samba - May 2017 - ssh not connecting to Active Directory in Fedora 25 workstation, wbinfo -u works; child_read_request: read_data failed: NT_STATUS_CONNECTION_RESET

> On May 9, 2017, at 11:48 AM, Rowland Penny via samba <samba at
lists.samba.org> wrote:
> 
> On Tue, 9 May 2017 11:34:27 -0400
> Robert Kudyba <rkudyba at fordham.edu> wrote:
> 
> 
>>> You also only need this in /etc/krb5/conf for Samba:
>>> 
>>> [libdefaults]
>>> default_realm = DSDEV.LOCAL
>>> dns_lookup_realm = false
>>> dns_lookup_kdc = true
>> 
>> OK I had dns_lookup_kdc = true just changed dns_lookup_realm = false.
>> Restarted smb and winbind.
>> 
>> 
>>> The first two lines in yours have been known to confuse Samba.
>> 
>> Do you mean the include lines? Should I comment them out?
> 
> Er no, when I said you only need what I posted, I meant that
> your /etc/krb.conf should only contain the 4 lines I posted.
OK I wasn’t sure if you were referencing the "Connections to a Samba Domain
Member Fail After Adding a includedir Statement to the /etc/krb5.conf File” at
https://wiki.samba.org/index.php/Troubleshooting_Samba_Domain_Members
<https://wiki.samba.org/index.php/Troubleshooting_Samba_Domain_Members>
> If you run 'getent passwd myuser' on the machine you are trying to
> connect to, do you get any output ?
None, blank line. Are there any other services to restart other than smb,
winbind and sshd?

On Tue, 9 May 2017 11:55:11 -0400
Robert Kudyba <rkudyba at fordham.edu> wrote:
> > If you run 'getent passwd myuser' on the machine you are
trying to
> > connect to, do you get any output ?
> 
> None, blank line. Are there any other services to restart other than
> smb, winbind and sshd?
That's your problem then, if you aren't getting output, then the OS
doesn't know who your user is.

Does 'wbinfo -u | grep myuser' show the user ?

Are you sure the libnss-winbind links are correct ?

Rowland

> On May 9, 2017, at 12:11 PM, Rowland Penny via samba <samba at
lists.samba.org> wrote:
> 
> On Tue, 9 May 2017 11:55:11 -0400
> Robert Kudyba <rkudyba at fordham.edu> wrote:
> 
>>> If you run 'getent passwd myuser' on the machine you are
trying to
>>> connect to, do you get any output ?
>> 
>> None, blank line. Are there any other services to restart other than
>> smb, winbind and sshd?
> 
> That's your problem then, if you aren't getting output, then the OS
> doesn't know who your user is.
> 
> Does 'wbinfo -u | grep myuser' show the user ?
yes
> Are you sure the libnss-winbind links are correct ?
I think so here’s what it looks like, note they aren’t sym links but the actual
file:
smbd -b | grep LIBDIR
   LIBDIR: /usr/lib64

locate libnss_winbind.so.2
/usr/lib64/libnss_winbind.so.2

ls -l /lib64/libnss_winbind.so.2
-rwxr-xr-x 1 root root 15120 Apr  6 11:30 /lib64/libnss_winbind.so.2

ls -l /usr/lib64/libnss_winbind.so.2
-rwxr-xr-x 1 root root 15120 Apr  6 11:30 /usr/lib64/libnss_winbind.so.2