search for: netlogon_creds_c

Hello, Below you will find a snippet from the output of running an offline backup. I'm specifically concerned with "Failed to open /usr/local/samba/private/netlogon_creds_cli.tdb". is this an issue or can it be safely ignored? I ask because the offline process appears to otherwise run without issue. Server is Ubuntu 22.04 with Samba 4.19.2 built from source. Starting transaction on solo db: /usr/local/samba/private/hklm.ldb running tdbbackup on the same...

Hai,   For the people using my modified backup script.  Found here: https://github.com/thctlo/samba4/tree/master/backup-script    I've updated it, due to bug https://bugzilla.samba.org/show_bug.cgi?id=13088   netlogon_creds_cli.tdb will be excluded from the backup. Due to this the script exits and does not backup anything since netlogon_creds_cli.tdb is the first it wanted to backup. ( in my case ).   Keep_days is working now also. Tip here is, set you DAYS high, i've set a default of 60 days now and if KEEP_DAYS=...

...g tdbbackup on the same file Starting transaction on solo db: /var/lib/samba/private/DC=DOMAINDNSZONES,DC=AIXTEMA,DC=DE.ldb running tdbbackup on the same file running tdbbackup on lone tdb file /var/lib/samba/private/schannel_store.tdb running tdbbackup on lone tdb file /var/lib/samba/private/netlogon_creds_cli.tdb tdb_mutex_open_ok[/var/lib/samba/private/netlogon_creds_cli.tdb]: Can use mutexes only with MUTEX_LOCKING or NOLOCK Failed to open /var/lib/samba/private/netlogon_creds_cli.tdb Starting transaction on solo db: /var/lib/samba/private/privilege.ldb running tdbbackup on the same file Starti...

...backup without re-joining. Ideally, the backed up version does not depend on the tdb because of concerns about the stability of the format. A backup set must remain usable despite a multi-major version Samba update happening in between. By trial and error I determined that /var/lib/samba/private/{netlogon_creds_cli,secrets}.tdb are the only files from whose removal smbd can’t recover, so those are the files I’m currently concerned with. Another issue is that dumping those files with the tdb tools yields opaque binary data, e. g. # tdbdump private/netlogon_creds_cli.tdb { key(43) =...

...ist? Is locking.tdb a clustered database? > Do you have "clustering = yes" in smb.conf on all the nodes? > > Amitay. Hi Amitay, Here you go: Server 1: # ctdb getdbmap Number of databases:20 dbid:0x4d2a432b name:g_lock.tdb path:/var/lib/ctdb/g_lock.tdb.1 dbid:0x2d608c16 name:netlogon_creds_cli.tdb path:/var/lib/ctdb/netlogon_creds_cli.tdb.1 READONLY dbid:0x9ec2a880 name:serverid.tdb path:/var/lib/ctdb/serverid.tdb.1 dbid:0x6afb8c09 name:dbwrap_watchers.tdb path:/var/lib/ctdb/dbwrap_watchers.tdb.1 dbid:0x521b7544 name:smbXsrv_version_global.tdb path:/var/lib/ctdb/smbXsrv_version_glob...

...4802f8fb43 in fault_report (sig=11) at ../lib/util/fault.c:83 #5 0x00007f4802f8fb58 in sig_fault (sig=11) at ../lib/util/fault.c:94 #6 <signal handler called> #7 0x00007f48048bf4d0 in ?? () #8 0x00007f47fd128699 in dbwrap_parse_record (db=0x7f48048bf4b0, key=..., parser=0x7f47fd549b8d <netlogon_creds_cli_fetch_parser>, private_data=0x7fff0ba1c770) at ../lib/dbwrap/dbwrap.c:387 #9 0x00007f47fd54a5d6 in netlogon_creds_cli_lock_fetch (req=0x7f48048df320) at ../libcli/auth/netlogon_creds_cli.c:849 #10 0x00007f47fd54a3d2 in netlogon_creds_cli_lock_send (mem_ctx=0x7f48048cbe30, ev=0x7f48048c49a0, c...

...pdate happening in between. I understand your concern, but on the flip side we have actually been pretty conservative on that.  Of course the way to assure that into the future is to add tests using current and past databases. > By trial and error I determined that > /var/lib/samba/private/{netlogon_creds_cli,secrets}.tdb are the > only files from whose removal smbd can’t recover, so those are > the files I’m currently concerned with. It should be only secrets.tdb.  The netlogon_creds_cli.tdb can be re- built from the domain member password. A long time ago I posted a script to dump the machin...

