Am 22.02.19 um 12:16 schrieb L.P.H. van Belle via samba:> Hai, > > Well, i did some extra checking, gone throug more logs. > ... Nothing. No errors. Sorry, i cant find anything.. > > Almost all my server run unattended updates, execpt the DC's. > > I had a few that where waiting for a reboot tomorrow night, all now rebooted, > and no problems before and after. > > So its bit hard to detect whats going on at your side. > Are all you servers having this or a few. Whats the difference between these. > > If a few, compair the installed packages thats what i would do. > I dont think it samba to blaim, because i see 15 servers auto-updated without problems. > > And i cant think of anything expect the packages check, on what's the problem, to start debugging. > > And i just noticed a new kernel update. From 4.9.144-3.0 to 4.9.144-3.1 > Fix boot breakage on 32-bit arm (closes: #922478). > But your not running arm 32bit i think ;-) > > So not much i can help with here i think, sorry.. > I can only think of 2 things here. > > 1) The use of settings in idmap.conf ive shown. > 2) use systemd from debian backports, its a try, > i have some server with the normal debian stretch version. > And some are on the backports version. > This depends on the server function, most samba servers are using the default systemd. > > Now time to eat.... > > Good lunch everybody. > > Greetz, > > Louis > >thanks for your testing and help on this. I hop between jobs and customers and don't have too much time for that now. Just looked into winbindd.log: [2019/02/22 13:57:48.758769, 3] ../source3/winbindd/winbindd_getpwuid.c:49(winbindd_getpwuid_send) getpwuid 10080 [2019/02/22 13:57:48.770047, 5] ../source3/winbindd/wb_xids2sids.c:565(wb_xids2sids_recv) wb_sids_to_xids failed: NT_STATUS_CONNECTION_REFUSED [2019/02/22 13:57:48.770088, 5] ../source3/winbindd/winbindd_getpwuid.c:111(winbindd_getpwuid_recv) Could not convert sid (NULL SID): NT_STATUS_CONNECTION_REFUSED [2019/02/22 13:57:48.770344, 3] ../source3/winbindd/winbindd_getgrgid.c:52(winbindd_getgrgid_send) getgrgid 10513 [2019/02/22 13:57:48.770425, 5] ../source3/winbindd/winbindd_getgrgid.c:116(winbindd_getgrgid_recv) Could not convert sid S-1-22-2-10513: NT_STATUS_INVALID_PARAMETER [2019/02/22 13:57:48.770746, 3] ../source3/winbindd/winbindd_getpwuid.c:49(winbindd_getpwuid_send) getpwuid 10092 [2019/02/22 13:57:48.770811, 5] ../source3/winbindd/winbindd_getpwuid.c:111(winbindd_getpwuid_recv) Could not convert sid S-1-22-1-10092: NT_STATUS_INVALID_PARAMETER [2019/02/22 13:57:48.771094, 3] ../source3/winbindd/winbindd_getgrgid.c:52(winbindd_getgrgid_send) getgrgid 10513 [2019/02/22 13:57:48.771159, 5] ../source3/winbindd/winbindd_getgrgid.c:116(winbindd_getgrgid_recv) Could not convert sid S-1-22-2-10513: NT_STATUS_INVALID_PARAMETER [2019/02/22 13:57:48.771471, 3] ../source3/winbindd/winbindd_getpwuid.c:49(winbindd_getpwuid_send) getpwuid 10002 [2019/02/22 13:57:48.782593, 5] ../source3/winbindd/wb_xids2sids.c:565(wb_xids2sids_recv) wb_sids_to_xids failed: NT_STATUS_CONNECTION_REFUSED smells bad ?
On Fri, 22 Feb 2019 13:59:36 +0100 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote:> Am 22.02.19 um 12:16 schrieb L.P.H. van Belle via samba: > > Hai, > > > > Well, i did some extra checking, gone throug more logs. > > ... Nothing. No errors. Sorry, i cant find anything.. > > > > Almost all my server run unattended updates, execpt the DC's. > > > > I had a few that where waiting for a reboot tomorrow night, all now > > rebooted, and no problems before and after. > > > > So its bit hard to detect whats going on at your side. > > Are all you servers having this or a few. Whats the difference > > between these. > > > > If a few, compair the installed packages thats what i would do. > > I dont think it samba to blaim, because i see 15 servers > > auto-updated without problems. > > > > And i cant think of anything expect the packages check, on what's > > the problem, to start debugging. > > > > And i just noticed a new kernel update. From 4.9.144-3.0 to > > 4.9.144-3.1 Fix boot breakage on 32-bit arm (closes: #922478). > > But your not running arm 32bit i think ;-) > > > > So not much i can help with here i think, sorry.. > > I can only think of 2 things here. > > > > 1) The use of settings in idmap.conf ive shown. > > 2) use systemd from debian backports, its a try, > > i have some server with the normal debian stretch version. > > And some are on the backports version. > > This depends on the server function, most samba servers are using > > the default systemd. > > > > Now time to eat.... > > > > Good lunch everybody. > > > > Greetz, > > > > Louis > > > > > > thanks for your testing and help on this. > > I hop between jobs and customers and don't have too much time for > that now. > > Just looked into winbindd.log: > > [2019/02/22 13:57:48.758769, 3] > ../source3/winbindd/winbindd_getpwuid.c:49(winbindd_getpwuid_send) > getpwuid 10080 > [2019/02/22 13:57:48.770047, 5] > ../source3/winbindd/wb_xids2sids.c:565(wb_xids2sids_recv) > wb_sids_to_xids failed: NT_STATUS_CONNECTION_REFUSED > [2019/02/22 13:57:48.770088, 5] > ../source3/winbindd/winbindd_getpwuid.c:111(winbindd_getpwuid_recv) > Could not convert sid (NULL SID): NT_STATUS_CONNECTION_REFUSED > [2019/02/22 13:57:48.770344, 3] > ../source3/winbindd/winbindd_getgrgid.c:52(winbindd_getgrgid_send) > getgrgid 10513 > [2019/02/22 13:57:48.770425, 5] > ../source3/winbindd/winbindd_getgrgid.c:116(winbindd_getgrgid_recv) > Could not convert sid S-1-22-2-10513: NT_STATUS_INVALID_PARAMETER > [2019/02/22 13:57:48.770746, 3] > ../source3/winbindd/winbindd_getpwuid.c:49(winbindd_getpwuid_send) > getpwuid 10092 > [2019/02/22 13:57:48.770811, 5] > ../source3/winbindd/winbindd_getpwuid.c:111(winbindd_getpwuid_recv) > Could not convert sid S-1-22-1-10092: NT_STATUS_INVALID_PARAMETER > [2019/02/22 13:57:48.771094, 3] > ../source3/winbindd/winbindd_getgrgid.c:52(winbindd_getgrgid_send) > getgrgid 10513 > [2019/02/22 13:57:48.771159, 5] > ../source3/winbindd/winbindd_getgrgid.c:116(winbindd_getgrgid_recv) > Could not convert sid S-1-22-2-10513: NT_STATUS_INVALID_PARAMETER > [2019/02/22 13:57:48.771471, 3] > ../source3/winbindd/winbindd_getpwuid.c:49(winbindd_getpwuid_send) > getpwuid 10002 > [2019/02/22 13:57:48.782593, 5] > ../source3/winbindd/wb_xids2sids.c:565(wb_xids2sids_recv) > wb_sids_to_xids failed: NT_STATUS_CONNECTION_REFUSED > > smells bad > ? >Not good, can you post the smb.conf ? Rowland
Am 22.02.19 um 14:51 schrieb Rowland Penny via samba:> Not good, can you post the smb.conf ? > > Rowland >[global] security = ADS workgroup = ARBEITSGRUPPE realm = arbeitsgruppe.MYDOMAIN.at log file = /var/log/samba/%m.log #log level = 5 log level = 5 auth:5 winbind:8 idmap config * : backend = tdb idmap config * : range = 2000-3999 idmap config ARBEITSGRUPPE:backend = ad idmap config ARBEITSGRUPPE:range = 10000-9999999 idmap config ARBEITSGRUPPE:unix_nss_info = yes idmap config arbeitsgruppe : schema_mode = rfc2307 username map = /etc/samba/user.map winbind use default domain = Yes winbind refresh tickets = Yes load printers = No printcap name = /dev/null vfs objects = acl_xattr map acl inherit = yes store dos attributes = yes interfaces = bond0 #hosts allow = 10.0.0.22,10.0.0.50 [Daten] comment = Daten path = /mnt/daten #valid users = @"ARBEITSGRUPPE\\domain users" #force group = users read only = No #create mask = 0660 #directory mask = 0770 create mask = 3660 directory mask = 3770 [Scans_Plotter] comment = Scans vom Plotter path = /mnt/daten/Allgemeines/_Scans/Plotter #valid users = @"ARBEITSGRUPPE\\domain users" read only = No #create mask = 0660 #directory mask = 0770
Hai, That bond0 interface, you might want to change that the interface name to bond1 Depending on the bonding settings, you might have hit a reserved name. I lots my docu on that but i know i configured a bond1 because bond0 didn work right. And then check these. wbinfo -pPt ( or wbinfo -p && wbinfo -P && wbinfo -t ) wbinfo --sids-to-unix-ids S-1-22-2-10513 wbinfo -D ARBEITSGRUPPE wbinfo --all-domains My bonding setup.. cat /etc/systemd/network/30-bond1* # /etc/systemd/network/30-bond1-dev1.network [Match] MACAddress=78:2b:xx:xx:xx:xx [Network] Bond=bond1 # /etc/systemd/network/30-bond1-dev2.network [Match] MACAddress=78:2b:xx:xx:xx:xx [Network] Bond=bond1 # /etc/systemd/network/30-bond1.netdev [NetDev] Name=bond1 Kind=bond [Bond] Mode=802.3ad MIIMonitorSec=1s #LACPTransmitRate=fast #UpDelaySec=2s #DownDelaySec=8s #TransmitHashPolicy=layer2 #TransmitHashPolicy=layer3+4 # /etc/systemd/network/30-bond1.network [Match] Name=bond1 [Network] DNS=192.168.1.2 DNS=192.168.1.1 Domains=internal.domain.tld NTP=ntp1.internal.domain.tld NTP=ntp2.internal.domain.tld # ntp1 and 2 are CNAMES to DC1 DC2. [Address] Address=192.168.1.11/24 [Route] Destination=0.0.0.0/0 Gateway=192.168.1.252 Greetz, Louis> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Stefan G. Weichinger via samba > Verzonden: vrijdag 22 februari 2019 14:55 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Debian 9.8 and vanbelle-repos > > Am 22.02.19 um 14:51 schrieb Rowland Penny via samba: > > > Not good, can you post the smb.conf ? > > > > Rowland > > > > [global] > security = ADS > workgroup = ARBEITSGRUPPE > realm = arbeitsgruppe.MYDOMAIN.at > log file = /var/log/samba/%m.log > #log level = 5 > > log level = 5 auth:5 winbind:8 > > idmap config * : backend = tdb > idmap config * : range = 2000-3999 > > idmap config ARBEITSGRUPPE:backend = ad > idmap config ARBEITSGRUPPE:range = 10000-9999999 > > idmap config ARBEITSGRUPPE:unix_nss_info = yes > > idmap config arbeitsgruppe : schema_mode = rfc2307 > > username map = /etc/samba/user.map > > winbind use default domain = Yes > winbind refresh tickets = Yes > > load printers = No > printcap name = /dev/null > > vfs objects = acl_xattr > map acl inherit = yes > store dos attributes = yes > > interfaces = bond0 > > #hosts allow = 10.0.0.22,10.0.0.50 > > [Daten] > comment = Daten > path = /mnt/daten > #valid users = @"ARBEITSGRUPPE\\domain users" > #force group = users > read only = No > #create mask = 0660 > #directory mask = 0770 > create mask = 3660 > directory mask = 3770 > > [Scans_Plotter] > comment = Scans vom Plotter > path = /mnt/daten/Allgemeines/_Scans/Plotter > #valid users = @"ARBEITSGRUPPE\\domain users" > read only = No > #create mask = 0660 > #directory mask = 0770 > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > >