thr3ads.net - samba - [Samba] authentication problems sernet-samba [Oct 2015]

If this information is useful, please help other people find it:
Share via:

L.P.H. van Belle

2015-Oct-02 07:12 UTC

[Samba] authentication problems sernet-samba

Hai, see the commented.  

And as extra, disable powersaving on the network card. 

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Lulzim KELMENI
> Verzonden: vrijdag 2 oktober 2015 9:00
> Aan: samba
> Onderwerp: Re: [Samba] authentication problems sernet-samba
> 
> 
> 
> Hello Rowland,
> 
> By "authentication problems" i mean :
> 
>  	* When
> client computer start, GPO (computer ans users) are not applied[L.P.H. van Belle]   Set the policy "Wait for network"   ( Computer
policy )
>  	* When
> users try to connect to domain, they have a warning saying that the user
> session have been opend using local copy of profile.[L.P.H. van Belle]  [L.P.H. van Belle]  case above, solution also. 
>  	* In event viewer
> of client computer, we can find :
> 
>  	* id event 40960 : System have
> detected authentication problem for server
> ldap/server.dctest.local/dctest.local at DCTEST.LOCAL Kerberos "No
> authority could be contacted for authentication. (0x80090311)"
>  	* id
> event 1129
>  	* again id event 40960 (twice)
> 
>  	* And in log.samba
> :
> 
> _[2015/09/25 09:06:35.919946, 3]
> ../source4/smbd/service_stream.c:66(stream_terminate_connection)_
> _
> Terminating connection - 'imessaging_init() failed'_
> _[2015/09/25
> 09:06:35.919987, 3]
> ../source4/smbd/process_single.c:114(single_terminate)_
> _
> single_terminate: reason[imessaging_init() failed]_
> _[2015/09/25
> 09:06:36.032485, 3]
> ../source4/smbd/service_stream.c:66(stream_terminate_connection)_
> _
> Terminating connection - 'imessaging_init() failed'_
> _[2015/09/25
> 09:06:36.032513, 3]
> ../source4/smbd/process_single.c:114(single_terminate)_
> _
> single_terminate: reason[imessaging_init() failed]_
> _[2015/09/25
> 09:06:36.035481, 3]
> ../source4/smbd/service_stream.c:66(stream_terminate_connection)_
> _
> Terminating connection - 'imessaging_init() failed'_
> _[2015/09/25
> 09:06:36.035510, 3]
> ../source4/smbd/process_single.c:114(single_terminate)_
> _
> single_terminate: reason[imessaging_init() failed]_
> _[2015/09/25
> 09:06:36.070654, 3]
> ../source4/smbd/service_stream.c:66(stream_terminate_connection)_
> _
> Terminating connection - 'imessaging_init() failed'_
> _[2015/09/25
> 09:06:36.070701, 3]
> ../source4/smbd/process_single.c:114(single_terminate)_
> _
> single_terminate: reason[imessaging_init() failed]_
> _[2015/09/25
> 09:06:36.135775, 3]
> ../source4/smbd/service_stream.c:66(stream_terminate_connection)_
> _
> Terminating connection - 'imessaging_init() failed'_
> _[2015/09/25
> 09:06:36.135804, 3]
> ../source4/smbd/process_single.c:114(single_terminate)_
> _
> single_terminate: reason[imessaging_init() failed]_
> _[2015/09/25
> 09:06:36.144634, 3]
> ../source4/smbd/service_stream.c:66(stream_terminate_connection)_
> _
