As always, posting your smb.conf might help. Oops forgot, thanks Rowland: pi at fs1:~ $ cat /etc/samba/smb.conf [global] username map = /etc/samba/user.map workgroup = samdom realm = samdom.example.com netbios name = fs1 security = ADS idmap config * : backend = tdb idmap config *: range = 3000-7999 idmap config SAMDOM:backend = ad idmap config SAMDOM:schema_mode = rfc2307 idmap config SAMDOM:range = 10000-999999 template homedir = /home/%D/%U template shell = /bin/bash winbind use default domain = true winbind offline logon = false winbind nss info = rfc2307 winbind enum users = yes winbind enum groups = yes vfs objects = acl_xattr map acl inherit = Yes store dos attributes = Yes [OgdenFiles] path = /fsrv/shares/OgdenFiles read only = no [OgdenUsers] path = /fsrv/shares/OgdenUsers read only = no Cheers Stephen Ellwood
On Fri, 5 Apr 2019 15:32:29 +0100 Stephen via samba <samba at lists.samba.org> wrote:> As always, posting your smb.conf might help. > > Oops forgot, thanks Rowland:Probably the kerberos ticket is expiring, try adding this to smb.conf winbind refresh tickets = Yes Rowland
Hi Rowland, I made the change you suggested to auto refresh kerberos. It didn't seem to fix the issue unfortunately, even after a machine restart. Following your line of reasoning that it is a Kerberos issue, I then tried to grab a new kerberos ticket on the server in question which appears to fail though. Perhaps this gives some further insight? pi at fs1:~ $ kinit administrator at samdom.example.com Password for administrator at samdom.example.com: kinit: KDC reply did not match expectations while getting initial credentials Thanks Stephen
Your smb.conf: workgroup = IN-CAPS realm = IN-CAPS Start there. Greetz, Louis> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Stephen via samba > Verzonden: vrijdag 5 april 2019 16:54 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] wbinfo isn't working on domain member > > Hi Rowland, I made the change you suggested to auto refresh > kerberos. It > didn't seem to fix the issue unfortunately, even after a machine > restart. Following your line of reasoning that it is a > Kerberos issue, I > then tried to grab a new kerberos ticket on the server in > question which > appears to fail though. Perhaps this gives some further insight? > > pi at fs1:~ $ kinit administrator at samdom.example.com > Password for administrator at samdom.example.com: > kinit: KDC reply did not match expectations while getting initial > credentials > > Thanks > > Stephen > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > >