Am 2017-07-07 um 18:40 schrieb Stefan G. Weichinger via
samba:> Am 2017-07-07 um 14:59 schrieb Rowland Penny via samba:
>
>> Good luck with the migration, if you follow what you did in your tests,
>> you should be okay. Unfortunately I will be un-contactable for the
>> next two days, but I am sure that you will get help if you require it.
>
> it looks quite ok, but somehow it seems better to rejoin all the PCs and
> member servers. We are through ~50% .. maybe inefficient, but the
> fastest way for now.
>
> GPOs work, etc
maybe I should start a new thread?
I see issues on the fileserver, winbind crashes.
Jul 08 10:12:38 pre01svdeb01 systemd[1]: Starting Samba Winbind Daemon...
Jul 08 10:12:38 pre01svdeb01 systemd[1]: winbind.service: Supervising
process 24915 which is not our child. We'll most likely not notice when
it exits.
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: [2017/07/08
10:12:38.759158, 0]
../source3/winbindd/winbindd_cache.c:3244(initialize_winbindd_cache)
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: initialize_winbindd_cache:
clearing cache and re-creating with version number 2
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: [2017/07/08
10:12:38.778362, 0] ../lib/util/become_daemon.c:124(daemon_ready)
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: STATUS=daemon 'winbindd'
finished starting up and ready to serve connections
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: [2017/07/08
10:12:38.778405, 0] ../source3/lib/util.c:791(smb_panic_s3)
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: PANIC (pid 24915): Could
not find our domain
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: [2017/07/08
10:12:38.778958, 0] ../source3/lib/util.c:902(log_stack_trace)
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: BACKTRACE: 12 stack frames:
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: #0
/usr/lib/x86_64-linux-gnu/libsmbconf.so.0(log_stack_trace+0x1a)
[0x7fa2debeb85a]
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: #1
/usr/lib/x86_64-linux-gnu/libsmbconf.so.0(smb_panic_s3+0x20)
[0x7fa2debeb940]
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: #2
/usr/lib/x86_64-linux-gnu/libsamba-util.so.0(smb_panic+0x2f)
[0x7fa2e2163fcf]
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: #3
/usr/sbin/winbindd(+0x375f3) [0x7fa2e406a5f3]
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: #4
/usr/sbin/winbindd(rescan_trusted_domains+0x1d) [0x7fa2e406a61d]
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: #5
/usr/lib/x86_64-linux-gnu/libtevent.so.0(tevent_common_loop_timer_delay+0xcd)
[0x7fa2dbe3fafd]
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: #6
/usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x9afa) [0x7fa2dbe40afa]
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: #7
/usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x8217) [0x7fa2dbe3f217]
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: #8
/usr/lib/x86_64-linux-gnu/libtevent.so.0(_tevent_loop_once+0x8d)
[0x7fa2dbe3b43d]
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: #9
/usr/sbin/winbindd(main+0xbc4) [0x7fa2e4058d24]
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: #10
/lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7fa2db85bb45]
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: #11
/usr/sbin/winbindd(+0x263b0) [0x7fa2e40593b0]
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: [2017/07/08
10:12:38.779343, 0] ../source3/lib/dumpcore.c:303(dump_core)
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: dumping core in
/var/log/samba/cores/winbindd
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]:
Jul 08 10:12:38 pre01svdeb01 systemd[1]: Started Samba Winbind Daemon.
Jul 08 10:12:38 pre01svdeb01 systemd[1]: winbind.service: main process
exited, code=dumped, status=6/ABRT
Jul 08 10:12:38 pre01svdeb01 systemd[1]: Unit winbind.service entered
failed state.
this is samba-4.5.10-Debian from LPH repos (for jessie).
Maybe my smb.conf is flaky:
[global]
netbios name = SERVER
realm = MY.TLD
workgroup = BUERO
logon home = ""
logon path = ""
load printers = No
printcap name = /dev/null
dedicated keytab file = /etc/krb5.keytab
kerberos method = secrets and keytab
map to guest = Bad User
map untrusted to domain = Yes
security = ADS
username map = /etc/samba/smbusers
template shell = /usr/sbin/nologin
winbind enum groups = Yes
winbind enum users = Yes
winbind refresh tickets = Yes
winbind use default domain = Yes
idmap config buero:schema_mode = rfc2307
idmap config buero:range = 10000-99999
idmap config buero:backend = rid
idmap config *:range = 2000-9999
idmap config * : backend = tdb
printing = bsd
cp-ied that from another customer's ADS member servers (and modified
workgroup, sure)