Mario Pio Russo
2015-Apr-29 13:01 UTC
[Samba] Classicupgrade succeded with Sernet-samba-4.2.1 AD, but Kinit not wokring
Thanks Luis
I have changed ccdc.lan to CCDC.LAN
(NOTE: I cannot change the LAN suffix, this is an old domain that needs to
be imported into the samba 4.2.x version, it's a production domain and
cannot be changed, furthermore it's on an isolated network. P.S. I have
used the same name / procedure with the official samba 4.1.6 ubuntu package
and that has give no error whatsoever)
I am using samba internal dns and I'm happy with that (it worked just fine
for me on 4.1.x)
if in the smb.conf I omit the line:
server services = dns
then no dns will not start at all, so I need to keep it
if I use the following line:
server services = dns -winbindd +winbind
then I have the following error:
Apr 29 13:47:02 ccdc-samba4 ntpd_intres[1364]: host name not found:
timeserver.raleigh.ibm.com
Apr 29 13:47:02 ccdc-samba4 ntpd_intres[1364]: host name not found:
timeserver.almaden.ibm.com
Apr 29 13:47:02 ccdc-samba4 ntpd_intres[1364]: host name not found:
timeserver.watson.ibm.com
Apr 29 13:47:02 ccdc-samba4 ntpd_intres[1364]: host name not found:
timeserver.zurich.ibm.com
Apr 29 13:47:02 ccdc-samba4 ntpd_intres[1364]: host name not found:
timeserver.btv.ibm.com
Apr 29 13:47:34 ccdc-samba4 samba[1612]: [2015/04/29 13:47:34.351192,
0] ../source4/smbd/server.c:370(binary_smbd_main)
Apr 29 13:47:34 ccdc-samba4 samba[1612]: samba version
4.2.1-SerNet-Ubuntu-7.trusty started.
Apr 29 13:47:34 ccdc-samba4 samba[1612]: Copyright Andrew Tridgell and
the Samba Team 1992-2014
Apr 29 13:47:34 ccdc-samba4 samba[1613]: [2015/04/29 13:47:34.560196,
0] ../source4/smbd/server.c:488(binary_smbd_main)
Apr 29 13:47:34 ccdc-samba4 samba[1613]: samba: using 'standard'
process
model
Apr 29 13:47:34 ccdc-samba4 samba[1613]: [2015/04/29 13:47:34.561393,
0] ../source4/smbd/service.c:98(server_service_startup)
Apr 29 13:47:34 ccdc-samba4 samba[1613]: Failed to start service
'-winbindd' - NT_STATUS_INVALID_SYSTEM_SERVICE
Apr 29 13:47:34 ccdc-samba4 samba[1613]: [2015/04/29 13:47:34.561997,
0] ../lib/util/become_daemon.c:111(exit_daemon)
Apr 29 13:47:34 ccdc-samba4 samba[1613]: STATUS=daemon failed to start:
Samba failed to start services, error code -1073741796
Apr 29 13:48:45 ccdc-samba4 samba[1650]: [2015/04/29 13:48:45.742583,
0] ../source4/smbd/server.c:370(binary_smbd_main)
Apr 29 13:48:45 ccdc-samba4 samba[1650]: samba version
4.2.1-SerNet-Ubuntu-7.trusty started.
Apr 29 13:48:45 ccdc-samba4 samba[1650]: Copyright Andrew Tridgell and
the Samba Team 1992-2014
Apr 29 13:48:45 ccdc-samba4 samba[1651]: [2015/04/29 13:48:45.962817,
0] ../source4/smbd/server.c:488(binary_smbd_main)
Apr 29 13:48:45 ccdc-samba4 samba[1651]: samba: using 'standard'
process
model
Apr 29 13:48:45 ccdc-samba4 samba[1651]: [2015/04/29 13:48:45.963978,
0] ../source4/smbd/service.c:98(server_service_startup)
Apr 29 13:48:45 ccdc-samba4 samba[1651]: Failed to start service
'+winbindd' - NT_STATUS_INVALID_SYSTEM_SERVICE
Apr 29 13:48:45 ccdc-samba4 samba[1651]: [2015/04/29 13:48:45.964161,
0] ../lib/util/become_daemon.c:111(exit_daemon)
Apr 29 13:48:45 ccdc-samba4 samba[1651]: STATUS=daemon failed to start:
Samba failed to start services, error code -1073741796
if I use the line
server services = dns winbindd
then I have the following error:
Apr 29 13:49:16 ccdc-samba4 samba[1688]: [2015/04/29 13:49:16.377765,
0] ../source4/smbd/server.c:370(binary_smbd_main)
Apr 29 13:49:16 ccdc-samba4 samba[1688]: samba version
4.2.1-SerNet-Ubuntu-7.trusty started.
Apr 29 13:49:16 ccdc-samba4 samba[1688]: Copyright Andrew Tridgell and
the Samba Team 1992-2014
Apr 29 13:49:16 ccdc-samba4 samba[1689]: [2015/04/29 13:49:16.587401,
0] ../source4/smbd/server.c:488(binary_smbd_main)
Apr 29 13:49:16 ccdc-samba4 samba[1689]: samba: using 'standard'
process
model
Apr 29 13:49:16 ccdc-samba4 samba[1689]: [2015/04/29 13:49:16.589677,
0] ../lib/util/become_daemon.c:124(daemon_ready)
Apr 29 13:49:16 ccdc-samba4 samba[1689]: STATUS=daemon 'samba'
finished
starting up and ready to serve connections
Apr 29 13:49:16 ccdc-samba4 winbindd[1692]: [2015/04/29 13:49:16.762676,
0] ../source3/winbindd/winbindd_cache.c:3235(initialize_winbindd_cache)
Apr 29 13:49:16 ccdc-samba4 winbindd[1692]: initialize_winbindd_cache:
clearing cache and re-creating with version number 2
Apr 29 13:49:16 ccdc-samba4 winbindd[1692]: [2015/04/29 13:49:16.768143,
0] ../lib/util/become_daemon.c:124(daemon_ready)
Apr 29 13:49:16 ccdc-samba4 winbindd[1692]: STATUS=daemon 'winbindd'
finished starting up and ready to serve connections
Apr 29 13:49:16 ccdc-samba4 winbindd[1693]: [2015/04/29 13:49:16.803340,
0] ../source3/winbindd/winbindd_cm.c:1670(wb_open_internal_pipe)
Apr 29 13:49:16 ccdc-samba4 winbindd[1693]: open_internal_pipe: Could not
connect to dssetup pipe: NT_STATUS_UNSUCCESSFUL
Apr 29 13:49:16 ccdc-samba4 winbindd[1693]: [2015/04/29 13:49:16.837669,
0] ../source3/winbindd/winbindd_cm.c:1670(wb_open_internal_pipe)
Apr 29 13:49:16 ccdc-samba4 winbindd[1693]: open_internal_pipe: Could not
connect to lsarpc pipe: NT_STATUS_UNSUCCESSFUL
Apr 29 13:49:16 ccdc-samba4 winbindd[1693]: [2015/04/29 13:49:16.838379,
0] ../source3/winbindd/winbindd_cm.c:1670(wb_open_internal_pipe)
Apr 29 13:49:16 ccdc-samba4 winbindd[1693]: open_internal_pipe: Could not
connect to dssetup pipe: NT_STATUS_UNSUCCESSFUL
Apr 29 13:49:16 ccdc-samba4 winbindd[1693]: [2015/04/29 13:49:16.838803,
0] ../source3/winbindd/winbindd_cm.c:1670(wb_open_internal_pipe)
Apr 29 13:49:16 ccdc-samba4 winbindd[1693]: open_internal_pipe: Could not
connect to lsarpc pipe: NT_STATUS_UNSUCCESSFUL
Apr 29 13:49:16 ccdc-samba4 winbindd[1693]: [2015/04/29 13:49:16.839251,
0] ../source3/winbindd/winbindd_cm.c:1670(wb_open_internal_pipe)
Apr 29 13:49:16 ccdc-samba4 winbindd[1693]: open_internal_pipe: Could not
connect to lsarpc pipe: NT_STATUS_UNSUCCESSFUL
in any case the kinit won t work
___________________________________________________________________________________________
Mario Pio Russo, System Admin SWG IT Services Dublin, Phone & FAX: +353 1
815 2236, eMail: mariopiorusso at ie.ibm.com
IBM Ireland Product Distribution Limited registered in Ireland with number
92815. Registered Office: IBM House, Shelbourne Road, Ballsbridge, Dublin 4
(Embedded image moved to file: pic32682.gif)
From: "L.P.H. van Belle" <belle at bazuin.nl>
To: "samba at lists.samba.org" <samba at lists.samba.org>
Cc: Mario Pio Russo/Ireland/IBM at IBMIE
Date: 29/04/2015 13:29
Subject: Re: [Samba] Classicupgrade succeded with Sernet-samba-4.2.1 AD,
but Kinit not wokring
Sent by: samba-bounces at lists.samba.org
Hai,.
We do advice you to change this. .local .lan are reserved names by apple
mDNS/zeroconf"
and the same for : .test .example
(.com/.net/.org) .invalid .localdomain .localhost, dont use these.
More info see : rfc2606, rfc6762
and change the following.
server services = dns winbind
#server services = winbind
If you use BIND9_DLZ
server services = -dns
if you used old winbind on 4.2.1
server services = -dns -winbindd +winbind
and..
realm = ccdc.lan
change it to
realm = CCDC.LAN
Greetz,
Louis
>-----Oorspronkelijk bericht-----
>Van: mariopiorusso at ie.ibm.com
>[mailto:samba-bounces at lists.samba.org] Namens Mario Pio Russo
>Verzonden: woensdag 29 april 2015 14:10
>Aan: samba at lists.samba.org
>Onderwerp: [Samba] Classicupgrade succeded with
>Sernet-samba-4.2.1 AD, but Kinit not wokring
>
>
>Good Day All
>
>I have been trying to upgrade from samba 3 to samba 4.2.1 on
>Ubuntu 14.4
>using the sernet-samba package.
>
>the upgrade seems to work fine and the samba4 comes up correctlly,
>
>I have also run the following script to get rid of bug
>
>
>https://git.samba.org/?p=samba.git;a=blob_plain;f=source4/scrip
>ting/devel/chgtdcpass;h=4f5ea15a80c2862daf170a5657658a8163174f8
>a;hb=HEAD
>
>
>
>I am able to resolve some basic dns entry using the host command, and
>that's good, however any kinit does not work and return
>
>kinit mariopio at CCDC.LAN
>kinit: Cannot contact any KDC for realm 'CCDC.LAN' while
>getting initial
>credentials
>
>
>my smb.conf file is the following
>
># Global parameters
>[global]
> workgroup = CCDC
> realm = ccdc.lan
> netbios name = CCDC-SAMBA4
> server role = active directory domain controller
> idmap_ldb:use rfc2307 = yes
> dns forwarder = 9.0.138.50
> server services = dns winbind
> #server services = winbind
>
>
>[netlogon]
> path = /var/lib/samba/sysvol/ccdc.lan/scripts
> read only = No
>
>[sysvol]
> path = /var/lib/samba/sysvol
> read only = No
>
>
>do you have any suggestion?
>
>thanks
>
>
>_______________________________________________________________
>____________________________
>
>Mario Pio Russo, System Admin SWG IT Services Dublin, Phone &
>FAX: +353 1
>815 2236, eMail: mariopiorusso at ie.ibm.com
>IBM Ireland Product Distribution Limited registered in Ireland
>with number
>92815. Registered Office: IBM House, Shelbourne Road,
>Ballsbridge, Dublin 4
>
>(Embedded image moved to file: pic27694.gif)--
>To unsubscribe from this list go to the following URL and read the
>instructions: https://lists.samba.org/mailman/options/samba
>
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
Luca Olivetti
2015-Apr-29 14:59 UTC
[Samba] Classicupgrade succeded with Sernet-samba-4.2.1 AD, but Kinit not wokring
El 29/04/15 a les 15:01, Mario Pio Russo ha escrit:> if in the smb.conf I omit the line: > > server services = dns > > then no dns will not start at all, so I need to keep itStrange. I'm using the same distribution, the same sernet packages, I have no "server services" line whatsoever and the internal dns server starts just fine. Bye -- Luca Olivetti Wetron Automation Technology http://www.wetron.es Tel. +34 935883004 Fax +34 935883007
Rowland Penny
2015-Apr-29 15:35 UTC
[Samba] Classicupgrade succeded with Sernet-samba-4.2.1 AD, but Kinit not wokring
On 29/04/15 15:59, Luca Olivetti wrote:> El 29/04/15 a les 15:01, Mario Pio Russo ha escrit: > >> if in the smb.conf I omit the line: >> >> server services = dns >> >> then no dns will not start at all, so I need to keep it > Strange. > I'm using the same distribution, the same sernet packages, I have no > "server services" line whatsoever and the internal dns server starts > just fine. > > ByeOH YES YOU DO :-D You just cannot see it, try: samba-tool testparm -v | grep 'server services' Rowland
Rowland Penny
2015-Apr-29 15:50 UTC
[Samba] Classicupgrade succeded with Sernet-samba-4.2.1 AD, but Kinit not wokring
On 29/04/15 16:45, Luca Olivetti wrote:> El 29/04/15 a les 17:35, Rowland Penny ha escrit: >> On 29/04/15 15:59, Luca Olivetti wrote: >>> El 29/04/15 a les 15:01, Mario Pio Russo ha escrit: >>> >>>> if in the smb.conf I omit the line: >>>> >>>> server services = dns >>>> >>>> then no dns will not start at all, so I need to keep it >>> Strange. >>> I'm using the same distribution, the same sernet packages, I have no >>> "server services" line whatsoever and the internal dns server starts >>> just fine. >>> >>> Bye >> OH YES YOU DO :-D >> >> You just cannot see it, try: samba-tool testparm -v | grep 'server >> services' > '-v' shows the defaults as well as what's in the file, so I still find > it strange that with the same distribution, same packages, no explicit > "server services" line in smb.conf, I have a working dns while Mario hasn't. > > ByeYou used the correct word 'defaults' , if you use the internal dns server, you use all the default settings and the line is not added to your smb.conf. If you provision with bind9, you do not use the dns 'server service' and you do get the line in smb.conf. Rowland