_ex: idx[1]
>>>> status[NT_STATUS_LOGON_FAILURE] || at
>>>> ../source3/smbd/smb2_sesssetup.c:131
>>>>     smbd_smb2_request_done_ex: idx[1]
>>>> status[NT_STATUS_LOGON_FAILURE] body[8] dyn[yes:1] at
>>>> ../source3/smbd/smb2_server.c:2646
>>>>
>>>> My krb5.conf
>>>> [libdefaults]
>>>>    dns_lookup_realm = true
>>>>    ticket_lifetime = 24h
>>>>    renew_lifetime = 7d
>>>>    forwardable = true
>>>>    rdns = false
>>>>    default_realm = Q007DPK2.Q007.INTERN
>>>>    dns_lookup_kdc = true
>>>>
>>>> I would appreciate your help. Thanks in advance.
>>>>
>>>> Regards
>>>> Tim
>>>> --
>>>> To unsubscribe from this list go to the following URL and read
the
>>>> instructions:  https://lists.samba.org/mailman/options/samba
>>>>
>>>>
>>>
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>>
>>
>

Andrey Repin

2015-Apr-09 16:18 UTC

head link

[Samba] After Update Member Server not working

Greetings, Tim!
> I hate this time change twice a year. Really! Should be banned and sent to
the moon.
Install proper tzdata. I don't see an issue.
It is even better on Linux. Win7 still don't have the correct timezone data
for Russia, and that is over half a year after the decree.


-- 
With best regards,
Andrey Repin
Thursday, April 9, 2015 19:17:39

Sorry for my terrible english...

Seemingly Similar Threads

Search for more maybe matching threads

samba - Apr 2015 - After Update Member Server not working

[Samba] After Update Member Server not working

[Samba] After Update Member Server not working

[Samba] After Update Member Server not working

Seemingly Similar Threads