> Terminating connection - 'imessaging_init() failed'_
> _[2015/09/25
> 09:06:36.144680, 3]
> ../source4/smbd/process_single.c:114(single_terminate)_
> _
> single_terminate: reason[imessaging_init() failed]_
> 
> KELMENI
> Lulzim
> Direction des Systèmes d'Information
> Service Systèmes, Réseaux,
> Bases de données
> Mairie de Saint-Ouen
> 01.49.45.69.76
> 
> Le 01/10/2015
> 10:39, Rowland Penny a écrit :
> 
> > On 01/10/15 09:08, Lulzim KELMENI
> wrote:
> >
> >> Hello, We have installed samba4 under Ubuntu 14.04.3 LTS.
> root at server:~# samba -V
> >>
> >>> Version
> >> 4.2.3-SerNet-Ubuntu-7.trusty
> Sometimes, we have authentication problems. The only thing we found in
> log file, when it happend, is this :
> >>
> >>> [2015/09/28
> 17:27:06.750675, 3]
> >>
> ../source4/smbd/process_single.c:114(single_terminate) single_terminate:
> reason[imessaging_init() failed] [2015/09/28 17:27:06.856406, 3]
> ../source4/smbd/service_stream.c:66(stream_terminate_connection)
> Terminating connection - 'imessaging_init() failed' [2015/09/28
> 17:27:06.908157, 3]
> ../source4/smbd/process_single.c:114(single_terminate) single_terminate:
> reason[imessaging_init() faile
> >>
> >>> 0%">[2015/0
> >> ote>
> 17:27:06.965531, 3]
> ../source4/smbd/service_stream.c:66(stream_terminate_connection)
> Terminating connection - 'imessaging_init() failed' [201
> >>
> >>> nate:
> reaso
> >> init() failed] [2015/09/28 17:27:07.027471, 3]
> ../source4/smbd/service_stream.c:66(stream_terminate_con
> >>
> >>> ;
> border-le
> >> x solid; margin-left:5px; width:100%">[2015/09/28
> 17:27:07.027564, 3]
> ../source4/smbd/process_single.c:114(single_terminate) single_terminate:
> reason[imessaging_init() failed] [2015/09/28 17:27:07.153809, 3]
> ../source4/smbd/service_stream.c:66(stream_terminate_connection)
> Terminating connection - 'imessaging_init() fai
> >>
> >>> 100%">[2015
> >>
> quote> 17:27:07.153875, 3]
> ../source4/smbd/process_single.c:114(single_terminate) single_terminate:
> reason[imessaging_init() failed] [
> >>
> >>> Terminatin
> >> -
> 'imessaging_init() failed' [2015/09/28 17:27:07.155233, 3]
> ../source4/smbd/process_single.c:114(single_terminate
> >>
> >>>
> -left:#1010
> >> margin-left:5px; width:100%">[2015/09/28 17:27:07.263779,
> 3] ../source4/smbd/service_stream.c:66(stream_terminate_connection)
> Terminating connection - 'imessaging_init() failed' dns forwarder
> xxx.xxx.xxx.xxx (IP adress of forwarder) idmap_
> >>
> >>> ng-left:5px
> >>
> :#1010ff 2px solid; margin-left:5px; width:100%">[netlogon] path
> /var/lib/samba/sysvol/oxygen.local/scripts read only > >>
> >>>
> rgin-left:5
> >> %">path = /var/lib/samba/sysvol read only = No Any help
> would be appreciated Thank yo !,
> >>
> >>>
> >>
> >>>
> >>
> >>>
> >>
> >>>
> >>
> 
> >>>
> >>
> >>>
> >>
> >>>
> >>
> >>>
> >>
> >>>
> >
> > What do you mean
> 'authentication problems' ?
> > Authenticating from what and how?
> > Is
> there any pattern?
> >
> > Rowland
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

