thr3ads.net - samba - [Samba] debian 10: errors with my server samba-ad [May 2019]

If this information is useful, please help other people find it:
Share via:

nathalie ramat

2019-May-14 08:27 UTC

[Samba] debian 10: errors with my server samba-ad

hi,

I modified my file named.conf.options .
When i use dig lenzspitze2.calais.fr I get an answer which contain 
answer section, authority section and additional section.

I haven't map "Domain users" into "user"

When I execute samba -i i have always the message error or warning ?

/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun 
fichier ou dossier de ce type
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun 
fichier ou dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8012 failed: 
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun 
fichier ou dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8019 failed: 
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun 
fichier ou dossier de ce type

i put a file of my log samba -i debug 3

I can put my client windows 10 on my domain.

I have installed RSAT command.

For my test I have create a user "testlundi" and group
"specifique"
using the command RSAT

I recover the last number of sid for the uidnumber and the last number 
for sid group for gidnumber

But getent passwd testlundi give me this response :

LENZSPITZE2\testlundi:*:1108:100:testlundi:/home/LENZSPITZE2/testlundi:/bin/bash

The uidnumber is good but not the gidnumber.

getent group specifique

LENZSPITZE2\specifique:x:1105:


pdbedit -L -v testlundi
Registered MSG_REQ_POOL_USAGE
Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
lp_load_ex: refreshing parameters
Initialising global parameters
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
Processing section "[global]"
ldb_wrap open of idmap.ldb
Unix username:        testlundi
NT username:
Account Flags:        [U          ]
User SID:             S-1-5-21-114952022-3178926164-3586775662-1108
Primary Group SID:    S-1-5-21-114952022-3178926164-3586775662-1105
Full Name:            testlundi
Home Directory:
HomeDir Drive:        (null)
Logon Script:
Profile Path:
Domain:
Account desc:
Workstations:
Munged dial:
Logon time:           lun., 13 mai 2019 15:48:14 CEST
Logoff time:          0
Kickoff time:         jeu., 14 sept. 30828 04:48:05 CEST
Password last set:    lun., 13 mai 2019 15:43:08 CEST
Password can change:  lun., 13 mai 2019 15:43:08 CEST
Password must change: never
Last bad password   : 0
Bad password count  : 0
Logon hours         : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF


My file idmap.tdb  is not good ? How can I recreate it ?


I have always  this response when I run smbclient -L localhost -U 
administrator on my server

Enter LENZSPITZE2\administrator's password:

	Sharename       Type      Comment
	---------       ----      -------
	netlogon        Disk
	sysvol          Disk
	IPC$            IPC       IPC Service (Samba 4.9.5-Debian)
Reconnecting with SMB1 for workgroup listing.

	Server               Comment
	---------            -------

	Workgroup            Master
	---------            -------


I don't have any information for my server.

my smb.conf for my server is

  Global parameters
[global]
	netbios name = DEBIANTEST
	realm = LENZSPITZE2.CALAIS.FR
	server role = active directory domain controller
	server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd,
ntp_signd, kcc
	workgroup = LENZSPITZE2
	idmap_ldb:use rfc2307 = yes
	log level = 1
	log file = /var/log/samba/log.%m
	max log size = 1000
	template shell = /bin/bash
	printing = cups
	printcap name = /dev/null
	

[netlogon]
	path = /var/lib/samba/sysvol/lenzspitze2.calais.fr/scripts
	read only = No

[sysvol]
	path = /var/lib/samba/sysvol
	read only = No



when I run the command smbclient -L debiantest -U administrator on my client
linux I have no response .

but I can ping debiantest and dig debiantest.lenzspitze2.calais.fr give me a
response

I am a little confused. I don't know how to search




I think I have more errors on my configuration - but I can not find the errors .


Thank you for your help.






