All, We were running samba4-4.0.0-68.el6_7.rc4.x86_64 on our CentOS 6 box serving printers and joined to our domain. No issues whatsoever and quite happy. We upgraded to samba4-4.2.10-6.el6_7.x86_64 and have had ongoing issues since it was installed. Everything runs along just fine for a while (an hour or so) and then our logs start filling with [2016/04/13 17:51:21.635283, 0] ../source3/auth/auth_domain.c:265(domain_client_validate) domain_client_validate: Domain password server not available. Increasing the log level did not reveal anything immediately recognizable. Once the issue happens, it takes several restarts and rejoins until it starts working again. We have uninstalled and reinstalled. Reinitialized our TDBs. We stripped everything out of our smb.conf to where we now have testparm Load smb config files from /etc/samba/smb.conf rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384) Processing section "[printers]" Loaded services file OK. Server role: ROLE_DOMAIN_MEMBER Press enter to see a dump of your service definitions # Global parameters [global] workgroup = DOMAIN realm = REALM server string = Samba Server Version %v security = ADS ntlm auth = No log file = /var/log/samba/log.%m max log size = 50 idmap config * : backend = tdb cups options = raw [printers] comment = All Printers path = /var/spool/samba printable = Yes print ok = Yes browseable = No Looking for any pointers that anyone might have. Thanks! Tom
On Wed, 2016-04-13 at 22:22 +0000, Tom Ryan wrote:> All, > > We were running samba4-4.0.0-68.el6_7.rc4.x86_64 on our CentOS 6 box > serving printers and joined to our domain. No issues whatsoever and > quite happy. > > We upgraded to samba4-4.2.10-6.el6_7.x86_64 and have had ongoing > issues since it was installed. > > Everything runs along just fine for a while (an hour or so) and then > our logs start filling with > > > [2016/04/13 17:51:21.635283, 0] > ../source3/auth/auth_domain.c:265(domain_client_validate) > > domain_client_validate: Domain password server not available.Run winbindd. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
On Wed, 2016-04-13 at 22:22 +0000, Tom Ryan wrote:> All, > > We were running samba4-4.0.0-68.el6_7.rc4.x86_64 on our CentOS 6 box > serving printers and joined to our domain. No issues whatsoever and > quite happy. > > We upgraded to samba4-4.2.10-6.el6_7.x86_64 and have had ongoing > issues since it was installed. > > Everything runs along just fine for a while (an hour or so) and then > our logs start filling with > > > [2016/04/13 17:51:21.635283, 0] > ../source3/auth/auth_domain.c:265(domain_client_validate) > > domain_client_validate: Domain password server not available.> Run winbindd.Thanks for the reply. I was able to get spend more time with the logs last night and it appears that when it started querying our secondary DC, was when it failed. Event logs on that box (both ADS are Win 2012) showed no errors (just successes). I added a quick iptables rule to block that IP from samba to force our primary only and it did not fail through the night. I have enabled winbindd (something that we had previously not ran) and have unblocked the IP for now to see what happens. Thanks very much for your reply Andrew. Tom