Lulzim KELMENI

2015-Oct-02 08:36 UTC

head link

[Samba] authentication problems sernet-samba

Hello L.P.H, 

The "Wait for Network" policy is already set and
applied to all domain computers. 

By the way, when we restart samba
(service sernet-samba-ad restart) GPO are applied and users can connect
without problem and the strange logs stop in /var/log/samba/log.samba


Cordialement,

KELMENI Lulzim
Direction des Systèmes
d'Information
Service Systèmes, Réseaux, Bases de données
Mairie de
Saint-Ouen

Le 02/10/2015 09:12, L.P.H. van Belle a écrit : 
> Hai, see
the commented. > 
> And as extra, disable powersaving on the network
card.> 
>> -----Oorspronkelijk bericht----- Van: samba[mailto:samba-bounces at lists.samba.org] Namens Lulzim KELMENI Verzonden:
vrijdag 2 oktober 2015 9:00 Aan: samba Onderwerp: Re: [Samba]
authentication problems sernet-samba Hello Rowland, By "authentication
problems" i mean : * When client computer start, GPO (computer ans
users) are not applied> 
> [L.P.H. van Belle] Set the policy "Wait for
network" ( Computer policy )> 
>> * When users try to connect todomain, they have a warning saying that the user session have been opend
using local copy of profile.[L.P.H. van Belle]> 
> [L.P.H. van Belle]
case above, solution also.> * In event viewer of client computer, 
>
>>server.dctest.local/dctest.local at
DCTEST.LOCAL">ldap/server.dctest.local/dctest.local at
DCTEST.LOCALKerberos
"No authority could be contacted for authentication. (0x80090311)" *
id
event 1129 * again id event 40960 (twice) * And in log.samba :
_[2015/09/25 09:06:35.919946, 3]
../source4/smbd/service_stream.c:66(stream_terminate_connection)_ _
Terminating connection - 'imessaging_init() failed'_ _[2015/09/25
09:06:35.919987, 3]
../source4/smbd/process_single.c:114(single_terminate)_ _
single_terminate: reason[imessaging_init() failed]_ _[2015/09/25
09:06:36.032485, 3]
../source4/smbd/service_stream.c:66(stream_terminate_connection)_ _
Terminating connection - 'imessaging_init() failed'_ _[2015/09/25
09:06:36.032513, 3]
../source4/smbd/process_single.c:114(single_terminate)_ _
single_terminate: reason[imessaging_init() failed]_ _[2015/09/25
09:06:36.035481, 3]
../source4/smbd/service_stream.c:66(stream_terminate_connection)_ _
Terminating connection - 'imessaging_init() failed'_ _[2015/09/25
09:06:36.035510, 3]
../source4/smbd/process_single.c:114(single_terminate)_ _
single_terminate: reason[imessaging_init() failed]_ _[2015/09/25
09:06:36.070654, 3]
../source4/smbd/service_stream.c:66(stream_terminate_connection)_ _
Terminating connection - 'imessaging_init() failed'_ _[2015/09/25
09:06:36.070701, 3]
../source4/smbd/process_single.c:114(single_terminate)_ _
single_terminate: reason[imessaging_init() failed]_ _[2015/09/25
09:06:36.135775, 3]
../source4/smbd/service_stream.c:66(stream_terminate_connection)_ _
Terminating connection - 'imessaging_init() failed'_ _[2015/09/25
09:06:36.135804, 3]
../source4/smbd/process_single.c:114(single_terminate)_ _
single_terminate: reason[imessaging_init() failed]_ _[2015/09/25
09:06:36.144634, 3]
../source4/smbd/service_stream.c:66(stream_terminate_connection)_ _
Terminating connection - 'imessaging_init() failed'_ _[2015/09/25
09:06:36.144680, 3]
../source4/smbd/process_single.c:114(single_terminate)_ _
single_terminate: reason[imessaging_init() failed]_ KELMENI Lulzim
Direction des Systèmes d'Information Service Systèmes, Réseaux, Bases de
données Mairie de Saint-Ouen 01.49.45.69.76 Le 01/10/2015 10:39, Rowland
Penny a écrit : >> 
>>> On 01/10/15 09:08, Lulzim KELMENI
>> wrote: 
>>
>>>> Hello, We have installed samba4 under Ubuntu 14.04.3 LTS.
>>root at server:~# samba -V ; border-le :#1010ff 2px solid; margin-left:5px;
width:100%">[netlogon] path = /var/lib/samba/sysvol/oxygen.local/scripts
read only =rgin-left:5

L.P.H. van Belle

2015-Oct-02 08:43 UTC

head link

[Samba] authentication problems sernet-samba

It this a test environment ? 

...  dctest.local 

Dont use .local reserved name of apples mDNS.  

Remove avahi from your server. 
Recheck nsswitch.conf so it starts like : passwd:         compat winbind 
( so if needed change the order ) 

Recheck you resolv.conf 
Should be : 
Search dominname 
Nameserver IP_DC1

And i you have itunes on your pc, remove it. 
And try again, this is not a samba problem but a configuration problem. 


