samba - Aug 2017 - smbclient ends in NT_STATUS_CONNECTION_REFUSED error

I have applied the changes as suggested. After restarting the server,
smbclient-command worked! But after I restarted the Samba Client with
„/etc/init.d/samba restart“ I was once again confronted with the same problem!
Again, only another server restart did the trick. Now I am facing this problem
constantly. As soon as I restart, this command among others won’t work without
displaying an error message.
For testing purposes, I have started a new upgrade after uninstalling the bind,
using „SAMBA_INTERNAL“ for the Classic Upgrade.
 
The Smb.conf now looks like this:
root at hsad-srv-03:~# cat /etc/samba/smb.conf
# Global parameters
[global]
                workgroup = EXAMPLE
                realm = example.com
                netbios name = PDC
                server role = active directory domain controller
                idmap_ldb:use rfc2307 = yes
                dns forwarder = 8.8.8.8
[netlogon]
                path = /var/lib/samba/sysvol/example.com/scripts
                read only = No
 
[sysvol]
                path = /var/lib/samba/sysvol
                read only = No
root at hsad-srv-03:~#
 
After restarting the server, same problem…
root at server:~# smbclient -L localhost -U%
Domain=[EXAMPLE] OS=[Windows 6.1] Server=[Samba 4.2.14-Debian]
 
                Sharename       Type      Comment
                ---------       ----      -------
                netlogon        Disk     
                sysvol          Disk     
                IPC$            IPC       IPC Service (Samba 4.2.14-Debian)
Domain=[EXAMPLE] OS=[Windows 6.1] Server=[Samba 4.2.14-Debian]
 
                Server               Comment
                ---------            -------
                PDC                  PDC (server)
 
                Workgroup            Master
                ---------            -------
                EXAMPLE            PDC
                WORKGROUP            HSEW-FRH
 
 
root at server:~# samba-tool gpo list Administrator
GPOs for user Administrator
    Default Domain Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
 
As soon as I restart the Samba-Client:


root at server:~# samba-tool gpo list Administrator
ERROR(runtime): uncaught exception - ('Could not find a DC for domain',
RuntimeError('NT_STATUS_OBJECT_NAME_NOT_FOUND',))
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py",
line 175, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/gpo.py", line
349, in run
    self.url = dc_url(self.lp, self.creds, H)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/gpo.py", line
117, in dc_url
    raise RuntimeError("Could not find a DC for domain", e)
 
root at server:~# smbclient -d10 -L localhost -U%
INFO: Current debug levels:
  all: 10
  tdb: 10
  printdrivers: 10
  lanman: 10
  smb: 10
  rpc_parse: 10
  rpc_srv: 10
  rpc_cli: 10
  passdb: 10
  sam: 10
  auth: 10
  winbind: 10
  vfs: 10
  idmap: 10
  quota: 10
  acls: 10
  locking: 10
  msdfs: 10
  dmapi: 10
  registry: 10
  scavenger: 10
  dns: 10
  ldb: 10
lp_load_ex: refreshing parameters
Initialising global parameters
INFO: Current debug levels:
  all: 10
  tdb: 10
  printdrivers: 10
  lanman: 10
  smb: 10
  rpc_parse: 10
  rpc_srv: 10
  rpc_cli: 10
  passdb: 10
  sam: 10
  auth: 10
  winbind: 10
  vfs: 10
  idmap: 10
  quota: 10
  acls: 10
  locking: 10
  msdfs: 10
  dmapi: 10
  registry: 10
  scavenger: 10
  dns: 10
  ldb: 10
Processing section "[global]"
doing parameter workgroup = EXAMPLE
doing parameter realm = example.com
doing parameter netbios name = PDC
doing parameter server role = active directory domain controller
doing parameter idmap_ldb:use rfc2307 = yes
doing parameter dns forwarder = 192.168.15.1
pm_process() returned Yes
lp_servicenumber: couldn't find homes
added interface br0 ip=192.168.15.2 bcast=192.168.15.255 netmask=255.255.255.0
Netbios name list:-
my_netbios_names[0]="PDC"
Client started (version 4.2.14-Debian).
Opening cache file at /var/cache/samba/gencache.tdb
Opening cache file at /var/run/samba/gencache_notrans.tdb
sitename_fetch: No stored sitename for EXAMPLE.COM
internal_resolve_name: looking up localhost#20 (sitename (null))
name localhost#20 found.
remove_duplicate_addrs2: looking for duplicate address/port pairs
Connecting to 127.0.0.1 at port 445
Connecting to 127.0.0.1 at port 139
Connection to localhost failed (Error NT_STATUS_CONNECTION_REFUSED)
 
