Oliver Werner
2016-Sep-23 12:38 UTC
[Samba] Samba Member NT_STATUS_NETWORK_SESSION_EXPIRED
Yes the file /etc/krb5.keytab is exists.
You mean this lines?
dedicated keytab file = /etc/krb5.keytab
kerberos method = secrets and keytab
winbind refresh tickets = yes
there was edits when i join the system.
OLIVER WERNER
Systemadministrator
> Am 23.09.2016 um 08:55 schrieb Rowland Penny via samba <samba at
lists.samba.org>:
>
> On Fri, 23 Sep 2016 07:25:40 +0200
> Oliver Werner <oliver.werner at kontrast.de <mailto:oliver.werner at
kontrast.de>> wrote:
>
>> hi,
>>
>> now after 10 hours my samba has the next crash and need to restart
>> winbind.
>>
>> Here are the list/kinit:
>>
>> # before kinit
>> pl0024:~# klist
>> klist: Credentials cache file '/tmp/krb5cc_0' not found
>> pl0024:~# kinit Administrator
>> Password for Administrator at HQ.KONTRAST:
>> pl0024:~# klist
>> Ticket cache: FILE:/tmp/krb5cc_0
>> Default principal: Administrator at HQ.KONTRAST
>>
>> Valid starting Expires Service principal
>> 23.09.2016 07:21:04 23.09.2016 17:21:04
>> krbtgt/HQ.KONTRAST at HQ.KONTRAST renew until 24.09.2016 07:20:56
>>
>> thats the only one kerberos cache file in /tmp right now.
>>
>> looks like kerberos does not renew the ticket :(?
>> OLIVER WERNER
>> Systemadministrator
>>
>
> failing after 10hrs is very probably kerberos related, you should have
> a kerberos cache in /tmp for the machine. Does /etc/krb5.keytab exist ?
> Did you have the kereberos lines in smb.conf when you joined the
> machine ?
>
> Rowland
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
<https://lists.samba.org/mailman/options/samba>
Oliver Werner
2016-Sep-27 07:05 UTC
[Samba] Samba Member NT_STATUS_NETWORK_SESSION_EXPIRED
Hi Rowland, i have tested unjion and join again the member. But that looks not better :/. Any ideas? Best wishes OLIVER WERNER Systemadministrator> Am 23.09.2016 um 14:38 schrieb Oliver Werner via samba <samba at lists.samba.org>: > > Yes the file /etc/krb5.keytab is exists. > > You mean this lines? > > dedicated keytab file = /etc/krb5.keytab > kerberos method = secrets and keytab > winbind refresh tickets = yes > > there was edits when i join the system. > OLIVER WERNER > Systemadministrator > > > > >> Am 23.09.2016 um 08:55 schrieb Rowland Penny via samba <samba at lists.samba.org <mailto:samba at lists.samba.org>>: >> >> On Fri, 23 Sep 2016 07:25:40 +0200 >> Oliver Werner <oliver.werner at kontrast.de <mailto:oliver.werner at kontrast.de> <mailto:oliver.werner at kontrast.de <mailto:oliver.werner at kontrast.de>>> wrote: >> >>> hi, >>> >>> now after 10 hours my samba has the next crash and need to restart >>> winbind. >>> >>> Here are the list/kinit: >>> >>> # before kinit >>> pl0024:~# klist >>> klist: Credentials cache file '/tmp/krb5cc_0' not found >>> pl0024:~# kinit Administrator >>> Password for Administrator at HQ.KONTRAST: >>> pl0024:~# klist >>> Ticket cache: FILE:/tmp/krb5cc_0 >>> Default principal: Administrator at HQ.KONTRAST >>> >>> Valid starting Expires Service principal >>> 23.09.2016 07:21:04 23.09.2016 17:21:04 >>> krbtgt/HQ.KONTRAST at HQ.KONTRAST renew until 24.09.2016 07:20:56 >>> >>> thats the only one kerberos cache file in /tmp right now. >>> >>> looks like kerberos does not renew the ticket :(? >>> OLIVER WERNER >>> Systemadministrator >>> >> >> failing after 10hrs is very probably kerberos related, you should have >> a kerberos cache in /tmp for the machine. Does /etc/krb5.keytab exist ? >> Did you have the kereberos lines in smb.conf when you joined the >> machine ? >> >> Rowland >> >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba <https://lists.samba.org/mailman/options/samba> <https://lists.samba.org/mailman/options/samba <https://lists.samba.org/mailman/options/samba>> > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba <https://lists.samba.org/mailman/options/samba>