Greetz, 

Louis

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Lulzim KELMENI
> Verzonden: vrijdag 2 oktober 2015 10:36
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] authentication problems sernet-samba
> 
> 
> 
> Hello L.P.H,
> 
> The "Wait for Network" policy is already set and
> applied to all domain computers.
> 
> By the way, when we restart samba
> (service sernet-samba-ad restart) GPO are applied and users can connect
> without problem and the strange logs stop in /var/log/samba/log.samba
> 
> 
> Cordialement,
> 
> KELMENI Lulzim
> Direction des Systèmes
> d'Information
> Service Systèmes, Réseaux, Bases de données
> Mairie de
> Saint-Ouen
> 
> Le 02/10/2015 09:12, L.P.H. van Belle a écrit :
> 
> > Hai, see
> the commented.
> >
> > And as extra, disable powersaving on the network
> card.
> >
> >> -----Oorspronkelijk bericht----- Van: samba
> [mailto:samba-bounces at lists.samba.org] Namens Lulzim KELMENI Verzonden:
> vrijdag 2 oktober 2015 9:00 Aan: samba Onderwerp: Re: [Samba]
> authentication problems sernet-samba Hello Rowland, By "authentication
> problems" i mean : * When client computer start, GPO (computer ans
> users) are not applied
> >
> > [L.P.H. van Belle] Set the policy "Wait for
> network" ( Computer policy )
> >
> >> * When users try to connect to
> domain, they have a warning saying that the user session have been opend
> using local copy of profile.[L.P.H. van Belle]
> >
> > [L.P.H. van Belle]
> case above, solution also.
> > * In event viewer of client computer,
> >
> 
> >>
> server.dctest.local/dctest.local at
DCTEST.LOCAL">ldap/server.dctest.local/dc
> test.local at DCTEST.LOCALKerberos
> "No authority could be contacted for authentication.
(0x80090311)" * id
> event 1129 * again id event 40960 (twice) * And in log.samba :
> _[2015/09/25 09:06:35.919946, 3]
> ../source4/smbd/service_stream.c:66(stream_terminate_connection)_ _
> Terminating connection - 'imessaging_init() failed'_ _[2015/09/25
> 09:06:35.919987, 3]
> ../source4/smbd/process_single.c:114(single_terminate)_ _
> single_terminate: reason[imessaging_init() failed]_ _[2015/09/25
> 09:06:36.032485, 3]
> ../source4/smbd/service_stream.c:66(stream_terminate_connection)_ _
> Terminating connection - 'imessaging_init() failed'_ _[2015/09/25
> 09:06:36.032513, 3]
> ../source4/smbd/process_single.c:114(single_terminate)_ _
> single_terminate: reason[imessaging_init() failed]_ _[2015/09/25
> 09:06:36.035481, 3]
> ../source4/smbd/service_stream.c:66(stream_terminate_connection)_ _
> Terminating connection - 'imessaging_init() failed'_ _[2015/09/25
> 09:06:36.035510, 3]
> ../source4/smbd/process_single.c:114(single_terminate)_ _
> single_terminate: reason[imessaging_init() failed]_ _[2015/09/25
> 09:06:36.070654, 3]
> ../source4/smbd/service_stream.c:66(stream_terminate_connection)_ _
> Terminating connection - 'imessaging_init() failed'_ _[2015/09/25
> 09:06:36.070701, 3]
> ../source4/smbd/process_single.c:114(single_terminate)_ _
> single_terminate: reason[imessaging_init() failed]_ _[2015/09/25
> 09:06:36.135775, 3]
> ../source4/smbd/service_stream.c:66(stream_terminate_connection)_ _
> Terminating connection - 'imessaging_init() failed'_ _[2015/09/25
> 09:06:36.135804, 3]
> ../source4/smbd/process_single.c:114(single_terminate)_ _
> single_terminate: reason[imessaging_init() failed]_ _[2015/09/25
> 09:06:36.144634, 3]
> ../source4/smbd/service_stream.c:66(stream_terminate_connection)_ _
> Terminating connection - 'imessaging_init() failed'_ _[2015/09/25
> 09:06:36.144680, 3]
> ../source4/smbd/process_single.c:114(single_terminate)_ _
> single_terminate: reason[imessaging_init() failed]_ KELMENI Lulzim
> Direction des Systèmes d'Information Service Systèmes, Réseaux, Bases
de
> données Mairie de Saint-Ouen 01.49.45.69.76 Le 01/10/2015 10:39, Rowland
> Penny a écrit :
> >>
> >>> On 01/10/15 09:08, Lulzim KELMENI
> >> wrote:
> >>
> 
> >>>> Hello, We have installed samba4 under Ubuntu 14.04.3 LTS.
> >>
> root at server:~# samba -V ; border-le :#1010ff 2px solid; margin-left:5px;
> width:100%">[netlogon] path =
/var/lib/samba/sysvol/oxygen.local/scripts
> read only =rgin-left:5
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