Which information/contents could help? I am clueless!

On Tue, 13 Jun 2017 20:42:02 +0200
"basti.mueller31--- via samba" <samba at lists.samba.org> wrote:


Can you post:

/etc/hostname
/etc/hosts
/etc/krb5.conf
/etc/resolv.conf

what is the ipaddress of the DC ?

You can, if you so wish, get Debian packages for 4.5.10 from here:

http://apt.van-belle.nl/

Rowland

Hai, 

Base on : 
>I have applied the changes as suggested. 
>After restarting the server, smbclient-command worked! But after I restarted
the Samba Client with
> ?/etc/init.d/samba restart? I was once again confronted with the same
problem!
>Again, only another server restart did the trick.
Can you retry the restart samba with systemd and see if thats working better. 

Type : 
systemctl restart smbd
systemctl restart nmbd
systemctl restart winbind


Greetz, 

Louis



> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> basti.mueller31--- via samba
> Verzonden: dinsdag 13 juni 2017 20:42
> Aan: samba at lists.samba.org
> Onderwerp: [Samba] smbclient ends in 
> NT_STATUS_CONNECTION_REFUSED error
> 
> I have applied the changes as suggested. After restarting the 
> server, smbclient-command worked! But after I restarted the 
> Samba Client with ?/etc/init.d/samba restart? I was once 
> again confronted with the same problem! Again, only another 
> server restart did the trick. Now I am facing this problem 
> constantly. As soon as I restart, this command among others 
> won?t work without displaying an error message.
> For testing purposes, I have started a new upgrade after 
> uninstalling the bind, using ?SAMBA_INTERNAL? for the Classic Upgrade.
>  
> The Smb.conf now looks like this:
> root at hsad-srv-03:~# cat /etc/samba/smb.conf # Global 
> parameters [global]
>                 workgroup = EXAMPLE
>                 realm = example.com
>                 netbios name = PDC
>                 server role = active directory domain controller
>                 idmap_ldb:use rfc2307 = yes
>                 dns forwarder = 8.8.8.8
> [netlogon]
>                 path = /var/lib/samba/sysvol/example.com/scripts
>                 read only = No
>  
> [sysvol]
>                 path = /var/lib/samba/sysvol
>                 read only = No
> root at hsad-srv-03:~#
>  
> After restarting the server, same problem? root at server:~# 
> smbclient -L localhost -U% Domain=[EXAMPLE] OS=[Windows 6.1] 
> Server=[Samba 4.2.14-Debian]
>  
>                 Sharename       Type      Comment
>                 ---------       ----      -------
>                 netlogon        Disk
>                 sysvol          Disk
>                 IPC$            IPC       IPC Service (Samba 
> 4.2.14-Debian) Domain=[EXAMPLE] OS=[Windows 6.1] 
> Server=[Samba 4.2.14-Debian]
>  
>                 Server               Comment
>                 ---------            -------
>                 PDC                  PDC (server)
>  
>                 Workgroup            Master
>                 ---------            -------
>                 EXAMPLE            PDC
>                 WORKGROUP            HSEW-FRH
>  
>  
> root at server:~# samba-tool gpo list Administrator GPOs for 
> user Administrator
>     Default Domain Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
>  
> As soon as I restart the Samba-Client:
> 
> 
> root at server:~# samba-tool gpo list Administrator
> ERROR(runtime): uncaught exception - ('Could not find a DC 
> for domain', RuntimeError('NT_STATUS_OBJECT_NAME_NOT_FOUND',))
>   File 
