samba - Dec 2016 - ADS domain member: winbind fails [SOLVED]

On Sat, 31 Dec 2016 11:31:26 +0100
"Stefan G. Weichinger via samba" <samba at lists.samba.org>
wrote:
> Am 2016-12-30 um 18:31 schrieb Rowland Penny via samba:
> >> remember: server "main" was nt4-pdc ~~ and we only
replaced
> >> smb.conf and joined etc etc // maybe too bold? ;-)
> >
> > Oh definitely, you will probably have to empty /var/lib/samba and
> > then let Samba fill it up again.
> 
> maybe by:
> 
> leave domain, empty /var/lib/samba, then re-install samba, then
> re-join? As mentioned I had tried rm-ing /var/lib/samba already but
> failed at joining then because of the missing secrets.tdb (maybe it
> would have been enough to touch it, I don't know). I will try.
> 
> checked for old or duplicate samba-files, no, that seems OK
> 
> 
> 
Samba should recreate the files required, what is the exact command you
are running to join the domain ?

Who owns /var/lib/samba and what are the permissions set to ?

Rowland

Am 2016-12-31 um 12:08 schrieb Rowland Penny via samba:
> Samba should recreate the files required, what is the exact command you
> are running to join the domain ?
>
> Who owns /var/lib/samba and what are the permissions set to ?
SOLVED -> what a journey ;-)

rebuilt several packages on the member server today, perl, mit-krb5, 
samba etc

But what did the change was the clearing of /var/lib/samba, that seems 
to have been the issue since beginning.

I stopped smbd nmbd winbindd

# net ads leave -U Administrator

after successful leave I rm-ed /var/lib/samba (I only left the subdir 
private there) then rejoined the ADS domain.

Now winbindd -i -d10 looks very different ;-)

"wbinfo -u" brings users now.

*phew*

Thanks all for the help so far, could have thought of doing so earlier 
(well, I did, but did it wrong ...)

I test things now.

Thanks again @ Rowland, Louis, etc

-

Maybe I come back with another issue later, we saw permission problems 
at editing GPOs. "sysvolreset" and "sysvolcheck" done OK
already.

On Sat, 31 Dec 2016 12:28:02 +0100
"Stefan G. Weichinger via samba" <samba at lists.samba.org>
wrote:
> Am 2016-12-31 um 12:08 schrieb Rowland Penny via samba:
> 
> > Samba should recreate the files required, what is the exact command
> > you are running to join the domain ?
> >
> > Who owns /var/lib/samba and what are the permissions set to ?
> 
> SOLVED -> what a journey ;-)
> 
> rebuilt several packages on the member server today, perl, mit-krb5, 
> samba etc
> 
> But what did the change was the clearing of /var/lib/samba, that
> seems to have been the issue since beginning.
> 
> I stopped smbd nmbd winbindd
> 
> # net ads leave -U Administrator
> 
> after successful leave I rm-ed /var/lib/samba (I only left the subdir 
> private there) then rejoined the ADS domain.
> 
> Now winbindd -i -d10 looks very different ;-)
> 
> "wbinfo -u" brings users now.
Next step, does 'getent passwd a_username' show anything ?
> 
> *phew*
> 
> Thanks all for the help so far, could have thought of doing so
> earlier (well, I did, but did it wrong ...)
> 
> I test things now.
> 
> Thanks again @ Rowland, Louis, etc
No problem
> 
> -
> 
> Maybe I come back with another issue later, we saw permission
> problems at editing GPOs. "sysvolreset" and
"sysvolcheck" done OK
> already.
> 
> 
What problem are you having ?

Rowland