Rowland penny
2019-Nov-29 18:33 UTC
[Samba] security = ads parameter not working in samba 4.9.5
On 29/11/2019 18:17, S?rgio Basto via samba wrote:> On Fri, 2019-11-29 at 17:19 +0000, Rowland penny via samba wrote: >> Lets start by removing this: krb5-server-1.15.1-37.el7_7.2.x86_64 > ATM I can't, it will remove all samba packages :)Then your packages are depending on the krb5-server package, which is MIT, which is experimental. This shouldn't be a problem on a Unix domain member, but there is absolutely no need for it. Are absolutely wedded to red-hat, it is so much easier with Debian based distros ;-) Rowland
Sérgio Basto
2019-Dec-05 04:57 UTC
[Samba] security = ads parameter not working in samba 4.10.10
On Fri, 2019-11-29 at 18:33 +0000, Rowland penny via samba wrote:> On 29/11/2019 18:17, S?rgio Basto via samba wrote: > > On Fri, 2019-11-29 at 17:19 +0000, Rowland penny via samba wrote: > > > Lets start by removing this: krb5-server-1.15.1-37.el7_7.2.x86_64 > > ATM I can't, it will remove all samba packages :) > > Then your packages are depending on the krb5-server package, which > is > MIT, which is experimental. This shouldn't be a problem on a Unix > domain > member, but there is absolutely no need for it. > > Are absolutely wedded to red-hat, it is so much easier with Debian > based > distros ;-)OK , removed krb5-server packages , I did a lot of things ( I can detail later) , and suddenly it started to work [1] it starts to work with one ll [2] note that the first line was not converted only the second but when I did the same "ll" again, I got first line correctly converted [3] . And it start working as expect, now in my lab machine I still haven't got a successful request [4], I can't find the trick :) . [4] Could not convert sid S-1-5-21-2685600491-4108878147-961307473-513: NT_STATUS_NONE_MAPPED [2] ll /srv/samba/users/ total 24 drwx------ 2 1000011 domain users 4096 Nov 7 19:21 administrator drwx------ 2 use domain users 4096 Nov 11 12:12 use drwx------ 3 use2 domain users 4096 Nov 7 18:28 use2 drwx------ 2 use3 domain users 4096 Nov 8 12:32 use3 drwx------ 2 usee domain users 4096 Nov 7 15:17 usee [3] ll /srv/samba/users/ total 24 drwx------ 2 administrator domain users 4096 Nov 7 19:21 administrator drwx------ 2 use domain users 4096 Nov 11 12:12 use drwx------ 3 use2 domain users 4096 Nov 7 18:28 use2 drwx------ 2 use3 domain users 4096 Nov 8 12:32 use3 drwx------ 2 usee domain users 4096 Nov 7 15:17 usee [1] [2019/12/05 03:41:14.726754, 5] ../../source3/winbindd/winbindd_getgrgid.c:121(winbindd_getgrgid_recv) Could not convert sid S-0-0: NT_STATUS_INVALID_SID [2019/12/05 03:41:14.728266, 6] ../../source3/winbindd/winbindd.c:969(winbind_client_request_read) closing socket 23, client exited [2019/12/05 03:41:20.020502, 6] ../../source3/winbindd/winbindd.c:920(new_connection) accepted socket 23 [2019/12/05 03:41:20.020798, 3] ../../source3/winbindd/winbindd_misc.c:432(winbindd_interface_version) winbindd_interface_version: [nss_winbind (9484)]: request interface version (version = 31) [2019/12/05 03:41:20.021194, 3] ../../source3/winbindd/winbindd_getpwuid.c:52(winbindd_getpwuid_send) winbindd_getpwuid_send: [nss_winbind (9484)] getpwuid 1000011 [2019/12/05 03:41:20.057413, 5] ../../source3/winbindd/winbindd_getpwuid.c:116(winbindd_getpwuid_recv) Could not convert sid S-1-5-21-2685600491-4108878147-961307473-500: NT_STATUS_NO_SUCH_USER [2019/12/05 03:41:20.058286, 3] ../../source3/winbindd/winbindd_getgrgid.c:55(winbindd_getgrgid_send) winbindd_getgrgid_send: [nss_winbind (9484)] getgrgid 1000000 [2019/12/05 03:41:20.084188, 3] ../../source3/winbindd/winbindd_getpwuid.c:52(winbindd_getpwuid_send) winbindd_getpwuid_send: [nss_winbind (9484)] getpwuid 1000012 [2019/12/05 03:41:20.090949, 3] ../../source3/winbindd/winbindd_getpwuid.c:52(winbindd_getpwuid_send) winbindd_getpwuid_send: [nss_winbind (9484)] getpwuid 1000001 [2019/12/05 03:41:20.100765, 3] ../../source3/winbindd/winbindd_getpwuid.c:52(winbindd_getpwuid_send) winbindd_getpwuid_send: [nss_winbind (9484)] getpwuid 1000016 [2019/12/05 03:41:20.116817, 3] ../../source3/winbindd/winbindd_getpwuid.c:52(winbindd_getpwuid_send) winbindd_getpwuid_send: [nss_winbind (9484)] getpwuid 1000017 [2019/12/05 03:41:20.129758, 3] ../../source3/winbindd/winbindd_getpwuid.c:52(winbindd_getpwuid_send) winbindd_getpwuid_send: [nss_winbind (9484)] getpwuid 1000004> > Rowland > > >-- S?rgio M. B.
Sérgio Basto
2019-Dec-05 06:16 UTC
[Samba] security = ads parameter not working in samba 4.10.10
On Thu, 2019-12-05 at 04:57 +0000, S?rgio Basto via samba wrote:> On Fri, 2019-11-29 at 18:33 +0000, Rowland penny via samba wrote: > > On 29/11/2019 18:17, S?rgio Basto via samba wrote: > > > On Fri, 2019-11-29 at 17:19 +0000, Rowland penny via samba wrote: > > > > Lets start by removing this: krb5-server-1.15.1- > > > > 37.el7_7.2.x86_64 > > > ATM I can't, it will remove all samba packages :) > > > > Then your packages are depending on the krb5-server package, which > > is > > MIT, which is experimental. This shouldn't be a problem on a Unix > > domain > > member, but there is absolutely no need for it. > > > > Are absolutely wedded to red-hat, it is so much easier with Debian > > based > > distros ;-) > > OK , removed krb5-server packages , I did a lot of things ( I can > detail later) , and suddenly it started to work [1] it starts to work > with one ll [2] note that the first line was not converted only the > second but when I did the same "ll" again, I got first line correctly > converted [3] . > And it start working as expect,Sorry , I spoke too soon getent passwd "a new user to this server" doesn't work . But wbinfo -u or wbinfo -g always worked perfectly in any case , why getent don't ?> now in my lab machine I still haven't > got a successful request [4], I can't find the trick :) . > > > [4] > Could not convert sid S-1-5-21-2685600491-4108878147-961307473-513: > NT_STATUS_NONE_MAPPED > > > > [2] > ll /srv/samba/users/ > total 24 > drwx------ 2 1000011 domain users 4096 Nov 7 19:21 > administrator > drwx------ 2 use domain users 4096 Nov 11 12:12 use > drwx------ 3 use2 domain users 4096 Nov 7 18:28 use2 > drwx------ 2 use3 domain users 4096 Nov 8 12:32 use3 > drwx------ 2 usee domain users 4096 Nov 7 15:17 usee > > > [3] > ll /srv/samba/users/ > total 24 > drwx------ 2 administrator domain users 4096 Nov 7 19:21 > administrator > drwx------ 2 use domain users 4096 Nov 11 12:12 use > drwx------ 3 use2 domain users 4096 Nov 7 18:28 use2 > drwx------ 2 use3 domain users 4096 Nov 8 12:32 use3 > drwx------ 2 usee domain users 4096 Nov 7 15:17 usee > > > [1] > [2019/12/05 03:41:14.726754, 5] > ../../source3/winbindd/winbindd_getgrgid.c:121(winbindd_getgrgid_recv > ) > Could not convert sid S-0-0: NT_STATUS_INVALID_SID > [2019/12/05 03:41:14.728266, 6] > ../../source3/winbindd/winbindd.c:969(winbind_client_request_read) > closing socket 23, client exited > [2019/12/05 03:41:20.020502, 6] > ../../source3/winbindd/winbindd.c:920(new_connection) > accepted socket 23 > [2019/12/05 03:41:20.020798, 3] > ../../source3/winbindd/winbindd_misc.c:432(winbindd_interface_version > ) > winbindd_interface_version: [nss_winbind (9484)]: request interface > version (version = 31) > [2019/12/05 03:41:20.021194, 3] > ../../source3/winbindd/winbindd_getpwuid.c:52(winbindd_getpwuid_send) > winbindd_getpwuid_send: [nss_winbind (9484)] getpwuid 1000011 > [2019/12/05 03:41:20.057413, 5] > ../../source3/winbindd/winbindd_getpwuid.c:116(winbindd_getpwuid_recv > ) > Could not convert sid S-1-5-21-2685600491-4108878147-961307473-500: > NT_STATUS_NO_SUCH_USER > [2019/12/05 03:41:20.058286, 3] > ../../source3/winbindd/winbindd_getgrgid.c:55(winbindd_getgrgid_send) > winbindd_getgrgid_send: [nss_winbind (9484)] getgrgid 1000000 > [2019/12/05 03:41:20.084188, 3] > ../../source3/winbindd/winbindd_getpwuid.c:52(winbindd_getpwuid_send) > winbindd_getpwuid_send: [nss_winbind (9484)] getpwuid 1000012 > [2019/12/05 03:41:20.090949, 3] > ../../source3/winbindd/winbindd_getpwuid.c:52(winbindd_getpwuid_send) > winbindd_getpwuid_send: [nss_winbind (9484)] getpwuid 1000001 > [2019/12/05 03:41:20.100765, 3] > ../../source3/winbindd/winbindd_getpwuid.c:52(winbindd_getpwuid_send) > winbindd_getpwuid_send: [nss_winbind (9484)] getpwuid 1000016 > [2019/12/05 03:41:20.116817, 3] > ../../source3/winbindd/winbindd_getpwuid.c:52(winbindd_getpwuid_send) > winbindd_getpwuid_send: [nss_winbind (9484)] getpwuid 1000017 > [2019/12/05 03:41:20.129758, 3] > ../../source3/winbindd/winbindd_getpwuid.c:52(winbindd_getpwuid_send) > winbindd_getpwuid_send: [nss_winbind (9484)] getpwuid 1000004 > > > Rowland > > > > > > > -- > S?rgio M. B. > >-- S?rgio M. B.
Reasonably Related Threads
- security = ads parameter not working in samba 4.10.10
- security = ads, backend = ad parameter not working in samba 4.10.10
- security = ads, backend = ad parameter not working in samba 4.10.10
- security = ads parameter not working in samba 4.9.5
- security = ads, backend = ad parameter not working in samba 4.10.10