> "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", 
> line 175, in _run
>     return self.run(*args, **kwargs)
>   File 
> "/usr/lib/python2.7/dist-packages/samba/netcmd/gpo.py", line 
> 349, in run
>     self.url = dc_url(self.lp, self.creds, H)
>   File 
> "/usr/lib/python2.7/dist-packages/samba/netcmd/gpo.py", line 
> 117, in dc_url
>     raise RuntimeError("Could not find a DC for domain", e)
>  
> root at server:~# smbclient -d10 -L localhost -U%
> INFO: Current debug levels:
>   all: 10
>   tdb: 10
>   printdrivers: 10
>   lanman: 10
>   smb: 10
>   rpc_parse: 10
>   rpc_srv: 10
>   rpc_cli: 10
>   passdb: 10
>   sam: 10
>   auth: 10
>   winbind: 10
>   vfs: 10
>   idmap: 10
>   quota: 10
>   acls: 10
>   locking: 10
>   msdfs: 10
>   dmapi: 10
>   registry: 10
>   scavenger: 10
>   dns: 10
>   ldb: 10
> lp_load_ex: refreshing parameters
> Initialising global parameters
> INFO: Current debug levels:
>   all: 10
>   tdb: 10
>   printdrivers: 10
>   lanman: 10
>   smb: 10
>   rpc_parse: 10
>   rpc_srv: 10
>   rpc_cli: 10
>   passdb: 10
>   sam: 10
>   auth: 10
>   winbind: 10
>   vfs: 10
>   idmap: 10
>   quota: 10
>   acls: 10
>   locking: 10
>   msdfs: 10
>   dmapi: 10
>   registry: 10
>   scavenger: 10
>   dns: 10
>   ldb: 10
> Processing section "[global]"
> doing parameter workgroup = EXAMPLE
> doing parameter realm = example.com
> doing parameter netbios name = PDC
> doing parameter server role = active directory domain 
> controller doing parameter idmap_ldb:use rfc2307 = yes doing 
> parameter dns forwarder = 192.168.15.1
> pm_process() returned Yes
> lp_servicenumber: couldn't find homes
> added interface br0 ip=192.168.15.2 bcast=192.168.15.255 
> netmask=255.255.255.0 Netbios name list:-
my_netbios_names[0]="PDC"
> Client started (version 4.2.14-Debian).
> Opening cache file at /var/cache/samba/gencache.tdb Opening 
> cache file at /var/run/samba/gencache_notrans.tdb
> sitename_fetch: No stored sitename for EXAMPLE.COM
> internal_resolve_name: looking up localhost#20 (sitename 
> (null)) name localhost#20 found.
> remove_duplicate_addrs2: looking for duplicate address/port 
> pairs Connecting to 127.0.0.1 at port 445 Connecting to 
> 127.0.0.1 at port 139 Connection to localhost failed (Error 
> NT_STATUS_CONNECTION_REFUSED)
>  
> Which information/contents could help? I am clueless!
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>

On Wed, 14 Jun 2017 11:14:29 +0200
"L.P.H. van Belle via samba" <samba at lists.samba.org> wrote:
> Hai, 
> 
> Base on : 
> >I have applied the changes as suggested. 
> >After restarting the server, smbclient-command worked! But after I
> >restarted the Samba Client with
> > ?/etc/init.d/samba restart? I was once again confronted with the
> > same problem! 
> >Again, only another server restart did the trick.
> 
> Can you retry the restart samba with systemd and see if thats working
> better. 
> 
> Type : 
> systemctl restart smbd
> systemctl restart nmbd
> systemctl restart winbind
> 
> 
That might help, but when I look very closely at what the OP posted, I
found this:

root at hsad-srv-03:~# cat /etc/samba/smb.conf

Followed by:

                netbios name = PDC
                server role = active directory domain controller

So, I take it that 'PDC' is a replacement for 'HSAD-SRV-03'

Now if we go further down in the post, there is this:

root at server:~# smbclient -L localhost -U%

This would seem to suggest that the OP is running the command on
another machine i.e. 'server' but connecting to the local machine.

He then restarts Samba and the command no longer works, but he then
runs:

root at server:~# smbclient -d10 -L localhost -U%

We can then extract the [global] part of the smb.conf from the output:

[global]
    workgroup = EXAMPLE
    realm = example.com
    netbios name = PDC
    server role = active directory domain controller
    idmap_ldb:use rfc2307 = yes
    dns forwarder = 192.168.15.1

Which seems to suggest that 'hsad-srv-03' and 'server' are the
same
machine, in which case, the command to restart Samba, should be:

systemctl restart samba-ad-dc

Rowland

>/etc/hostname
server
>/etc/hosts
127.0.0.1 localhost
192.168.15.2 server.example.com
>/etc/krb5.conf
[libdefaults]
default_realm = EXAMPLE.COM
dns_lookup_realm = false
dns_lookup_kdc = true
>/etc/resolv.conf
search example.com
nameserver 192.168.15.2
>what is the ipaddress of the DC ?
192.168.15.2
>Can you retry the restart samba with systemd and see if thats working
better.
>Type :
>systemctl restart smbd
>systemctl restart nmbd
>systemctl restart winbind
Just did it and still get the nt error after that!
>Which seems to suggest that 'hsad-srv-03' and 'server' are
the same
>machine, in which case, the command to restart Samba, should be:
I'm sorry about this mistake. The real server name is
"hsad-srv-03" I
renamed it in the past on every post because I think its easier to
understand...I just forgot it in these 2 lines! so
yeah...."hsad-srv-03"="server" sorry for confusion.
>systemctl restart samba-ad-dc
Just did it and still get the nt error after that!



--
View this message in context:
http://samba.2283325.n4.nabble.com/smbclient-ends-in-NT-STATUS-CONNECTION-REFUSED-error-tp4719936p4719996.html
Sent from the Samba - General mailing list archive at Nabble.com.

On Wed, 14 Jun 2017 04:54:43 -0700 (PDT)
"basti.mueller31--- via samba" <samba at lists.samba.org> wrote:
> >/etc/hostname
> server
> 
> >/etc/hosts
> 127.0.0.1 localhost
> 192.168.15.2 server.example.com
Try changing the above line to:

192.168.15.2 server.example.com server
> 
> >systemctl restart samba-ad-dc
> Just did it and still get the nt error after that!
> 
Try stopping Samba:

systemctl stop samba-ad-dc

Then run 'ps ax' and search the output for any Samba lines and if you
find any, use 'kill' to remove them e.g. if I run it on a DC, I get
this amongst the output:

11252 ?        Ss     0:01 /usr/local/samba/sbin/winbindd -D --option=server
role check:inhibit=yes --foreground
11253 ?        S      0:02 /usr/local/samba/sbin/samba -D
11256 ?        S      0:00 /usr/local/samba/sbin/smbd -D --option=server role
check:inhibit=yes --foreground
11257 ?        S      0:00 /usr/local/samba/sbin/smbd -D --option=server role
check:inhibit=yes --foreground
11259 ?        S      0:02 /usr/local/samba/sbin/winbindd -D --option=server
role check:inhibit=yes --foreground
11262 ?        S      0:00 /usr/local/samba/sbin/smbd -D --option=server role
check:inhibit=yes --foreground
11264 ?        S      0:00 /usr/local/samba/sbin/winbindd -D --option=server
role check:inhibit=yes --foreground
11268 ?        S      0:00 /usr/local/samba/sbin/smbd -D --option=server role
check:inhibit=yes --foreground
11270 ?        S      0:00 /usr/local/samba/sbin/smbd -D --option=server role
check:inhibit=yes --foreground
18783 ?        S      0:00 /usr/local/samba/sbin/smbd -D --option=server role
check:inhibit=yes --foreground
18785 ?        S      0:00 /usr/local/samba/sbin/samba -D

So I would run 'kill -9 11252'. I would remove this one first because
of the 'Ss', this should also remove any children of this process.

