thr3ads.net - samba - [Samba] Migrating to Samba 4.9.4 AD, kinit administrator -> kinit: Cannot contact any KDC for realm... [Feb 2019]

If this information is useful, please help other people find it:
Share via:

Ashley

2019-Feb-14 17:14 UTC

[Samba] Migrating to Samba 4.9.4 AD, kinit administrator -> kinit: Cannot contact any KDC for realm...

Hi there

I have migrated from an older version of Samba DC to Samba 4.9.4 AD.
Running Centos 7. One server with everything on...  (AD and file server)
Bind 9.9.4

Built from source.
Followed directions in the wiki.
All seems to go fine, but when I startup samba-ad-dc it shows a few errors.
    ([kdc failed to setup interfaces])
The initial tests (in the directions in wiki) go fine until I get to  
"kinit administrator" and it
just gives ->   kinit: Cannot contact any KDC for realm 
'BHUBFAB.DDNS.NET' while getting initial credentials

...has been 3 days now, eish.

Smb.conf:

# Global parameters
[global]
         bind interfaces only = Yes
         interfaces = lo enp0s25
         netbios name = SIMBA
         realm = BHUBFAB.DDNS.NET
         server role = active directory domain controller
         server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, 
drepl, winbindd, ntp_signd, kcc, dnsupdate
         workgroup = BHUBFAB
         idmap_ldb:use rfc2307 = yes

[netlogon]
         path = /usr/local/samba/var/locks/sysvol/bhubfab.ddns.net/scripts
         read only = No

[sysvol]
         path = /usr/local/samba/var/locks/sysvol
         read only = No


krb5.conf:
[libdefaults]
         default_realm = BHUBFAB.DDNS.NET
         dns_lookup_realm = false
         dns_lookup_kdc = true


systemctl status -l samba-ad-dc :

\u25cf samba-ad-dc.service - Samba Active Directory Domain Controller
    Loaded: loaded (/etc/systemd/system/samba-ad-dc.service; disabled; 
vendor preset: disabled)
    Active: active (running) since Thu 2019-02-14 18:49:26 SAST; 23min ago
   Process: 19134 ExecStart=/usr/local/samba/sbin/samba -D (code=exited, 
status=0/SUCCESS)
  Main PID: 19141 (samba)
     Tasks: 23
    CGroup: /system.slice/samba-ad-dc.service
            \u251c\u250019141 /usr/local/samba/sbin/samba -D
            \u251c\u250019148 /usr/local/samba/sbin/samba -D
            \u251c\u250019149 /usr/local/samba/sbin/samba -D
            \u251c\u250019150 /usr/local/samba/sbin/samba -D
            \u251c\u250019151 /usr/local/samba/sbin/samba -D
            \u251c\u250019152 /usr/local/samba/sbin/smbd -D 
--option=server role check:inhibit=yes --foreground
            \u251c\u250019153 /usr/local/samba/sbin/samba -D
            \u251c\u250019154 /usr/local/samba/sbin/samba -D
            \u251c\u250019155 /usr/local/samba/sbin/samba -D
            \u251c\u250019156 /usr/local/samba/sbin/samba -D
            \u251c\u250019157 /usr/local/samba/sbin/samba -D
            \u251c\u250019158 /usr/local/samba/sbin/samba -D
            \u251c\u250019159 /usr/local/samba/sbin/samba -D
            \u251c\u250019160 /usr/local/samba/sbin/samba -D
            \u251c\u250019161 /usr/local/samba/sbin/samba -D
            \u251c\u250019162 /usr/local/samba/sbin/samba -D
            \u251c\u250019163 /usr/local/samba/sbin/winbindd -D 
--option=server role check:inhibit=yes --foreground
            \u251c\u250019174 /usr/local/samba/sbin/smbd -D 
--option=server role check:inhibit=yes --foreground
            \u251c\u250019175 /usr/local/samba/sbin/smbd -D 
--option=server role check:inhibit=yes --foreground
            \u251c\u250019176 /usr/local/samba/sbin/winbindd -D 
--option=server role check:inhibit=yes --foreground
            \u251c\u250019177 /usr/local/samba/sbin/smbd -D 
--option=server role check:inhibit=yes --foreground
            \u251c\u250019199 /usr/local/samba/sbin/winbindd -D 
--option=server role check:inhibit=yes --foreground
            \u2514\u250019203 /usr/local/samba/sbin/winbindd -D 
--option=server role check:inhibit=yes --foreground