Le 13/05/2019 à 12:16, L.P.H. van Belle via samba a
écrit :>
> Your configs and all output except above and this part :
>>
LENZSPITZE2\administrator:*:0:100::/home/LENZSPITZE2/administrator:/bin/bash
> This can be correct, but i dont trust the 100 as GID here, because thats
the users group in debian.
> And i would expected to see "domain users"  / ( minimaal GID)
10000
>
> Or did you map "Domain users" into "user"
>
>
> You should review you bind9 config, a base you can start with is this :
> First make it work, then adjust where needed. ( with care ).
>
> /etc/bind/named.conf.options
> // Defined ACL Begin
> acl thisserverip {
>          192.168.X.X;  // IP of this serfver.
>          };
> acl all-networks {
> 	  // you lan ranges.
>          192.168.X.X/24;
>          };
> // Defined ACL End
>
> options {
>          directory "/var/cache/bind";
>          version "0.0.7";  // hide the versionnumer of bind.
>          forwarders { 8.8.4.4; 8.8.8.8; };
>          dnssec-validation no;
>
>          auth-nxdomain yes;    # conform to RFC1035 = No, but this server
is the Authoritive server for the zones in the AD.
>          listen-on-v6 { "none"; };
>          listen-on port 53 { "thisserverip"; 127.0.0.1; };
>          notify no;
>          empty-zones-enable no;	// yes can conflict with your zones.
>
>          //  Add any subnets or hosts you want to allow to use this DNS
server
>          allow-query { "all-networks"; 127.0.0.1/32; };
>          //  Add any subnets or hosts you want to allow to use recursive
queries
>          allow-recursion {  "all-networks"; 127.0.0.1/32; };
>
>          //https://wiki.samba.org/index.php/Dns-backend_bind
>          // DNS dynamic updates via Kerberos (optional, but recommended)
>          //tkey-gssapi-keytab
"/var/lib/samba/private/dns.keytab";	// before samba 4.9.
>          tkey-gssapi-keytab "/var/lib/samba/bind-dns/dns.keytab";
// samba 4.9. and up.
> 	  // Do check where the file dns.keytab is, if needed move it manualy to
/var/lib/samba/bind-dns/
> 	  // and check if you rights are root:bind with 640.
>
> };
>
> include "/etc/bind/rndc.key";
>      controls {
>       inet 127.0.0.1 allow { localhost; } keys { rndc-key; };
> };
>
> /etc/bind/named.conf.local
> // adding the dlopen ( Bind DLZ ) module for samba,
> include "/var/lib/samba/bind-dns/named.conf";
>
> Now in your case, after you adjusted bind, check the above file :
/var/lib/samba/bind-dns/named.conf
> Bind 9.11 should be enabled.
>
> See if above helps you, if not, post again, i have more, but lets start
here.
>
> I also advice to disable bind9 reloading.
> systemctl edit bind9   and Add:
> [Service]
> ExecReload>
>
> And for samba-ad-dc
> systemctl edit samba-ad-dc
> Add:
> [Unit]
> After=network.target network-online.target bind9.service
>
> Then after all is done,
>
> systemctl disable samba smbd nmbd winbind
> systemctl mask samba smbd nmbd winbind
>
> systemctl unmask samba-ad-dc bind9
> systemctl enable samba-ad-dc bind9
> systemctl start bind9 samba-ad-dc
>
>
>
>
> Greetz,
>
> Louis
>
>
>
>
>>
>>
-- 
Nathalie RAMAT-LECLERCQ

Service Informatique

Universite du Littoral-Côte d'Opale
SCoSI - Service Commun du Système d'Information
Pôle Systèmes et réseaux

Centre de Gestion Universitaire de Calais
50 rue ferdinand Buisson
C.S 80699
62228 CALAIS CEDEX





-------------- next part --------------
root at debiantest:/etc/samba# /usr/sbin/samba -i
samba version 4.9.5-Debian started.
Copyright Andrew Tridgell and the Samba Team 1992-2018
GENSEC backend 'gssapi_spnego' registered
GENSEC backend 'gssapi_krb5' registered
GENSEC backend 'gssapi_krb5_sasl' registered
GENSEC backend 'spnego' registered
GENSEC backend 'schannel' registered
GENSEC backend 'naclrpc_as_system' registered
GENSEC backend 'sasl-EXTERNAL' registered
GENSEC backend 'ntlmssp' registered
GENSEC backend 'ntlmssp_resume_ccache' registered
GENSEC backend 'http_basic' registered
GENSEC backend 'http_ntlm' registered
GENSEC backend 'http_negotiate' registered
GENSEC backend 'krb5' registered
GENSEC backend 'fake_gssapi_krb5' registered
register_process_model: PROCESS_MODEL 'single' registered
register_process_model: PROCESS_MODEL 'standard' registered
register_process_model: PROCESS_MODEL 'prefork' registered
AUTH backend 'sam' registered
AUTH backend 'sam_ignoredomain' registered
AUTH backend 'anonymous' registered
AUTH backend 'winbind' registered
AUTH backend 'name_to_ntstatus' registered
AUTH backend 'unix' registered
ldb_wrap open of privilege.ldb
binary_smbd_main: samba: using 'standard' process model
DCERPC endpoint server 'rpcecho' registered
DCERPC endpoint server 'epmapper' registered
DCERPC endpoint server 'remote' registered
DCERPC endpoint server 'wkssvc' registered
DCERPC endpoint server 'unixinfo' registered
DCERPC endpoint server 'samr' registered
DCERPC endpoint server 'netlogon' registered
DCERPC endpoint server 'dssetup' registered
DCERPC endpoint server 'lsarpc' registered
DCERPC endpoint server 'backupkey' registered
DCERPC endpoint server 'drsuapi' registered
DCERPC endpoint server 'browser' registered
DCERPC endpoint server 'eventlog6' registered
DCERPC endpoint server 'dnsserver' registered
kccsrv_partition[DC=lenzspitze2,DC=calais,DC=fr] loaded
kccsrv_partition[CN=Configuration,DC=lenzspitze2,DC=calais,DC=fr] loaded
kccsrv_partition[CN=Schema,CN=Configuration,DC=lenzspitze2,DC=calais,DC=fr]
loaded
kccsrv_partition[DC=DomainDnsZones,DC=lenzspitze2,DC=calais,DC=fr] loaded
kccsrv_partition[DC=ForestDnsZones,DC=lenzspitze2,DC=calais,DC=fr] loaded
dreplsrv_partition[DC=lenzspitze2,DC=calais,DC=fr] loaded
dreplsrv_partition[CN=Configuration,DC=lenzspitze2,DC=calais,DC=fr] loaded
dreplsrv_partition[CN=Schema,CN=Configuration,DC=lenzspitze2,DC=calais,DC=fr]
loaded
dreplsrv_partition[DC=DomainDnsZones,DC=lenzspitze2,DC=calais,DC=fr] loaded
dreplsrv_partition[DC=ForestDnsZones,DC=lenzspitze2,DC=calais,DC=fr] loaded
/usr/sbin/smbd: smbd version 4.9.5-Debian started.
/usr/sbin/smbd: Copyright Andrew Tridgell and the Samba Team 1992-2018
/usr/sbin/smbd: Registered MSG_REQ_POOL_USAGE
/usr/sbin/smbd: Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
/usr/sbin/smbd: lp_load_ex: refreshing parameters
/usr/sbin/smbd: Initialising global parameters
/usr/sbin/smbd: rlimit_max: increasing rlimit_max (1024) to minimum Windows
limit (16384)
/usr/sbin/smbd: Processing section "[global]"
/usr/sbin/smbd: Processing section "[home]"
/usr/sbin/smbd: Processing section "[netlogon]"
/usr/sbin/smbd: Processing section "[sysvol]"
/usr/sbin/smbd: adding IPC service
/usr/sbin/smbd: added interface enp0s31f6 ip=192.168.22.37 bcast=192.168.22.255
netmask=255.255.255.0
/usr/sbin/smbd: loaded services
/usr/sbin/smbd: INFO: Profiling support unavailable in this build.
/usr/sbin/smbd: Becoming a daemon.
/usr/sbin/winbindd: winbindd version 4.9.5-Debian started.
/usr/sbin/winbindd: Copyright Andrew Tridgell and the Samba Team 1992-2018
/usr/sbin/winbindd: Registered MSG_REQ_POOL_USAGE
/usr/sbin/winbindd: Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
/usr/sbin/winbindd: lp_load_ex: refreshing parameters
/usr/sbin/winbindd: Initialising global parameters
/usr/sbin/winbindd: rlimit_max: increasing rlimit_max (1024) to minimum Windows
limit (16384)
/usr/sbin/winbindd: Processing section "[global]"
/usr/sbin/winbindd: added interface enp0s31f6 ip=192.168.22.37
bcast=192.168.22.255 netmask=255.255.255.0
/usr/sbin/winbindd: added interface enp0s31f6 ip=192.168.22.37
bcast=192.168.22.255 netmask=255.255.255.0
/usr/sbin/smbd: ldb_wrap open of idmap.ldb
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun fichier ou
dossier de ce type
/usr/sbin/smbd: ldb_wrap open of idmap.ldb
/usr/sbin/smbd: ldb_wrap open of idmap.ldb
/usr/sbin/smbd: Initialise the svcctl registry keys if needed.
/usr/sbin/smbd: Initialise the eventlog registry keys if needed.
/usr/sbin/smbd: daemon_ready: STATUS=daemon 'smbd' finished starting up
and ready to serve connections
/usr/sbin/smbd: start_background_queue: Starting background LPQ thread
/usr/sbin/winbindd: ldb_wrap open of idmap.ldb
/usr/sbin/winbindd: initialize_winbindd_cache: clearing cache and re-creating
with version number 2
/usr/sbin/winbindd: add_trusted_domain: Added domain [BUILTIN] [(null)]
[S-1-5-32]
/usr/sbin/winbindd: add_trusted_domain: Added domain [LENZSPITZE2]
[lenzspitze2.calais.fr] [S-1-5-21-114952022-3178926164-3586775662]
/usr/sbin/winbindd: daemon_ready: STATUS=daemon 'winbindd' finished
starting up and ready to serve connections
/usr/sbin/smbd: Failed to fetch record!
/usr/sbin/smbd: waiting for connections
/usr/sbin/smbd: ldb_wrap open of idmap.ldb
/usr/sbin/smbd: reloading printcap cache
/usr/sbin/smbd: reload status: ok
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun fichier ou
dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8012 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun fichier ou
dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8019 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun fichier ou
dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 7840 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10192 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun fichier ou
dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8020 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10224 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10220 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10202 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10207 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10228 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10197 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8405 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun fichier ou
dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8014 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun fichier ou
dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8013 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8407 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun fichier ou
dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8016 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10216 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10217 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8410 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8403 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun fichier ou
dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8010 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10218 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10215 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun fichier ou
dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 4713 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun fichier ou
dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8030 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8416 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun fichier ou
dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8017 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8398 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10223 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun fichier ou
dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8008 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8412 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8408 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8464 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10212 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10196 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun fichier ou
dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 7842 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10203 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8397 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun fichier ou
dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 5309 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10193 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun fichier ou
dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8022 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8404 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8399 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun fichier ou
dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 7863 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10211 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun fichier ou
dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8007 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10191 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun fichier ou
dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8029 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10190 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8409 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10213 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10205 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun fichier ou
dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8018 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10209 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10185 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10188 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun fichier ou
dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 5307 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun fichier ou
dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 7864 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10186 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun fichier ou
dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8015 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun fichier ou
dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 4672 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun fichier ou
dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 4673 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8401 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10199 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun fichier ou
dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 7884 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun fichier ou
dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8033 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10184 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun fichier ou
dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8006 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8463 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10206 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10214 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8406 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun fichier ou
dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8034 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: pid_to_procid: messaging_dgm_get_unique failed: Aucun fichier ou
dossier de ce type
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8032 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 8415 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10194 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
/usr/sbin/smbd: send_all_fn: messaging_send_buf to 10195 failed:
NT_STATUS_OBJECT_NAME_NOT_FOUND
Registered DEBIANTEST<00> with 192.168.22.37 on interface 192.168.22.255
Registered DEBIANTEST<03> with 192.168.22.37 on interface 192.168.22.255
Registered DEBIANTEST<20> with 192.168.22.37 on interface 192.168.22.255
Registered LENZSPITZE2<1b> with 192.168.22.37 on interface 192.168.22.255
Registered LENZSPITZE2<1c> with 192.168.22.37 on interface 192.168.22.255
Registered LENZSPITZE2<00> with 192.168.22.37 on interface 192.168.22.255
Calling samba_kcc script
Doing a full scan on DC=ForestDnsZones,DC=lenzspitze2,DC=calais,DC=fr and
looking for deleted objects
Doing a full scan on DC=DomainDnsZones,DC=lenzspitze2,DC=calais,DC=fr and
looking for deleted objects
Doing a full scan on CN=Configuration,DC=lenzspitze2,DC=calais,DC=fr and looking
for deleted objects
Doing a full scan on DC=lenzspitze2,DC=calais,DC=fr and looking for deleted
objects
/usr/sbin/samba_kcc: ldb_wrap open of secrets.ldb
samba_runcmd_io_handler: Child /usr/sbin/samba_kcc exited 0
Completed samba_kcc OK

Rowland penny

2019-May-14 08:51 UTC

head link

[Samba] debian 10: errors with my server samba-ad

On 14/05/2019 09:27, nathalie ramat via samba wrote:> hi,
>
> I modified my file named.conf.options .
> When i use dig lenzspitze2.calais.fr I get an answer which contain 
> answer section, authority section and additional section.
>
> I haven't map "Domain users" into "user"
>
> I recover the last number of sid for the uidnumber and the last number 
> for sid group for gidnumber

It isn't recommended to do that any more, RID's start at '1000'
and so
do local Unix ID's, try starting at the same number that ADUC uses
'10000'
>
> But getent passwd testlundi give me this response :
>
>
LENZSPITZE2\testlundi:*:1108:100:testlundi:/home/LENZSPITZE2/testlundi:/bin/bash
>
>
> The uidnumber is good but not the gidnumber.
I personally don't think the uidNumber is good (see above), but unless 
you give 'Domain Users' a gidNumber, the users GID will always be
'100',
but only on a the DC, on any Unix domain members (using the winbind 'ad'
backend) you will get no AD users.

You also do not need to do any of the this if you are either only going 
to use the DC for authentication or as the only Unix fileserver (no 
other Unix computers).
>
> getent group specifique
>
> LENZSPITZE2\specifique:x:1105:
>This will never be used as the users primary group on a Samba AD DC.

>
> I have always  this response when I run smbclient -L localhost -U 
> administrator on my server
>
> Enter LENZSPITZE2\administrator's password:
>
>     Sharename       Type      Comment
>     ---------       ----      -------
>     netlogon        Disk
>     sysvol          Disk
>     IPC$            IPC       IPC Service (Samba 4.9.5-Debian)
> Reconnecting with SMB1 for workgroup listing.
>
>     Server               Comment
>     ---------            -------
>
>     Workgroup            Master
>     ---------            -------
>
>
> I don't have any information for my server.

Neither do I, this is because there is no network browsing on a DC.
>
> when I run the command smbclient -L debiantest -U administrator on my 
> client linux I have no response .
>
> but I can ping debiantest and dig debiantest.lenzspitze2.calais.fr 
> give me a response
>
> I am a little confused. I don't know how to search
>Try the command like this:

smbclient -L localhost -N

Rowland

nathalie ramat

2019-May-14 09:58 UTC

head link

[Samba] debian 10: errors with my server samba-ad

hi,

My user must be able to connect under windows and under linux. The home 
is common. Their home is on the server.

Like there are students - they are identified by their formation( group) 
and by their login

for example /home/specifique/testlundi
                   /home/l1info/testmardi

For me the etudiant belong to a group  and i have create each group on OU




and i take the last number for sid group for gidnumber - it was to find 
out which group he belonged to - It's not a good idea ?


on my smb.conf on the server i put

[homes]
     path=/home/%G/%U
     read only = no


Actually - i can't put my client linux in my ad.
net ads join -S nameofsever -U administrator --> doestn't give my 
response -- It wait  ...

my client linux smb.conf is


  [global]
     security =ADS
     realm = LENZSPITZE2.CALAIS.FR
     workgroup =LENZSPITZE2
     netbios name = testbugsterl
     winbind separator = /
     winbind enum users = yes
     winbind enum groups = yes
     idmap config LENZSPITZE2 : backend = ad
     idmap config LENZSPITZE2 : schema_mode =rfc2307
     idmap config LENZSPITZE2 : range = 10000-399999999
     idmap config LENZSPITZE2 : unix_nss_info = yes
     template homedir =/etudiants/%U
     template shell =/bin/bash
     winbind nss info = rfc2307
     kerberos method =  secrets and keytab
     dedicated keytab file =/etc/krb5.keytab
     winbind refresh tickets =yes
     username map = /etc/samba/samba_usermapping
     winbind use default domain = yes
     log file =/var/log/samba/log.%m
     log level = 3
# for acl support on members servers with shares
     vfs object = acl_xattr
     map acl inherit = yes
     store dos attributes = yes
     winbind nss info = rfc2307