Rowland

I need help again.
>> zones:
>> ---
>> named.conf.local
>> zone "hiperscan.com" {
>>         type master;
>>        file "/etc/bind/hiperscan.com.db";
>>         notify no;
>>        allow-update { localhost; };
>> };
>> 
>> zone "15.168.192.in-addr.arpa" {
>>         type master;
>>         file "/etc/bind/192.168.15.db";
>>         allow-update { localhost; };
>> };
>> ---
>You should remove the above, by having them in your Bind conf files you
>are using FLATFILES instead of BIND_DLZ
How can I having them in my bind conf? My named.conf just looks like:
include "/etc/bind/named.conf.options";
include "/etc/bind/named.conf.local";
include "/etc/bind/named.conf.default-zones";



And is there a way to convert my flatfile entrys to the BIND_DLZ? How can I
add the entrys to the BIND_DLZ?



--
View this message in context:
http://samba.2283325.n4.nabble.com/smbclient-ends-in-NT-STATUS-CONNECTION-REFUSED-error-tp4719936p4723020.html
Sent from the Samba - General mailing list archive at Nabble.com.

On Tue, 22 Aug 2017 00:47:03 -0700 (PDT)
"basti.mueller31--- via samba" <samba at lists.samba.org> wrote:
> I need help again.
> 
> >> zones:
> >> ---
> >> named.conf.local
> >> zone "hiperscan.com" {
> >>         type master;
> >>        file "/etc/bind/hiperscan.com.db";
> >>         notify no;
> >>        allow-update { localhost; };
> >> };
> >> 
> >> zone "15.168.192.in-addr.arpa" {
> >>         type master;
> >>         file "/etc/bind/192.168.15.db";
> >>         allow-update { localhost; };
> >> };
> >> ---
> >You should remove the above, by having them in your Bind conf files
> >you are using FLATFILES instead of BIND_DLZ
> 
> How can I having them in my bind conf? My named.conf just looks like:
> include "/etc/bind/named.conf.options";
> include "/etc/bind/named.conf.local";
> include "/etc/bind/named.conf.default-zones";
> 
> 
> 
> And is there a way to convert my flatfile entrys to the BIND_DLZ? How
> can I add the entrys to the BIND_DLZ?
Very easily, do what I said, remove them from your named.conf.local
file and bind_dlz will start using the ones in AD.

Rowland

Perfect! I did this now. So is there a way to get all my entries from the
database where I stored everything in my pdc (flatfile) in the ad databse?
How can I add them?



--
View this message in context:
http://samba.2283325.n4.nabble.com/smbclient-ends-in-NT-STATUS-CONNECTION-REFUSED-error-tp4719936p4723023.html
Sent from the Samba - General mailing list archive at Nabble.com.

On Tue, 22 Aug 2017 01:07:19 -0700 (PDT)
"basti.mueller31--- via samba" <samba at lists.samba.org> wrote:
> Perfect! I did this now. So is there a way to get all my entries from
> the database where I stored everything in my pdc (flatfile) in the ad
> databse? How can I add them?
> 
>
It all depends on what you have in the flatfile database and if they
aren't already in AD.

The easiest way would be to dump the flatfile database and then feed
this to script that could check if they exist in AD and add them with
samba-tool if they don't.

You should find that all the DC records are in AD, so another way (if
you are using dhcp on the clients) is to just wait and the computer
records should get populated.

Rowland

Thank you very much! Everything works now -> I created my own zone and added
the entries... RSAT Windows Tool just find my zone too and I can
administrate users,dns and everything via RSAT. perfect!



--
View this message in context:
http://samba.2283325.n4.nabble.com/smbclient-ends-in-NT-STATUS-CONNECTION-REFUSED-error-tp4719936p4723031.html
Sent from the Samba - General mailing list archive at Nabble.com.