Feb 14 18:49:27 simba.bhubfab.ddns.net samba[19156]: [2019/02/14 
18:49:27.180408,  0] 
../source4/smbd/service_task.c:36(task_server_terminate)
Feb 14 18:49:27 simba.bhubfab.ddns.net samba[19156]: 
task_server_terminate: task_server_terminate: [kdc failed to setup 
interfaces]
Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]: [2019/02/14 
18:49:27.553317,  0] 
../source3/winbindd/winbindd_cache.c:3160(initialize_winbindd_cache)
Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]: 
initialize_winbindd_cache: clearing cache and re-creating with version 
number 2
Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]: [2019/02/14 
18:49:27.636798,  0] ../lib/util/become_daemon.c:138(daemon_ready)
Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]: daemon_ready: 
STATUS=daemon 'winbindd' finished starting up and ready to serve
connections
Feb 14 18:49:27 simba.bhubfab.ddns.net smbd[19152]: [2019/02/14 
18:49:27.790989,  0] ../lib/util/become_daemon.c:138(daemon_ready)
Feb 14 18:49:27 simba.bhubfab.ddns.net smbd[19152]:   daemon_ready: 
STATUS=daemon 'smbd' finished starting up and ready to serve connections
Feb 14 18:49:34 simba.bhubfab.ddns.net samba[19154]: [2019/02/14 
18:49:34.418113,  0] ../source4/lib/tls/tlscert.c:170(tls_cert_generate)
Feb 14 18:49:34 simba.bhubfab.ddns.net samba[19154]:   TLS self-signed 
keys generated OK



Any pointers will be very much appreciated!
Thank you in advance

-- 
Untitled Document

Many thanx
Best regards
Ashley

Rowland Penny

2019-Feb-14 19:12 UTC

head link

[Samba] Migrating to Samba 4.9.4 AD, kinit administrator -> kinit: Cannot contact any KDC for realm...