Le 14/05/2019 à 10:51, Rowland penny via samba a écrit :> On 14/05/2019 09:27, nathalie ramat via samba wrote:
>> hi,
>>
>> I modified my file named.conf.options .
>> When i use dig lenzspitze2.calais.fr I get an answer which contain 
>> answer section, authority section and additional section.
>>
>> I haven't map "Domain users" into "user"
>>
>> I recover the last number of sid for the uidnumber and the last 
>> number for sid group for gidnumber
>
>
> It isn't recommended to do that any more, RID's start at
'1000' and so
> do local Unix ID's, try starting at the same number that ADUC uses 
> '10000'
>
>>
>> But getent passwd testlundi give me this response :
>>
>>
LENZSPITZE2\testlundi:*:1108:100:testlundi:/home/LENZSPITZE2/testlundi:/bin/bash
>>
>>
>> The uidnumber is good but not the gidnumber.
>
> I personally don't think the uidNumber is good (see above), but unless 
> you give 'Domain Users' a gidNumber, the users GID will always be 
> '100', but only on a the DC, on any Unix domain members (using the 
> winbind 'ad' backend) you will get no AD users.
>
> You also do not need to do any of the this if you are either only 
> going to use the DC for authentication or as the only Unix fileserver 
> (no other Unix computers).
>
>>
>> getent group specifique
>>
>> LENZSPITZE2\specifique:x:1105:
>>
> This will never be used as the users primary group on a Samba AD DC.
>
>
>>
>> I have alwaysÂ  this response when I run smbclient -L localhost -U 
>> administrator on my server
>>
>> Enter LENZSPITZE2\administrator's password:
>>
>> Â Â Â Â SharenameÂ Â Â Â Â Â  TypeÂ Â Â Â Â  Comment
>> Â Â Â Â ---------Â Â Â Â Â Â  ----Â Â Â Â Â  -------
>> Â Â Â Â netlogonÂ Â Â Â Â Â Â  Disk
>> Â Â Â Â sysvolÂ Â Â Â Â Â Â Â Â  Disk
>> Â Â Â Â IPC$Â Â Â Â Â Â Â Â Â Â Â  IPCÂ Â Â Â Â Â  IPC Service (Samba 
>> 4.9.5-Debian)
>> Reconnecting with SMB1 for workgroup listing.
>>
>> Â Â Â Â ServerÂ Â Â Â Â Â Â Â Â Â Â Â Â Â  Comment
>> Â Â Â Â ---------Â Â Â Â Â Â Â Â Â Â Â  -------
>>
>> Â Â Â Â WorkgroupÂ Â Â Â Â Â Â Â Â Â Â  Master
>> Â Â Â Â ---------Â Â Â Â Â Â Â Â Â Â Â  -------
>>
>>
>> I don't have any information for my server.
>
>
> Neither do I, this is because there is no network browsing on a DC.
>
>>
>> when I run the command smbclient -L debiantest -U administrator on my 
>> client linux I have no response .
>>
>> but I can ping debiantest and dig debiantest.lenzspitze2.calais.fr 
>> give me a response
>>
>> I am a little confused. I don't know how to search
>>
> Try the command like this:
>
> smbclient -L localhost -N
>
> Rowland
>
>
-- 
Nathalie RAMAT-LECLERCQ

Service Informatique

Universite du Littoral-Côte d'Opale
SCoSI - Service Commun du Système d'Information
Pôle Systèmes et réseaux

Centre de Gestion Universitaire de Calais
50 rue ferdinand Buisson
C.S 80699
62228 CALAIS CEDEX

Reasonably Related Threads

Search for more seemingly similar threads

samba - May 2019 - debian 10: errors with my server samba-ad

[Samba] debian 10: errors with my server samba-ad

[Samba] debian 10: errors with my server samba-ad

[Samba] debian 10: errors with my server samba-ad

Reasonably Related Threads