Lulzim KELMENI

2015-Oct-02 13:34 UTC

head link

[Samba] authentication problems sernet-samba

No, it is in production, i just change the real domain name by
DCTEST for confidentiality. 

*Avahi is not installed in our server
(print server is in an other server) 

*resolv.conf is good. 

* I read
the documentation here
https://wiki.samba.org/index.php/Setup_a_Samba_Active_Directory_Domain_Controller
[1] , and i can't find where it is said to modify the nsswitch.conf in
a server which is ONLY domain controller. We have modified it in an
other ubuntu server (the domain member) as descibed here
https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server [2]


*We have not iTunes installed in our PC. 

When this problem occurs,
no computer can authenticate in the domain (we have actually 170 PC in
the domain and it will soon grow to 700). The only solution is to
restart samba. I can NOT reproduce the problem : i have to wait until it
occurs. This authetication problem happend 7 times from 04/06/2015 until
now. 

Cordialement,

KELMENI Lulzim
Direction des Systèmes
d'Information
Service Systèmes, Réseaux, Bases de données
Mairie de
Saint-Ouen

Le 02/10/2015 10:43, L.P.H. van Belle a écrit : 
> It this
a test environment ? > 
> ... dctest.local 
> 
> Dont use .local
reserved name of apples mDNS. > 
> Remove avahi from your server. 
>Recheck nsswitch.conf so it starts like : passwd: compat winbind
> ( so
if needed change the order ) > 
> Recheck you resolv.conf 
> Should be
: > Search dominname 
> Nameserver IP_DC1
> 
> And i you have itunes on
your pc, remove it. > And try again, this is not a samba problem but a
configuration problem. > 
> Greetz, 
> 
> Louis
> 
>>-----Oorspronkelijk bericht----- Van: samba
[mailto:samba-bounces at lists.samba.org] Namens Lulzim KELMENI Verzonden:
vrijdag 2 oktober 2015 10:36 Aan: samba at lists.samba.orgOnderwerp: Re:
[Samba] authentication problems sernet-samba Hello L.P.H, The "Wait for
Network" policy is already set and applied to all domain computers. By
the way, when we restart samba (service sernet-samba-ad restart) GPO are
applied and users can connect without problem and the strange logs stop
in /var/log/samba/log.samba Cordialement, KELMENI Lulzim Direction des
Systèmes d'Information Service Systèmes, Réseaux, Bases de données
Mairie de Saint-Ouen Le 02/10/2015 09:12, L.P.H. van Belle a écrit :
>>
>>> Hai, see
>> the commented. 
>> 
>>> And as extra, disable
powersaving on the network>> card. * When users try to connect todomain, they have a warning saying that the user session have been opend
using local copy of profile.[L.P.H. v>> 
>>> idth:100%">[L.P.H. van
Belle] case above, solution also.>> width:100%">* In event viewer ofclient computer,
server.dctest.local/dctest.local at
DCTEST.LOCAL">ldap/server.dctest.local/dc



Links:
------
[1]
https://wiki.samba.org/index.php/Setup_a_Samba_Active_Directory_Domain_Controller
[2]
https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server

Seemingly Similar Threads

Search for more possibly parallel threads

samba - Oct 2015 - authentication problems sernet-samba

[Samba] authentication problems sernet-samba

[Samba] authentication problems sernet-samba

[Samba] authentication problems sernet-samba

[Samba] authentication problems sernet-samba

Seemingly Similar Threads