On Thu, 14 Feb 2019 19:14:19 +0200
Ashley via samba <samba at lists.samba.org> wrote:
> Hi there
> 
> I have migrated from an older version of Samba DC to Samba 4.9.4 AD.
> Running Centos 7. One server with everything on...  (AD and file
> server) Bind 9.9.4
> 
> Built from source.
> Followed directions in the wiki.
> All seems to go fine, but when I startup samba-ad-dc it shows a few
> errors. ([kdc failed to setup interfaces])
> The initial tests (in the directions in wiki) go fine until I get to  
> "kinit administrator" and it
> just gives ->   kinit: Cannot contact any KDC for realm 
> 'BHUBFAB.DDNS.NET' while getting initial credentials
> 
> ...has been 3 days now, eish.
> 
> Smb.conf:
> 
> # Global parameters
> [global]
>          bind interfaces only = Yes
>          interfaces = lo enp0s25
>          netbios name = SIMBA
>          realm = BHUBFAB.DDNS.NET
>          server role = active directory domain controller
>          server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, 
> drepl, winbindd, ntp_signd, kcc, dnsupdate
>          workgroup = BHUBFAB
>          idmap_ldb:use rfc2307 = yes
> 
> [netlogon]
>          path
> = /usr/local/samba/var/locks/sysvol/bhubfab.ddns.net/scripts read
> only = No
> 
> [sysvol]
>          path = /usr/local/samba/var/locks/sysvol
>          read only = No
> 
> 
> krb5.conf:
> [libdefaults]
>          default_realm = BHUBFAB.DDNS.NET
>          dns_lookup_realm = false
>          dns_lookup_kdc = true
> 
> 
> systemctl status -l samba-ad-dc :
> 
> \u25cf samba-ad-dc.service - Samba Active Directory Domain Controller
>     Loaded: loaded (/etc/systemd/system/samba-ad-dc.service;
> disabled; vendor preset: disabled)
>     Active: active (running) since Thu 2019-02-14 18:49:26 SAST;
> 23min ago Process: 19134 ExecStart=/usr/local/samba/sbin/samba -D
> (code=exited, status=0/SUCCESS)
>   Main PID: 19141 (samba)
>      Tasks: 23
>     CGroup: /system.slice/samba-ad-dc.service
>             \u251c\u250019141 /usr/local/samba/sbin/samba -D
>             \u251c\u250019148 /usr/local/samba/sbin/samba -D
>             \u251c\u250019149 /usr/local/samba/sbin/samba -D
>             \u251c\u250019150 /usr/local/samba/sbin/samba -D
>             \u251c\u250019151 /usr/local/samba/sbin/samba -D
>             \u251c\u250019152 /usr/local/samba/sbin/smbd -D 
> --option=server role check:inhibit=yes --foreground
>             \u251c\u250019153 /usr/local/samba/sbin/samba -D
>             \u251c\u250019154 /usr/local/samba/sbin/samba -D
>             \u251c\u250019155 /usr/local/samba/sbin/samba -D
>             \u251c\u250019156 /usr/local/samba/sbin/samba -D
>             \u251c\u250019157 /usr/local/samba/sbin/samba -D
>             \u251c\u250019158 /usr/local/samba/sbin/samba -D
>             \u251c\u250019159 /usr/local/samba/sbin/samba -D
>             \u251c\u250019160 /usr/local/samba/sbin/samba -D
>             \u251c\u250019161 /usr/local/samba/sbin/samba -D
>             \u251c\u250019162 /usr/local/samba/sbin/samba -D
>             \u251c\u250019163 /usr/local/samba/sbin/winbindd -D 
> --option=server role check:inhibit=yes --foreground
>             \u251c\u250019174 /usr/local/samba/sbin/smbd -D 
> --option=server role check:inhibit=yes --foreground
>             \u251c\u250019175 /usr/local/samba/sbin/smbd -D 
> --option=server role check:inhibit=yes --foreground
>             \u251c\u250019176 /usr/local/samba/sbin/winbindd -D 
> --option=server role check:inhibit=yes --foreground
>             \u251c\u250019177 /usr/local/samba/sbin/smbd -D 
> --option=server role check:inhibit=yes --foreground
>             \u251c\u250019199 /usr/local/samba/sbin/winbindd -D 
> --option=server role check:inhibit=yes --foreground
>             \u2514\u250019203 /usr/local/samba/sbin/winbindd -D 
> --option=server role check:inhibit=yes --foreground
> 
> Feb 14 18:49:27 simba.bhubfab.ddns.net samba[19156]: [2019/02/14 
> 18:49:27.180408,  0] 
> ../source4/smbd/service_task.c:36(task_server_terminate)
> Feb 14 18:49:27 simba.bhubfab.ddns.net samba[19156]: 
> task_server_terminate: task_server_terminate: [kdc failed to setup 
> interfaces]
> Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]: [2019/02/14 
> 18:49:27.553317,  0] 
> ../source3/winbindd/winbindd_cache.c:3160(initialize_winbindd_cache)
> Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]: 
> initialize_winbindd_cache: clearing cache and re-creating with
> version number 2
> Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]: [2019/02/14 
> 18:49:27.636798,  0] ../lib/util/become_daemon.c:138(daemon_ready)
> Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]: daemon_ready: 
> STATUS=daemon 'winbindd' finished starting up and ready to serve
> connections Feb 14 18:49:27 simba.bhubfab.ddns.net smbd[19152]:
> [2019/02/14 18:49:27.790989,
> 0] ../lib/util/become_daemon.c:138(daemon_ready) Feb 14 18:49:27
> simba.bhubfab.ddns.net smbd[19152]:   daemon_ready: STATUS=daemon
> 'smbd' finished starting up and ready to serve connections Feb 14
> 18:49:34 simba.bhubfab.ddns.net samba[19154]: [2019/02/14
> 18:49:34.418113,
> 0] ../source4/lib/tls/tlscert.c:170(tls_cert_generate) Feb 14
> 18:49:34 simba.bhubfab.ddns.net samba[19154]:   TLS self-signed keys
> generated OK
> 
> 
> 
> Any pointers will be very much appreciated!
> Thank you in advance
> 
Did you by any chance upgrade from Samba version 4.7.x (or earlier)
directly to 4.9.4 ?
If you did, start downgrading again, it doesn't work, you will have to
upgrade to to a 4.8.x version first.

Rowland

Ashley

2019-Feb-14 19:43 UTC

head link

[Samba] Migrating to Samba 4.9.4 AD, kinit administrator -> kinit: Cannot contact any KDC for realm...

On 2019/02/14 21:12, Rowland Penny via samba wrote:> On Thu, 14 Feb 2019 19:14:19 +0200
> Ashley via samba <samba at lists.samba.org> wrote:
>
>> Hi there
>>
>> I have migrated from an older version of Samba DC to Samba 4.9.4 AD.
>> Running Centos 7. One server with everything on...  (AD and file
>> server) Bind 9.9.4
>>
>> Built from source.
>> Followed directions in the wiki.
>> All seems to go fine, but when I startup samba-ad-dc it shows a few
>> errors. ([kdc failed to setup interfaces])
>> The initial tests (in the directions in wiki) go fine until I get to
>> "kinit administrator" and it
>> just gives ->   kinit: Cannot contact any KDC for realm
>> 'BHUBFAB.DDNS.NET' while getting initial credentials
>>
>> ...has been 3 days now, eish.
>>
>> Smb.conf:
>>
>> # Global parameters
>> [global]
>>           bind interfaces only = Yes
>>           interfaces = lo enp0s25
>>           netbios name = SIMBA
>>           realm = BHUBFAB.DDNS.NET
>>           server role = active directory domain controller
>>           server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc,
>> drepl, winbindd, ntp_signd, kcc, dnsupdate
>>           workgroup = BHUBFAB
>>           idmap_ldb:use rfc2307 = yes
>>
>> [netlogon]
>>           path
>> = /usr/local/samba/var/locks/sysvol/bhubfab.ddns.net/scripts read
>> only = No
>>
>> [sysvol]
>>           path = /usr/local/samba/var/locks/sysvol
>>           read only = No
>>
>>
>> krb5.conf:
>> [libdefaults]
>>           default_realm = BHUBFAB.DDNS.NET
>>           dns_lookup_realm = false
>>           dns_lookup_kdc = true
>>
>>
>> systemctl status -l samba-ad-dc :
>>
>> \u25cf samba-ad-dc.service - Samba Active Directory Domain Controller
>>      Loaded: loaded (/etc/systemd/system/samba-ad-dc.service;
>> disabled; vendor preset: disabled)
>>      Active: active (running) since Thu 2019-02-14 18:49:26 SAST;
>> 23min ago Process: 19134 ExecStart=/usr/local/samba/sbin/samba -D
>> (code=exited, status=0/SUCCESS)
>>    Main PID: 19141 (samba)
>>       Tasks: 23
>>      CGroup: /system.slice/samba-ad-dc.service
>>              \u251c\u250019141 /usr/local/samba/sbin/samba -D
>>              \u251c\u250019148 /usr/local/samba/sbin/samba -D
>>              \u251c\u250019149 /usr/local/samba/sbin/samba -D
>>              \u251c\u250019150 /usr/local/samba/sbin/samba -D
>>              \u251c\u250019151 /usr/local/samba/sbin/samba -D
>>              \u251c\u250019152 /usr/local/samba/sbin/smbd -D
>> --option=server role check:inhibit=yes --foreground
>>              \u251c\u250019153 /usr/local/samba/sbin/samba -D
>>              \u251c\u250019154 /usr/local/samba/sbin/samba -D
>>              \u251c\u250019155 /usr/local/samba/sbin/samba -D
>>              \u251c\u250019156 /usr/local/samba/sbin/samba -D
>>              \u251c\u250019157 /usr/local/samba/sbin/samba -D
>>              \u251c\u250019158 /usr/local/samba/sbin/samba -D
>>              \u251c\u250019159 /usr/local/samba/sbin/samba -D
>>              \u251c\u250019160 /usr/local/samba/sbin/samba -D
>>              \u251c\u250019161 /usr/local/samba/sbin/samba -D
>>              \u251c\u250019162 /usr/local/samba/sbin/samba -D
>>              \u251c\u250019163 /usr/local/samba/sbin/winbindd -D
>> --option=server role check:inhibit=yes --foreground
>>              \u251c\u250019174 /usr/local/samba/sbin/smbd -D
>> --option=server role check:inhibit=yes --foreground
>>              \u251c\u250019175 /usr/local/samba/sbin/smbd -D
>> --option=server role check:inhibit=yes --foreground
>>              \u251c\u250019176 /usr/local/samba/sbin/winbindd -D
>> --option=server role check:inhibit=yes --foreground
>>              \u251c\u250019177 /usr/local/samba/sbin/smbd -D
>> --option=server role check:inhibit=yes --foreground
>>              \u251c\u250019199 /usr/local/samba/sbin/winbindd -D
>> --option=server role check:inhibit=yes --foreground
>>              \u2514\u250019203 /usr/local/samba/sbin/winbindd -D
>> --option=server role check:inhibit=yes --foreground
>>
>> Feb 14 18:49:27 simba.bhubfab.ddns.net samba[19156]: [2019/02/14
>> 18:49:27.180408,  0]
>> ../source4/smbd/service_task.c:36(task_server_terminate)
>> Feb 14 18:49:27 simba.bhubfab.ddns.net samba[19156]:
>> task_server_terminate: task_server_terminate: [kdc failed to setup
>> interfaces]
>> Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]: [2019/02/14
>> 18:49:27.553317,  0]
>> ../source3/winbindd/winbindd_cache.c:3160(initialize_winbindd_cache)
>> Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]:
>> initialize_winbindd_cache: clearing cache and re-creating with
>> version number 2
>> Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]: [2019/02/14
>> 18:49:27.636798,  0] ../lib/util/become_daemon.c:138(daemon_ready)
>> Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]: daemon_ready:
>> STATUS=daemon 'winbindd' finished starting up and ready to
serve
>> connections Feb 14 18:49:27 simba.bhubfab.ddns.net smbd[19152]:
>> [2019/02/14 18:49:27.790989,
>> 0] ../lib/util/become_daemon.c:138(daemon_ready) Feb 14 18:49:27
>> simba.bhubfab.ddns.net smbd[19152]:   daemon_ready: STATUS=daemon
>> 'smbd' finished starting up and ready to serve connections Feb
14
>> 18:49:34 simba.bhubfab.ddns.net samba[19154]: [2019/02/14
>> 18:49:34.418113,
>> 0] ../source4/lib/tls/tlscert.c:170(tls_cert_generate) Feb 14
>> 18:49:34 simba.bhubfab.ddns.net samba[19154]:   TLS self-signed keys
>> generated OK
>>
>>
>>
>> Any pointers will be very much appreciated!
>> Thank you in advance
>>
> Did you by any chance upgrade from Samba version 4.7.x (or earlier)
> directly to 4.9.4 ?
> If you did, start downgrading again, it doesn't work, you will have to
> upgrade to to a 4.8.x version first.
>
> RowlandRowland hi there
Thank you for quick reply!
Unfortunately I did not make a note of the previous version, but I think 
it was 4.8.3

I will try install 4.8.x from source, run the classicupgrade, and see if 
it works.

Many Thanx
Best Regards
ashley

Reasonably Related Threads

Search for more possibly parallel threads

samba - Feb 2019 - Migrating to Samba 4.9.4 AD, kinit administrator -> kinit: Cannot contact any KDC for realm...

[Samba] Migrating to Samba 4.9.4 AD, kinit administrator -> kinit: Cannot contact any KDC for realm...

[Samba] Migrating to Samba 4.9.4 AD, kinit administrator -> kinit: Cannot contact any KDC for realm...

[Samba] Migrating to Samba 4.9.4 AD, kinit administrator -> kinit: Cannot contact any KDC for realm...

Reasonably Related Threads