samba - Sep 2015 - Samba AD - Issue with winbindd: Could not write result

On 02/09/15 13:59, Rafael Domiciano wrote:
> Thanks Rowland for response.
>
> OK, setup the "log level = 10".
>
> I noticed something today. I have to restart the samba server 2 times. 
> In the second restart I did a named restart too. Maybe could be 
> something related to communication to named?
>
> I did the named.conf conforming the wiki, adding these 2 lines:
>
> options {.... # DNS dynamic updates via kerberos tkey-gssapi-keytab 
> "/opt/samba/private/dns.keytab"; };
>
> include "/opt/samba/private/named.conf";
>
>
Can the 'named' user read the keytab ?

Rowland

Yes, named user as read privileges on folder "dns" and in
"dns.keytab" file.

[root at wdc private]# ll 
total 12824 
drwxrwx--- 3 root named 4096 Ago 5 15:53 dns 
-rw-r----- 1 root named 807 Ago 5 15:53 dns.keytab 



----- Mensagem original -----

De: "Rowland Penny" <rowlandpenny241155 at gmail.com> 
Para: samba at lists.samba.org 
Enviadas: Quarta-feira, 2 de Setembro de 2015 10:05:26 
Assunto: Re: [Samba] Samba AD - Issue with winbindd: Could not write result 

On 02/09/15 13:59, Rafael Domiciano wrote: 
> Thanks Rowland for response. 
> 
> OK, setup the "log level = 10". 
> 
> I noticed something today. I have to restart the samba server 2 times. 
> In the second restart I did a named restart too. Maybe could be 
> something related to communication to named? 
> 
> I did the named.conf conforming the wiki, adding these 2 lines: 
> 
> options {.... # DNS dynamic updates via kerberos tkey-gssapi-keytab 
> "/opt/samba/private/dns.keytab"; }; 
> 
> include "/opt/samba/private/named.conf"; 
> 
> 
Can the 'named' user read the keytab ? 

Rowland 

-- 
To unsubscribe from this list go to the following URL and read the 
instructions: https://lists.samba.org/mailman/options/samba

Can you check the full path.. 

755   755  755 
/opt/samba/private/

Its possible that the private folder had 700

Greetz, 

Louis


> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Rafael
Domiciano
> Verzonden: woensdag 2 september 2015 15:09
> Aan: Rowland Penny
> CC: samba at lists.samba.org
> Onderwerp: Re: [Samba] Samba AD - Issue with winbindd: Could not write
> result
> 
> Yes, named user as read privileges on folder "dns" and in
"dns.keytab"
> file.
> 
> [root at wdc private]# ll
> total 12824
> drwxrwx--- 3 root named 4096 Ago 5 15:53 dns
> -rw-r----- 1 root named 807 Ago 5 15:53 dns.keytab
> 
> 
> 
> ----- Mensagem original -----
> 
> De: "Rowland Penny" <rowlandpenny241155 at gmail.com>
> Para: samba at lists.samba.org
> Enviadas: Quarta-feira, 2 de Setembro de 2015 10:05:26
> Assunto: Re: [Samba] Samba AD - Issue with winbindd: Could not write
> result
> 
> On 02/09/15 13:59, Rafael Domiciano wrote:
> > Thanks Rowland for response.
> >
> > OK, setup the "log level = 10".
> >
> > I noticed something today. I have to restart the samba server 2 times.
> > In the second restart I did a named restart too. Maybe could be
> > something related to communication to named?
> >
> > I did the named.conf conforming the wiki, adding these 2 lines:
> >
> > options {.... # DNS dynamic updates via kerberos tkey-gssapi-keytab
> > "/opt/samba/private/dns.keytab"; };
> >
> > include "/opt/samba/private/named.conf";
> >
> >
> 
> Can the 'named' user read the keytab ?
> 
> Rowland
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

Yes, sure, the permissions are 755 to these folders: 

[root at wdc logs]# ls -ld /opt 
drwxr-xr-x. 4 administrator root 4096 Ago 10 14:51 /opt 

[root at wdc logs]# ls -ld /opt/samba/ 
drwxr-xr-x 13 administrator root 4096 Ago 11 09:58 /opt/samba/ 

[root at wdc logs]# ls -ld /opt/samba/private/ 
drwxr-xr-x 7 administrator root 4096 Set 2 10:40 /opt/samba/private/ 

Rafael 

----- Mensagem original -----

De: "L.P.H. van Belle" <belle at bazuin.nl> 
Para: samba at lists.samba.org 
Enviadas: Quarta-feira, 2 de Setembro de 2015 10:20:16 
Assunto: Re: [Samba] Samba AD - Issue with winbindd: Could not write result 

Can you check the full path.. 

755 755 755 
/opt/samba/private/ 

Its possible that the private folder had 700 

Greetz, 

Louis 


> -----Oorspronkelijk bericht----- 
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Rafael
Domiciano
> Verzonden: woensdag 2 september 2015 15:09 
> Aan: Rowland Penny 
> CC: samba at lists.samba.org 
> Onderwerp: Re: [Samba] Samba AD - Issue with winbindd: Could not write 
> result 
> 
> Yes, named user as read privileges on folder "dns" and in
"dns.keytab"
> file. 
> 
> [root at wdc private]# ll 
> total 12824 
> drwxrwx--- 3 root named 4096 Ago 5 15:53 dns 
> -rw-r----- 1 root named 807 Ago 5 15:53 dns.keytab 
> 
> 
> 
> ----- Mensagem original ----- 
> 
> De: "Rowland Penny" <rowlandpenny241155 at gmail.com> 
> Para: samba at lists.samba.org 
> Enviadas: Quarta-feira, 2 de Setembro de 2015 10:05:26 
> Assunto: Re: [Samba] Samba AD - Issue with winbindd: Could not write 
> result 
> 
> On 02/09/15 13:59, Rafael Domiciano wrote: 
> > Thanks Rowland for response. 
> > 
> > OK, setup the "log level = 10". 
> > 
> > I noticed something today. I have to restart the samba server 2 times.
> > In the second restart I did a named restart too. Maybe could be 
> > something related to communication to named? 
> > 
> > I did the named.conf conforming the wiki, adding these 2 lines: 
> > 
> > options {.... # DNS dynamic updates via kerberos tkey-gssapi-keytab 
> > "/opt/samba/private/dns.keytab"; }; 
> > 
> > include "/opt/samba/private/named.conf"; 
> > 
> > 
> 
> Can the 'named' user read the keytab ? 
> 
> Rowland 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the 
> instructions: https://lists.samba.org/mailman/options/samba 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the 
> instructions: https://lists.samba.org/mailman/options/samba 


-- 
To unsubscribe from this list go to the following URL and read the 
instructions: https://lists.samba.org/mailman/options/samba