search for: hq

Hi Jermey, I have checked now (when member look work fine) so i get this informations: klist -k /etc/krb5.keytab Keytab name: FILE:/etc/krb5.keytab KVNO Principal ---- -------------------------------------------------------------------------- 1 host/pl0024.hq.kontrast at HQ.KONTRAST 1 host/pl0024.hq.kontrast at HQ.KONTRAST 1 host/pl0024.hq.kontrast at HQ.KONTRAST 1 host/pl0024.hq.kontrast at HQ.KONTRAST 1 host/pl0024.hq.kontrast at HQ.KONTRAST 1 host/pl0024 at HQ.KONTRAST 1 host/pl0024 at HQ.KONTRAST 1 host/pl0024 at HQ.KONTRAST...

...load calendar resources from AD (http://wiki.sogo.nu/ResourceConfiguration). This did not cause me any grief at the time, but the object that is generating the errors is one of the calendar resources that I have created. Below is the output from the attempted domain join # samba-tool domain join hq.domain.com.au DC -Uadministrator --realm=hq.achievecorp.com.au --dns-backend=BIND9_DLZ Finding a writeable DC for domain 'hq.domain.com.au' Found DC zeus.hq.domain.com.au Password for [DOMAIN\administrator]: workgroup is DOMAIN realm is hq.domain.com.au checking sAMAccountName Adding CN=SER...

...ting 'inherit acls = true' 'dos filemode = true' and 'force unknown acl user = true' for service IPC$ [2016/09/22 08:58:56.928361, 3] ../source3/smbd/service.c:907(make_connection_snum) 192.168.111.159 (ipv4:192.168.111.159:45070) connect to service IPC$ initially as user HQKONTRAST\pl0024$ (uid=3000085, gid=3000015) (pid 3755) [2016/09/22 17:21:05.879733, 3] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_NETWORK_SESSION_EXPIRED] || at ../source3/smbd/smb2_server.c:2415 [...

.... I'm not sure why better documentation hasn't been written on the web site for the ADS feature since it's pretty spectacular to be able join a Samba server natively to an AD domain. I have successfully joined the samba server to the win 2k3 domain with this commands: Kinit adminName@HQ.NAVIS.NET Net ads join "HQ Servers" This seems to work just fine but when I run "wbinfo -t" I get: checking the trust secret via RPC calls failed error code was NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND (0xc0000233) Could not check secret I have set the winbind to debug level 10 a...

Hi When i would like to Join a new DC to Domain i got following error: samba-tool domain join hq.kontrast DC -Uadministrator --realm=HQ.KONTRAST --dns-backend=SAMBA_INTERNAL --option="interfaces=lo bond0:37" --option="bind interfaces only=yes" Finding a writeable DC for domain 'hq.kontrast' Found DC vl0227.hq.kontrast Password for [HQKONTRAST\administrator]: workgr...

...ickets. i have checks samba logs and found that samba member and windows client ask for new tickets and get new expiration. in my DCs i have set kdc:service ticket lifetime = 1 kdc:user ticket lifetime = 24 kdc:renewal lifetime = 120 and Master krb5.conf looks [libdefaults] default_realm = HQ.KONTRAST dns_lookup_realm = false dns_lookup_kdc = true ticket_lifetime = 1d renew_lifetime = 5d [realms] HQ.KONTRAST = { kdc = vl0227.hq.kontrast kdc = vl0230.hq.kontrast kdc = pl0231.hq.kontrast master_kdc = vl0227.hq.kontrast admin_server = vl0227.hq.kontras...

...er. The Debian 4 box showed the same problem as the NAS while the Debian 5 box worked as expected. (In both cases the PDC was the newly upgraded box running Samba 3.2.5.) Everything I've tried seems to indicate that things are properly configured--with the exception of "wbinfo --getdcname HQ" which returns "Could not get dc name for HQ" and "wbinfo -a ..." which also fails. Those two things are probably related--but as you can see below all other wbinfo commands work correctly. Is this a known issue that I missed? Any thoughts on where to look further? Thanks...

...mba member and windows client ask for new tickets and get new expiration. > > in my DCs i have set > > kdc:service ticket lifetime = 1 > kdc:user ticket lifetime = 24 > kdc:renewal lifetime = 120 > > and Master krb5.conf looks > > [libdefaults] > default_realm = HQ.KONTRAST > dns_lookup_realm = false > dns_lookup_kdc = true > ticket_lifetime = 1d > renew_lifetime = 5d > > [realms] > HQ.KONTRAST = { > kdc = vl0227.hq.kontrast > kdc = vl0230.hq.kontrast > kdc = pl0231.hq.kontrast > master_kdc...

...now after observe last changes on the weekend… i have also the issue. After 10 hours i can’t connect to the shares on my member server. On Log of DC i found this: [2016/10/02 20:35:45.601265, 3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: AS-REQ PL0024$@HQ.KONTRAST from ipv4:<member-ip>:55578 for krbtgt/HQ.KONTRAST at HQ.KONTRAST [2016/10/02 20:35:45.605069, 3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: No preauth found, returning PREAUTH-REQUIRED -- PL0024$@HQ.KONTRAST [2016/10/02 20:35:45.605960, 3]...

...e. >> >> After 10 hours i can’t connect to the shares on my member server. >> >> On Log of DC i found this: >> >> [2016/10/02 20:35:45.601265, >> 3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) >> Kerberos: AS-REQ PL0024$@HQ.KONTRAST from ipv4:<member-ip>:55578 for >> krbtgt/HQ.KONTRAST at HQ.KONTRAST [2016/10/02 20:35:45.605069, >> 3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) >> Kerberos: No preauth found, returning PREAUTH-REQUIRED -- >> PL0024$@HQ.KONTRAST...