Oliver Werner
2016-Sep-28 13:54 UTC
[Samba] Samba Member NT_STATUS_NETWORK_SESSION_EXPIRED
Any Ideas what i can test for fix the problem with kerberos…?> Am 27.09.2016 um 09:05 schrieb Oliver Werner via samba <samba at lists.samba.org>: > > Hi Rowland, > > i have tested unjion and join again the member. But that looks not better :/. Any ideas? > > Best wishes > OLIVER WERNER > Systemadministrator > > > >> Am 23.09.2016 um 14:38 schrieb Oliver Werner via samba <samba at lists.samba.org <mailto:samba at lists.samba.org>>: >> >> Yes the file /etc/krb5.keytab is exists. >> >> You mean this lines? >> >> dedicated keytab file = /etc/krb5.keytab >> kerberos method = secrets and keytab >> winbind refresh tickets = yes >> >> there was edits when i join the system. >> OLIVER WERNER >> Systemadministrator >> >> >> >> >>> Am 23.09.2016 um 08:55 schrieb Rowland Penny via samba <samba at lists.samba.org <mailto:samba at lists.samba.org> <mailto:samba at lists.samba.org <mailto:samba at lists.samba.org>>>: >>> >>> On Fri, 23 Sep 2016 07:25:40 +0200 >>> Oliver Werner <oliver.werner at kontrast.de <mailto:oliver.werner at kontrast.de> <mailto:oliver.werner at kontrast.de <mailto:oliver.werner at kontrast.de>> <mailto:oliver.werner at kontrast.de <mailto:oliver.werner at kontrast.de> <mailto:oliver.werner at kontrast.de <mailto:oliver.werner at kontrast.de>>>> wrote: >>> >>>> hi, >>>> >>>> now after 10 hours my samba has the next crash and need to restart >>>> winbind. >>>> >>>> Here are the list/kinit: >>>> >>>> # before kinit >>>> pl0024:~# klist >>>> klist: Credentials cache file '/tmp/krb5cc_0' not found >>>> pl0024:~# kinit Administrator >>>> Password for Administrator at HQ.KONTRAST: >>>> pl0024:~# klist >>>> Ticket cache: FILE:/tmp/krb5cc_0 >>>> Default principal: Administrator at HQ.KONTRAST >>>> >>>> Valid starting Expires Service principal >>>> 23.09.2016 07:21:04 23.09.2016 17:21:04 >>>> krbtgt/HQ.KONTRAST at HQ.KONTRAST renew until 24.09.2016 07:20:56 >>>> >>>> thats the only one kerberos cache file in /tmp right now. >>>> >>>> looks like kerberos does not renew the ticket :(? >>>> OLIVER WERNER >>>> Systemadministrator >>>> >>> >>> failing after 10hrs is very probably kerberos related, you should have >>> a kerberos cache in /tmp for the machine. Does /etc/krb5.keytab exist ? >>> Did you have the kereberos lines in smb.conf when you joined the >>> machine ? >>> >>> Rowland >>> >>> -- >>> To unsubscribe from this list go to the following URL and read the >>> instructions: https://lists.samba.org/mailman/options/samba <https://lists.samba.org/mailman/options/samba> <https://lists.samba.org/mailman/options/samba <https://lists.samba.org/mailman/options/samba>> <https://lists.samba.org/mailman/options/samba <https://lists.samba.org/mailman/options/samba><https://lists.samba.org/mailman/options/samba <https://lists.samba.org/mailman/options/samba>>> >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba <https://lists.samba.org/mailman/options/samba> <https://lists.samba.org/mailman/options/samba <https://lists.samba.org/mailman/options/samba>> > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba <https://lists.samba.org/mailman/options/samba>
L.P.H. van Belle
2016-Sep-28 14:05 UTC
[Samba] Samba Member NT_STATUS_NETWORK_SESSION_EXPIRED
Hi Oliver , If you config is still the samba as i found in the list. On the member server, in smb.conf Change : realm = hq.kontrast To : realm = HQ.KONTRAST And whats in the krb5.conf of the member server? Greetz, Louis> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Oliver Werner via > samba > Verzonden: woensdag 28 september 2016 15:54 > Aan: Oliver Werner > CC: samba at lists.samba.org > Onderwerp: Re: [Samba] Samba Member NT_STATUS_NETWORK_SESSION_EXPIRED > > Any Ideas what i can test for fix the problem with kerberos…? > > > > > > Am 27.09.2016 um 09:05 schrieb Oliver Werner via samba > <samba at lists.samba.org>: > > > > Hi Rowland, > > > > i have tested unjion and join again the member. But that looks not > better :/. Any ideas? > > > > Best wishes > > OLIVER WERNER > > Systemadministrator > > > > > > > >> Am 23.09.2016 um 14:38 schrieb Oliver Werner via samba > <samba at lists.samba.org <mailto:samba at lists.samba.org>>: > >> > >> Yes the file /etc/krb5.keytab is exists. > >> > >> You mean this lines? > >> > >> dedicated keytab file = /etc/krb5.keytab > >> kerberos method = secrets and keytab > >> winbind refresh tickets = yes > >> > >> there was edits when i join the system. > >> OLIVER WERNER > >> Systemadministrator > >> > >> > >> > >> > >>> Am 23.09.2016 um 08:55 schrieb Rowland Penny via samba > <samba at lists.samba.org <mailto:samba at lists.samba.org> > <mailto:samba at lists.samba.org <mailto:samba at lists.samba.org>>>: > >>> > >>> On Fri, 23 Sep 2016 07:25:40 +0200 > >>> Oliver Werner <oliver.werner at kontrast.de > <mailto:oliver.werner at kontrast.de> <mailto:oliver.werner at kontrast.de > <mailto:oliver.werner at kontrast.de>> <mailto:oliver.werner at kontrast.de > <mailto:oliver.werner at kontrast.de> <mailto:oliver.werner at kontrast.de > <mailto:oliver.werner at kontrast.de>>>> wrote: > >>> > >>>> hi, > >>>> > >>>> now after 10 hours my samba has the next crash and need to restart > >>>> winbind. > >>>> > >>>> Here are the list/kinit: > >>>> > >>>> # before kinit > >>>> pl0024:~# klist > >>>> klist: Credentials cache file '/tmp/krb5cc_0' not found > >>>> pl0024:~# kinit Administrator > >>>> Password for Administrator at HQ.KONTRAST: > >>>> pl0024:~# klist > >>>> Ticket cache: FILE:/tmp/krb5cc_0 > >>>> Default principal: Administrator at HQ.KONTRAST > >>>> > >>>> Valid starting Expires Service principal > >>>> 23.09.2016 07:21:04 23.09.2016 17:21:04 > >>>> krbtgt/HQ.KONTRAST at HQ.KONTRAST renew until 24.09.2016 07:20:56 > >>>> > >>>> thats the only one kerberos cache file in /tmp right now. > >>>> > >>>> looks like kerberos does not renew the ticket :(? > >>>> OLIVER WERNER > >>>> Systemadministrator > >>>> > >>> > >>> failing after 10hrs is very probably kerberos related, you should have > >>> a kerberos cache in /tmp for the machine. Does /etc/krb5.keytab exist > ? > >>> Did you have the kereberos lines in smb.conf when you joined the > >>> machine ? > >>> > >>> Rowland > >>> > >>> -- > >>> To unsubscribe from this list go to the following URL and read the > >>> instructions: https://lists.samba.org/mailman/options/samba > <https://lists.samba.org/mailman/options/samba> > <https://lists.samba.org/mailman/options/samba > <https://lists.samba.org/mailman/options/samba>> > <https://lists.samba.org/mailman/options/samba > <https://lists.samba.org/mailman/options/samba><https://lists.samba.org/ma > ilman/options/samba <https://lists.samba.org/mailman/options/samba>>> > >> -- > >> To unsubscribe from this list go to the following URL and read the > >> instructions: https://lists.samba.org/mailman/options/samba > <https://lists.samba.org/mailman/options/samba> > <https://lists.samba.org/mailman/options/samba > <https://lists.samba.org/mailman/options/samba>> > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/options/samba > <https://lists.samba.org/mailman/options/samba> > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba