search for: hostname01

Also, I see the following repeated in syslog:- ==> syslog <== Aug 21 15:25:41 hostname01 winbindd[691]: [2017/08/21 15:25:41.438959, 0] ../source3/libsmb/cliconnect.c:1895(cli_session_setup_spnego_send) Aug 21 15:25:41 hostname01 winbindd[691]: Kinit for HOSTNAME01$@DOMAIN.LOCAL to access cifs/LOCAL_AD02.domain.local at DOMAIN.LOCAL failed: Cannot contact any KDC for requested realm...

...iously I am slightly sanitising the output here, but I'm >> preserving the case, and just replacing local names with generic ones >> as I did for the config. > > Not a problem with doing that ;-) > >> # more /etc/hosts >> 127.0.0.1 localhost >> 127.0.1.1 hostname01 > > OK, does this computer get its ip via dhcp ? > if it does, just remove the '127.0.1.1' line. > If it doesn't, remove the '127.0.1.1' line and add a line: > Yes, it is an lxc container, so currently it does get it's IP from DHCP... none of that config was...

OK, obviously I am slightly sanitising the output here, but I'm preserving the case, and just replacing local names with generic ones as I did for the config. # more /etc/hostname hostname01 # more /etc/hosts 127.0.0.1 localhost 127.0.1.1 hostname01 # The following lines are desirable for IPv6 capable hosts ::1 ip6-localhost ip6-loopback fe00::0 ip6-localnet ff00::0 ip6-mcastprefix ff02::1 ip6-allnodes ff02::2 ip6-allrouters # more /etc/resolv.conf search domain.local namese...

...slightly sanitising the output here, but I'm >> preserving the case, and just replacing local names with generic >> ones as I did for the config. >> >> Not a problem with doing that ;-) >> >> # more /etc/hosts >> 127.0.0.1 localhost >> 127.0.1.1 hostname01 >> >> OK, does this computer get its ip via dhcp ? >> if it does, just remove the '127.0.1.1' line. >> If it doesn't, remove the '127.0.1.1' line and add a line: >> >> Yes, it is an lxc container, so currently it does get it's IP from &g...

...name) { #Class:: sudo # # package { "sudo": ensure => present, } file { "/etc/sudoers": owner => root, group => root, mode => 440, source => "puppet:///modules/sudo/sudoers.$name", } } # Class:: sudo Hiera FIle for node : hostname01.yaml ============= --- config: - XXXX server: - hostname01p node_classes: - sudo(''webapp'') I get this error message when trying to apply on node: puppet agent -tv --noop err: Could not retrieve catalog from remote server: Error 400 on SERVER: Invalid tag "sudo(''...

...with winbind? >> >> Ahh, upgrading to 4.6.5 did not change my problem >> significantly, but it DID change the error message >> significantly... this might give some much better information >> to someone who knows how the code works! >> >> Aug 22 11:59:01 hostname01 winbindd[451]: [2017/08/22 >> 11:59:01.055174, 0] >> ../source3/libads/sasl.c:786(ads_sasl_spnego_bind) >> Aug 22 11:59:01 hostname01 winbindd[451]: kinit succeeded >> but ads_sasl_spnego_gensec_bind(KRB5) failed for >> ldap/local_ad01.domain.local with user[HOSTNAME01...

Hi! Indeed!, this sounds like good advice... there are certainly bugs, I had to get the 7.04.5 package from "proposed" to get resolve a PAM library issue!... although I suppose that's a packaging problem. What is the best way to get an updated Samba package here, I'm trying to make this system reproduceable, I have a single script that builds the entire container, and sets up

Hi folks, Host - Debian Etch Workstation Guest01 - mail server for routing Guest02 - mail server, hostname01. localIP01, domain01 Guest03 - mail server, hostname02, localIP02, domain02 Guest04 - mail server, hostname03, localIP02, domain03 etc. all mail servers running postfix as MTA on Debian Etch. single (one) external IP with all ports forwarded to Guest01 except port 53 which is forwarded to the DNS...

Hi all, I've just been following a series of guides to set up "winbind" authentication on a container build I'm working on, but I'm seeing some strange behaviour.... After the "net ads join -k", some users can log in, but others cannot (pam says their account does not exist)... although they can all authenticate with kinit! If someone has an idea why this might