samba - Feb 2018 - get_auth_event_server: Failed to find 'auth_event' registered on the message bus to send JSON authentication events to: NT_STATUS_OBJECT_NAME_NOT_FOUND

samba-4.7.5
debian 9.3

installed as join dc in existing domain on samba 4.1
everiting look like working
but some windows member stop to have access to shares on dc by ip
connect by \\full_domain_name  work

there some log in samba dc

[2018/02/20 15:15:00.652467,  4]
../auth/auth_log.c:860(log_successful_authz_event_human_readable)
  Successful AuthZ: [DCE/RPC,ncacn_np] user [NT AUTHORITY]\[SYSTEM]
[S-1-5-18] at [Tue, 20 Feb 2018 15:15:00.652451 +07] Remote host
[ipv6::::0] local host [ipv6::::0]
[2018/02/20 15:15:00.652521,  4] ../auth/auth_log.c:220(log_json)
  JSON Authorization: {"timestamp":
"2018-02-20T15:15:00.652489+0700",
"type": "Authorization", "Authorization":
{"version": {"major": 1, "minor":
0}, "localAddress": "ipv6::::0", "remoteAddress":
"ipv6::::0", "
serviceDescription": "DCE/RPC", "authType":
"ncacn_np", "domain": "NT
AUTHORITY", "account": "SYSTEM", "sid":
"S-1-5-18", "logonServer": null,
"transportProtection": "SMB", "accountFlags":
"0x00000000"}}
[2018/02/20 15:15:00.652537,  3]
../auth/auth_log.c:139(get_auth_event_server)
  get_auth_event_server: Failed to find 'auth_event' registered on the
message bus to send JSON authentication events to:
NT_STATUS_OBJECT_NAME_NOT_FOUND
[2018/02/20 15:15:00.668024,  3]
../source4/smbd/service_stream.c:65(stream_terminate_connection)
  Terminating connection - 'dcesrv: NT_STATUS_CONNECTION_DISCONNECTED'
[2018/02/20 15:15:00.668110,  3]
../source4/smbd/process_single.c:114(single_terminate)
  single_terminate: reason[dcesrv: NT_STATUS_CONNECTION_DISCONNECTED]
[2018/02/20 15:15:00.668844,  4]
../auth/auth_log.c:860(log_successful_authz_event_human_readable)
  Successful AuthZ: [DCE/RPC,ncacn_np] user [NT AUTHORITY]\[SYSTEM]
[S-1-5-18] at [Tue, 20 Feb 2018 15:15:00.668830 +07] Remote host
[ipv6::::0] local host [ipv6::::0]
[2018/02/20 15:15:00.668890,  4] ../auth/auth_log.c:220(log_json)
  JSON Authorization: {"timestamp":
"2018-02-20T15:15:00.668864+0700",
"type": "Authorization", "Authorization":
{"version": {"major": 1, "minor":
0}, "localAddress": "ipv6::::0", "remoteAddress":
"ipv6::::0", "
serviceDescription": "DCE/RPC", "authType":
"ncacn_np", "domain": "NT
AUTHORITY", "account": "SYSTEM", "sid":
"S-1-5-18", "logonServer": null,
"transportProtection": "SMB", "accountFlags":
"0x00000000"}}
[2018/02/20 15:15:00.668909,  3]
../auth/auth_log.c:139(get_auth_event_server)
  get_auth_event_server: Failed to find 'auth_event' registered on the
message bus to send JSON authentication events to:
NT_STATUS_OBJECT_NAME_NOT_FOUND
[2018/02/20 15:15:00.679589,  3]
../source4/smbd/service_stream.c:65(stream_terminate_connection)
  Terminating connection - 'dcesrv: NT_STATUS_CONNECTION_DISCONNECTED'
[2018/02/20 15:15:00.679660,  3]
../source4/smbd/process_single.c:114(single_terminate)
  single_terminate: reason[dcesrv: NT_STATUS_CONNECTION_DISCONNECTED]
[2018/02/20 15:15:00.680344,  4]
../auth/auth_log.c:860(log_successful_authz_event_human_readable)
  Successful AuthZ: [DCE/RPC,ncacn_np] user [NT AUTHORITY]\[SYSTEM]
[S-1-5-18] at [Tue, 20 Feb 2018 15:15:00.680329 +07] Remote host
[ipv6::::0] local host [ipv6::::0]
[2018/02/20 15:15:00.680399,  4] ../auth/auth_log.c:220(log_json)
  JSON Authorization: {"timestamp":
"2018-02-20T15:15:00.680374+0700",
"type": "Authorization", "Authorization":
{"version": {"major": 1, "minor":
0}, "localAddress": "ipv6::::0", "remoteAddress":
"ipv6::::0", "
serviceDescription": "DCE/RPC", "authType":
"ncacn_np", "domain": "NT
AUTHORITY", "account": "SYSTEM", "sid":
"S-1-5-18", "logonServer": null,
"transportProtection": "SMB", "accountFlags":
"0x00000000"}}
[2018/02/20 15:15:00.680415,  3]
../auth/auth_log.c:139(get_auth_event_server)
  get_auth_event_server: Failed to find 'auth_event' registered on the
message bus to send JSON authentication events to:
NT_STATUS_OBJECT_NAME_NOT_FOUND
[2018/02/20 15:15:00.689955,  3]
../source4/smbd/service_stream.c:65(stream_terminate_connection)
  Terminating connection - 'dcesrv: NT_STATUS_CONNECTION_DISCONNECTED'
[2018/02/20 15:15:00.690032,  3]
../source4/smbd/process_single.c:114(single_terminate)
  single_terminate: reason[dcesrv: NT_STATUS_CONNECTION_DISCONNECTED]



not sure relate it to problem or not

On Tue, 2018-02-20 at 15:18 +0700, ACR ACR via samba
wrote:
> samba-4.7.5
> debian 9.3
> 
> installed as join dc in existing domain on samba 4.1
> everiting look like working
> but some windows member stop to have access to shares on dc by ip
> connect by \\full_domain_name  work
> 
> there some log in samba dc
> 
> [2018/02/20 15:15:00.652467,  4]
> ../auth/auth_log.c:860(log_successful_authz_event_human_readable)
>   Successful AuthZ: [DCE/RPC,ncacn_np] user [NT AUTHORITY]\[SYSTEM]
> [S-1-5-18] at [Tue, 20 Feb 2018 15:15:00.652451 +07] Remote host
> [ipv6::::0] local host [ipv6::::0]
> [2018/02/20 15:15:00.652521,  4] ../auth/auth_log.c:220(log_json)
>   JSON Authorization: {"timestamp":
"2018-02-20T15:15:00.652489+0700",
> "type": "Authorization", "Authorization":
{"version": {"major": 1, "minor":
> 0}, "localAddress": "ipv6::::0",
"remoteAddress": "ipv6::::0", "
> serviceDescription": "DCE/RPC", "authType":
"ncacn_np", "domain": "NT
> AUTHORITY", "account": "SYSTEM", "sid":
"S-1-5-18", "logonServer": null,
> "transportProtection": "SMB", "accountFlags":
"0x00000000"}}
> [2018/02/20 15:15:00.652537,  3]
> ../auth/auth_log.c:139(get_auth_event_server)
>   get_auth_event_server: Failed to find 'auth_event' registered on
the
> message bus to send JSON authentication events to:
> NT_STATUS_OBJECT_NAME_NOT_FOUND
Don't set 'auth event notification', it is a developer/testsuite
option
only. 

Andrew Bartlett
-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba