On Fri, 11 May 2018 14:14:39 +0000 Kristján Valur Jónsson via samba <samba at lists.samba.org> wrote:> I"m seeing this as well, after I updated my CentOS 7 hosts to the > latest release. > Something seems to have broken! >Do you have a 'include' line in krb5.conf ? If you do, remove it. Rowland
It had: includedir /etc/krb5.conf.d/ Removing this line fixes the problem, even though this folder is empty! On 11 May 2018 at 14:28, Rowland Penny via samba <samba at lists.samba.org> wrote:> On Fri, 11 May 2018 14:14:39 +0000 > Kristján Valur Jónsson via samba <samba at lists.samba.org> wrote: > > > I"m seeing this as well, after I updated my CentOS 7 hosts to the > > latest release. > > Something seems to have broken! > > > > Do you have a 'include' line in krb5.conf ? > If you do, remove it. > > Rowland > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >-- Kv, Kristján Valur Jónsson, RVX
On Fri, 11 May 2018, Rowland Penny via samba wrote:> On Fri, 11 May 2018 14:14:39 +0000 > Kristj?n Valur J?nsson via samba <samba at lists.samba.org> wrote: > >> I"m seeing this as well, after I updated my CentOS 7 hosts to the >> latest release. >> Something seems to have broken! >> > > Do you have a 'include' line in krb5.conf ? > If you do, remove it.Yes, it was there but I removed it before I sent my original post. The issue was still there. Last night after I posted, I decided to recompile samba. That resolved the issue (at least till next time). I do not understand why one DC needed to be recompiled and the other one worked without recompiling. That makes no sense to me. So I can be sure the configurations are really identical, I use Ansible to do the compiling and maintain the configurations. I am curious, do you have any idea why having an include line in krb5.conf pointing to an empty directory might impact the operation? I would expect it to just ignore it unless something put something in it. Regards, -- Tom me at tdiehl.org
On Fri, 11 May 2018 16:17:57 -0400 (EDT) me at tdiehl.org wrote:> > I am curious, do you have any idea why having an include line in > krb5.conf pointing to an empty directory might impact the operation? > I would expect it to just ignore it unless something put something in > it. >It is a MIT thing which Heimdal knows nothing about and confuses it. ;-) Rowland