samba - Sep 2019 - migrated from gentoo to debian, DM throws errors ...

Am 05.09.19 um 18:37 schrieb Rowland penny via samba:
> That what you mean ? ;-)
;-)
> You will probably have a keytab now '/etc/krb.keytab', the join
should
> have recreated it.
/etc/krb5.keytab

> I take it that you are mounting the users homedirs and require the
> 'cifs' keytab to do this, I also take it that the computers short
> hostname is 'samba'. You will need to check that the AD object for
> 'samba' has the 'cifs/SAMBA.noras.intra' SPN.
> 
> I would also find out just how the cifs mount is being done.
I don't know ... you suggest there's a linux machine mounting something
via CIFS? It's the only linux machine here ... maybe some NAS somewhere ...

So I understand we should check that AD object within "AD Computers"
under Windows?
> A Unix domain member does have a sam.ldb file, just not like the one on
> a DC.
Not existant here so far.

(I might leave here in ~15min and will be back tmrw)

On 05.09.19 19:04, Stefan G. Weichinger via samba wrote:
> Am 05.09.19 um 18:37 schrieb Rowland penny via samba:
> 
>> That what you mean ? ;-)
> 
> ;-)
> 
>> You will probably have a keytab now '/etc/krb.keytab', the join
should
>> have recreated it.
> 
> /etc/krb5.keytab
> 
> 
>> I take it that you are mounting the users homedirs and require the
>> 'cifs' keytab to do this, I also take it that the computers
short
>> hostname is 'samba'. You will need to check that the AD object
for
>> 'samba' has the 'cifs/SAMBA.noras.intra' SPN.
>>
>> I would also find out just how the cifs mount is being done.
> 
> I don't know ... you suggest there's a linux machine mounting
something
> via CIFS? It's the only linux machine here ... maybe some NAS somewhere
...
> 
> So I understand we should check that AD object within "AD
Computers"
> under Windows?
> 
>> A Unix domain member does have a sam.ldb file, just not like the one on
>> a DC.
> 
> Not existant here so far.
> 
> (I might leave here in ~15min and will be back tmrw)
Seems they can work OK ... maybe that is/was one obscure device
somewhere, will check.


I had some mismatch around the packages:

had deployed the apt sources lines for "deb
http://apt.van-belle.nl/debian stretch-samba48" ... but this is Debian
Buster already.

And there are no buster-packages from van-belle.nl ? And I am waiting
with 4.10 for now ... so:

running samba-4.9.5 from Debian

On 07/09/2019 12:26, Stefan G. Weichinger via samba
wrote:
> On 05.09.19 19:04, Stefan G. Weichinger via samba wrote:
>> Am 05.09.19 um 18:37 schrieb Rowland penny via samba:
>>
>>> That what you mean ? ;-)
>> ;-)
>>
>>> You will probably have a keytab now '/etc/krb.keytab', the
join should
>>> have recreated it.
>> /etc/krb5.keytab
>>
>>
>>> I take it that you are mounting the users homedirs and require the
>>> 'cifs' keytab to do this, I also take it that the computers
short
>>> hostname is 'samba'. You will need to check that the AD
object for
>>> 'samba' has the 'cifs/SAMBA.noras.intra' SPN.
>>>
>>> I would also find out just how the cifs mount is being done.
>> I don't know ... you suggest there's a linux machine mounting
something
>> via CIFS? It's the only linux machine here ... maybe some NAS
somewhere ...
>>
>> So I understand we should check that AD object within "AD
Computers"
>> under Windows?
>>
>>> A Unix domain member does have a sam.ldb file, just not like the
one on
>>> a DC.
>> Not existant here so far.
>>
>> (I might leave here in ~15min and will be back tmrw)
> Seems they can work OK ... maybe that is/was one obscure device
> somewhere, will check.
>
>
> I had some mismatch around the packages:
>
> had deployed the apt sources lines for "deb
> http://apt.van-belle.nl/debian stretch-samba48" ... but this is Debian
> Buster already.
>
> And there are no buster-packages from van-belle.nl ? And I am waiting
> with 4.10 for now ... so:
>
> running samba-4.9.5 from Debian
>
>
>
Hi Stefan, Louis does provide Samba packages for Buster, but only 4.10.x 
& 4.11.0RC2

Rowland