Hello Christian, Ive had a quick look at you output, that looks pretty normal. I'll have a good look Friday, tomorrow day off. So my suggestion is post the output to the list but -d10 is not needed. The regular output should be sufficiant. Im wondering why there is no dc3 in kcc also but why i see over 15 RPC sessions. Maybe normal maybe not, this i dont know. Greetz, Louis >

Hi Oliver , If you config is still the samba as i found in the list. On the member server, in smb.conf Change : realm = hq.kontrast To : realm = HQ.KONTRAST And whats in the krb5.conf of the member server? Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Oliver Werner via > samba > Verzonden: woensdag 28 september 2016 15:54 > Aan:...

...nections for all other DCs. Just not on dc1. [root at dc1 ~]# samba-tool drs showrepl Default-First-Site-Name\DC1 DSA Options: 0x00000001 DSA object GUID: 1781607c-77e8-405d-8c3a-b7e142dd30c4 DSA invocationId: dc096a8a-773d-4a63-8e2a-288ab747557b ==== INBOUND NEIGHBORS ==== DC=DomainDnsZones,DC=hq,DC=brain-biotech,DC=de Default-First-Site-Name\DC2 via RPC DSA object GUID: 27ea875c-f283-4a31-b2ab-70db62cd530d Last attempt @ Wed May 10 19:18:28 2017 CEST was successful 0 consecutive failure(s). Last success @ Wed May 10 19...

...ial DC (lachesis), I get the following from a "samba-tool drs showrepl" Default-First-Site-Name\LACHESIS DSA Options: 0x00000001 DSA object GUID: 89a6915d-6b54-42fb-9bf8-e670ed9f8d08 DSA invocationId: f8725c00-ec68-4fda-86c0-35a7ae76a094 ==== INBOUND NEIGHBORS ==== DC=DomainDnsZones,DC=hq,DC=domain,DC=com,DC=au Default-First-Site-Name\CHIRON via RPC DSA object GUID: ed493864-10ef-41da-9c50-11ffc3fb2763 Last attempt @ Wed Jun 12 06:34:13 2013 EST was successful 0 consecutive failure(s). Last success @ Wed Jun 12 06:34:13 2013 EST DC=ForestDnsZones,DC=hq,DC=domain,DC=com,DC=...

...he weekend… i have also the issue. > > After 10 hours i can’t connect to the shares on my member server. > > On Log of DC i found this: > > [2016/10/02 20:35:45.601265, > 3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) > Kerberos: AS-REQ PL0024$@HQ.KONTRAST from ipv4:<member-ip>:55578 for > krbtgt/HQ.KONTRAST at HQ.KONTRAST [2016/10/02 20:35:45.605069, > 3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) > Kerberos: No preauth found, returning PREAUTH-REQUIRED -- > PL0024$@HQ.KONTRAST [2016/10/02 20:3...

I scripted the creation of snapshots and it works fine. Now I'd like to run the script as non-root. virsh snapshot-create-as --domain hq-live-v01 \      --name snappy \      --diskspec vda,file=/var/lib/libvirt/images/hq-live-v01.snappy,snapshot=external \      --diskspec vdb,file=/var/lib/libvirt/images/hq-live-storage.snappy,snapshot=external \      --disk-only --quiesce --atomic This fragment creates the snapshots, but get creat...

.../source4/smbd/process_single.c:114(single_terminate) single_terminate: reason[ldapsrv_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED] second problem i have add deny rules for fields on user object like personal information, street postalcode… for Domain Users in dc=hq,dc=kontrast on cn=Users,dc=hq,dc=kontrast i have allow a specify user to read and write this fields for user objects. but my DCs don’t sync this changes. first DC where i changed it works correct but on DC1 and DC2 have only sync dc=hq,dc=kontrast third problem is there a default setting for...

...4096 Feb 4 23:42 Share After restarting winbind: 2 4 drwxr-x--- 63 root group_intern 4096 Feb 4 23:42 Share My smb.conf looks like [global] netbios name = MEMBER1 security = ADS workgroup = HQ realm = hq.internal log file = /var/log/samba/%m.log log level = 1 dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab winbind refresh tickets = yes winbind trusted domains only = no winbind use default domain = ye...

...o.apps.zing.vn/upload/original/2010/10/27/17/16/1288174580585732262_574_574.jpg ] [Image: http://img1-photo.apps.zing.vn/upload/original/2010/10/27/17/16/12881745771772615085_574_574.jpg ] Download Hotfile: Code: http://hotfile.com/dl/79810729/50e64d2/Paranormal.Activity.2.2010.Cam.AC3.HQ.Hive-CM8.part1.rar.html http://hotfile.com/dl/79810901/655a093/Paranormal.Activity.2.2010.Cam.AC3.HQ.Hive-CM8.part2.rar.html http://hotfile.com/dl/79811062/0e2dde4/Paranormal.Activity.2.2010.Cam.AC3.HQ.Hive-CM8.part3.rar.html http://hotfile.com/dl/79811187/71a6b18/Paranormal.Activity.2.2010.Cam.AC3...

https://bugs.freedesktop.org/show_bug.cgi?id=94964 Bug ID: 94964 Summary: Tearing with opengl-hq and not with opengl on Gnome with MPV Product: Mesa Version: unspecified Hardware: x86-64 (AMD64) OS: Linux (All) Status: NEW Severity: normal Priority: medium Component: Drivers/DRI/nouveau...