[Samba] Samba 4.8 RODC not working

Rowland Penny
Thu, 24 May 2018 18:48:22 -0000

On Thu, 24 May 2018 11:30:40 +0200 (CEST)
Gaetan SLONGO via samba <samba at lists.samba.org> wrote:

> Hi,
>
>
>
>
> It's my first try to setup RODC using Samba 4.8. We have latest Samba
> 4.7 environnement with 2 DC and some file servers. Joining the DC to
> the domain is OK using samba-tool domain join command. The domain
> controller appears in the DC list (MMC)
>
>
> However, users cannot be authenticated. Samba is running but these
> ports are closed :
>
>
> netbios-ssn 139/tcp # NETBIOS session service
> netbios-ssn 139/udp
> microsoft-ds 445/tcp
> microsoft-ds 445/udp
>
> Some other ports are available :
>
>
>
> [root at dmzrodc ~]# netstat -tlpn
> Connexions Internet actives (seulement serveurs)
> Proto Recv-Q Send-Q Adresse locale Adresse distante Etat PID/Program
> name tcp 0 0 0.0.0.0:636 0.0.0.0:* LISTEN 23622/samba
> tcp 0 0 0.0.0.0:49152 0.0.0.0:* LISTEN 23619/samba
> tcp 0 0 0.0.0.0:49153 0.0.0.0:* LISTEN 23619/samba
> tcp 0 0 0.0.0.0:49154 0.0.0.0:* LISTEN 23619/samba
> tcp 0 0 0.0.0.0:3268 0.0.0.0:* LISTEN 23622/samba
> tcp 0 0 0.0.0.0:3269 0.0.0.0:* LISTEN 23622/samba
> tcp 0 0 0.0.0.0:389 0.0.0.0:* LISTEN 23622/samba
> tcp 0 0 0.0.0.0:135 0.0.0.0:* LISTEN 23619/samba
> tcp 0 0 0.0.0.0:464 0.0.0.0:* LISTEN 23624/samba
> tcp 0 0 0.0.0.0:53 0.0.0.0:* LISTEN 23632/samba
> tcp 0 0 0.0.0.0:88 0.0.0.0:* LISTEN 23624/samba
>
>
> Winbind is not working :
>
> [root at dmzrodc ~]# wbinfo -u
> could not obtain winbind interface details:
> WBC_ERR_WINBIND_NOT_AVAILABLE could not obtain winbind domain name!
> Error looking up domain users

Is winbind actually installed ??

Rowland