search for: kontrast

Hi Jermey, I have checked now (when member look work fine) so i get this informations: klist -k /etc/krb5.keytab Keytab name: FILE:/etc/krb5.keytab KVNO Principal ---- -------------------------------------------------------------------------- 1 host/pl0024.hq.kontrast at HQ.KONTRAST 1 host/pl0024.hq.kontrast at HQ.KONTRAST 1 host/pl0024.hq.kontrast at HQ.KONTRAST 1 host/pl0024.hq.kontrast at HQ.KONTRAST 1 host/pl0024.hq.kontrast at HQ.KONTRAST 1 host/pl0024 at HQ.KONTRAST 1 host/pl0024 at HQ.KONTRAST 1 host/pl0024 at HQ.KONTRAST 1 host/pl...

...ets. i have checks samba logs and found that samba member and windows client ask for new tickets and get new expiration. in my DCs i have set kdc:service ticket lifetime = 1 kdc:user ticket lifetime = 24 kdc:renewal lifetime = 120 and Master krb5.conf looks [libdefaults] default_realm = HQ.KONTRAST dns_lookup_realm = false dns_lookup_kdc = true ticket_lifetime = 1d renew_lifetime = 5d [realms] HQ.KONTRAST = { kdc = vl0227.hq.kontrast kdc = vl0230.hq.kontrast kdc = pl0231.hq.kontrast master_kdc = vl0227.hq.kontrast admin_server = vl0227.hq.kontrast } [...

Hi Oliver , If you config is still the samba as i found in the list. On the member server, in smb.conf Change : realm = hq.kontrast To : realm = HQ.KONTRAST And whats in the krb5.conf of the member server? Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Oliver Werner via > samba > Verzonden: woensdag 28 september 2016 15:54 > Aan: Oliver We...

Hi When i would like to Join a new DC to Domain i got following error: samba-tool domain join hq.kontrast DC -Uadministrator --realm=HQ.KONTRAST --dns-backend=SAMBA_INTERNAL --option="interfaces=lo bond0:37" --option="bind interfaces only=yes" Finding a writeable DC for domain 'hq.kontrast' Found DC vl0227.hq.kontrast Password for [HQKONTRAST\administrator]: workgroup is HQ...

...ng 'inherit acls = true' 'dos filemode = true' and 'force unknown acl user = true' for service IPC$ [2016/09/22 08:58:56.928361, 3] ../source3/smbd/service.c:907(make_connection_snum) 192.168.111.159 (ipv4:192.168.111.159:45070) connect to service IPC$ initially as user HQKONTRAST\pl0024$ (uid=3000085, gid=3000015) (pid 3755) [2016/09/22 17:21:05.879733, 3] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_NETWORK_SESSION_EXPIRED] || at ../source3/smbd/smb2_server.c:2415 [2016/09/...

...is is )   You can try recreating you keytab file and set “may delicate kerberos” on the computer account first. And see what happens.   I’ll have a good look at you logs bit later, people here need help..      Greetz,   Llouis         Van: Oliver Werner [mailto:oliver.werner at kontrast.de] Verzonden: vrijdag 30 september 2016 9:03 Aan: Oliver Werner CC: L.P.H. van Belle; samba at lists.samba.org Onderwerp: Re: [Samba] Samba Member NT_STATUS_NETWORK_SESSION_EXPIRED   hi,   now i have changes the realm from hq.kontrast to HQ.KONTRAST   Restart samba and winbind on all DC...

...tab winbind refresh tickets = yes there was edits when i join the system. OLIVER WERNER Systemadministrator > Am 23.09.2016 um 08:55 schrieb Rowland Penny via samba <samba at lists.samba.org>: > > On Fri, 23 Sep 2016 07:25:40 +0200 > Oliver Werner <oliver.werner at kontrast.de <mailto:oliver.werner at kontrast.de>> wrote: > >> hi, >> >> now after 10 hours my samba has the next crash and need to restart >> winbind. >> >> Here are the list/kinit: >> >> # before kinit >> pl0024:~# klist >> klist:...

...ow after observe last changes on the weekend… i have also the issue. After 10 hours i can’t connect to the shares on my member server. On Log of DC i found this: [2016/10/02 20:35:45.601265, 3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: AS-REQ PL0024$@HQ.KONTRAST from ipv4:<member-ip>:55578 for krbtgt/HQ.KONTRAST at HQ.KONTRAST [2016/10/02 20:35:45.605069, 3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: No preauth found, returning PREAUTH-REQUIRED -- PL0024$@HQ.KONTRAST [2016/10/02 20:35:45.605960, 3] ../source...

Hi Louis, Thanks for your feedback. My krb.conf looks like: [libdefaults] default_realm = HQ.KONTRAST dns_lookup_realm = false dns_lookup_kdc = true So i change now in smb.conf in UPPER Case and will check this. Thx OLIVER WERNER Systemadministrator > Am 28.09.2016 um 16:05 schrieb L.P.H. van Belle via samba <samba at lists.samba.org>: > > Hi Oliver , > > If you c...

...; On Linux AD member i need to restart win bind again and again for working > samba shares. > On Windows clients i need to restart machine completely > > so now i don?t have any idea > > kind regards > > OLIVER WERNER > System-Administrator > > > > > Kontrast Communication Services GmbH > Grafenberger Allee 100, 40237 Düsseldorf, Germany > > Fon +49-211-91505-500 > Fax +49-211-91505-530 > www.kontrast.de <http://www.kontrast.de/> > > Amtsgericht Düsseldorf: HRB 26934 > Geschäftsführer: Joachim Fischer, Anja Grote-Lutter,...

...member and windows client ask for new tickets and get new expiration. > > in my DCs i have set > > kdc:service ticket lifetime = 1 > kdc:user ticket lifetime = 24 > kdc:renewal lifetime = 120 > > and Master krb5.conf looks > > [libdefaults] > default_realm = HQ.KONTRAST > dns_lookup_realm = false > dns_lookup_kdc = true > ticket_lifetime = 1d > renew_lifetime = 5d > > [realms] > HQ.KONTRAST = { > kdc = vl0227.hq.kontrast > kdc = vl0230.hq.kontrast > kdc = pl0231.hq.kontrast > master_kdc = vl0227....

...what happens. > > > > I’ll have a good look at you logs bit later, people here need help.. > > > > > > Greetz, > > > > Llouis > > > > > > > > > > > Van: Oliver Werner [mailto:oliver.werner at kontrast.de] > Verzonden: vrijdag 30 september 2016 9:03 > Aan: Oliver Werner > CC: L.P.H. van Belle; samba at lists.samba.org > Onderwerp: Re: [Samba] Samba Member NT_STATUS_NETWORK_SESSION_EXPIRED > > > > > hi, > > > > > now i have changes the realm fro...

Any errors atm in syslog and/or messages and the samba logs.   And the interval of the problem, still 5 days?       Gr.   Louis       Van: Oliver Werner [mailto:oliver.werner at kontrast.de] Verzonden: dinsdag 22 maart 2016 11:00 Aan: L.P.H. van Belle CC: samba at lists.samba.org Onderwerp: Re: [Samba] Problem with Winbind and Windows Clients   Hi,   now i have tested again with libdefaults and same problems again? :(   So maybe we can found next tests with this informati...

...ours no connection to member is possible. :( Same errors in logs i send yesterday OLIVER WERNER Systemadministrator > Am 03.10.2016 um 18:54 schrieb Rowland Penny via samba <samba at lists.samba.org>: > > On Mon, 3 Oct 2016 17:56:07 +0200 > Oliver Werner <oliver.werner at kontrast.de <mailto:oliver.werner at kontrast.de>> wrote: > >> hey, >> >> now after observe last changes on the weekend… i have also the issue. >> >> After 10 hours i can’t connect to the shares on my member server. >> >> On Log of DC i found this: &...

hi, now after 10 hours my samba has the next crash and need to restart winbind. Here are the list/kinit: # before kinit pl0024:~# klist klist: Credentials cache file '/tmp/krb5cc_0' not found pl0024:~# kinit Administrator Password for Administrator at HQ.KONTRAST: pl0024:~# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: Administrator at HQ.KONTRAST Valid starting Expires Service principal 23.09.2016 07:21:04 23.09.2016 17:21:04 krbtgt/HQ.KONTRAST at HQ.KONTRAST renew until 24.09.2016 07:20:56 thats the only one kerberos ca...

On 11/03/16 09:40, Oliver Werner wrote: > Haha, really? :D > > It should be possible without reboot not? > > OLIVER WERNER > System-Administrator > > > > > > Yes, remove the kdc lines :-D Rowland

...nd windows client > ask for new tickets and get new expiration. > > in my DCs i have set > > kdc:service ticket lifetime = 1 > kdc:user ticket lifetime = 24 > kdc:renewal lifetime = 120 > > and Master krb5.conf looks > > [libdefaults] > default_realm = HQ.KONTRAST > dns_lookup_realm = false > dns_lookup_kdc = true > ticket_lifetime = 1d > renew_lifetime = 5d > > [realms] > HQ.KONTRAST = { > kdc = vl0227.hq.kontrast > kdc = vl0230.hq.kontrast > kdc = pl0231.hq.kontrast > master_kdc = vl0227.hq.k...

...wbinfo -u takes around 20 seconds and will not return output wbinfo -g takes 3 seconds and show my groups id user.name takes 20 seconds and shows information of the user and its groups smb.conf for samba member: [global] netbios name = PL0024 security = ADS workgroup = HQKONTRAST realm = hq.kontrast log file = /var/log/samba/%m.log log level = 1 dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab winbind refresh tickets = yes winbind trusted domains only = no winbind use default domain = ye...

On Mon, 3 Oct 2016 17:56:07 +0200 Oliver Werner <oliver.werner at kontrast.de> wrote: > hey, > > now after observe last changes on the weekend… i have also the issue. > > After 10 hours i can’t connect to the shares on my member server. > > On Log of DC i found this: > > [2016/10/02 20:35:45.601265, > 3] ../source4/auth/kerberos/krb5_...

...t;> OLIVER WERNER >> Systemadministrator >> >> >> >>> Am 03.10.2016 um 18:54 schrieb Rowland Penny via samba >> <samba at lists.samba.org>: >>> >>> On Mon, 3 Oct 2016 17:56:07 +0200 >>> Oliver Werner <oliver.werner at kontrast.de >> <mailto:oliver.werner at kontrast.de <mailto:oliver.werner at kontrast.de>>> wrote: >>> >>>> hey, >>>> >>>> now after observe last changes on the weekend… i have also the issue. >>>> >>>> After 10 hou...