...ould be inside the “window of opportunity” when the current password is still valid. Besides, knowing our customers I expect a significant number of users to disable password rotation for machine accounts in the GPO … > > By trial and error I determined that > > /var/lib/samba/private/{netlogon_creds_cli,secrets}.tdb are the > > only files from whose removal smbd can’t recover, so those are > > the files I’m currently concerned with. > > It should be only secrets.tdb.  The netlogon_creds_cli.tdb can be re- > built from the domain member password. You’re right, I just ran th...

Hi list We recently upgraded our fileservers from Centos supplied 4.2.10 to Sernet 4.4.6, and then our DCs from 3.6.x to 4.4.6. It seems that since then we've had problems with locks not being obeyed on all nodes - they only seem to work when a second client opens a file on the same node as the first client. For example, when a user opens an Excel file I will see something like this

...quot;: [{"value": "offline"}]}]}}}} running tdbbackup on lone tdb file /usr/local/samba/private/schannel_store.tdb Starting transaction on solo db: /usr/local/samba/private/hklm.ldb running tdbbackup on the same file running tdbbackup on lone tdb file /usr/local/samba/private/netlogon_creds_cli.tdb tdb_mutex_open_ok[/usr/local/samba/private/netlogon_creds_cli.tdb]: Can use mutexes only with MUTEX_LOCKING or NOLOCK Failed to open /usr/local/samba/private/netlogon_creds_cli.tdb Starting transaction on solo db: /usr/local/samba/private/share.ldb running tdbbackup on the same file Starti...

...r/run/samba/g_lock.tdb 3:<none> Locking key 434C495B43412D45444D Allocated locked data 0x0x7f025e855a70 Unlocking key 434C495B43412D45444D release lock order 2 for /var/run/samba/g_lock.tdb lock order: 1:<none> 2:<none> 3:<none> check lock order 2 for /var/lib/samba/private/netlogon_creds_cli.tdb lock order: 1:<none> 2:/var/lib/samba/private/netlogon_creds_cli.tdb 3:<none> Locking key 434C495B43412D45444D Allocated locked data 0x0x7f025e855b80 Unlocking key 434C495B43412D45444D release lock order 2 for /var/lib/samba/private/netlogon_creds_cli.tdb lock order: 1:<none&...

No ideas on this? Anybody? --Mark -----Original Message----- Date: Tue, 29 May 2018 09:27:36 -0400 Organization: Ohio Highway Patrol Retirement System To: samba at lists.samba.org Subject: [Samba] Why am I getting login failures for domain members? Every so often I get a message in /var/log/samba/log.samba as follows: 2018/05/26 13:44:25.172415, 2] authentication for user [HPRS/LABRAT$] FAILED

..., ahead of these two message are the following: Jun 4 18:43:08 ccarter winbindd[1359]: [2018/06/04 18:43:08.051810, 0] ../source3/libsmb/trusts_util.c:272(trust_pw_change) Jun 4 18:43:08 ccarter winbindd[1359]: 2018/06/04 18:43:08 : trust_pw_change(HPRS): Verified old password remotely using netlogon_creds_cli:CLI[CCARTER/CCARTER$]/SRV[MAIL/HPRS] Jun 4 18:43:08 ccarter winbindd[1359]: [2018/06/04 18:43:08.064049, 0] ../source3/libsmb/trusts_util.c:314(trust_pw_change) Jun 4 18:43:08 ccarter winbindd[1359]: 2018/06/04 18:43:08 : trust_pw_change(HPRS): Changed password locally Jun 4 18:43:08 cca...

...pect a significant > number of users to disable password rotation for machine accounts > in the GPO … Samba doesn't honour that (yet).  It is controlled in the smb.conf. > > > > > > > > By trial and error I determined that > > > /var/lib/samba/private/{netlogon_creds_cli,secrets}.tdb are the > > > only files from whose removal smbd can’t recover, so those are > > > the files I’m currently concerned with. > > It should be only secrets.tdb.  The netlogon_creds_cli.tdb can be > > re- > > built from the domain member password. >...

...e looking similar to it. Here's the complete directory: /var/lib/samba/private# ll total 4644 drwxr-xr-x 4 root root 4096 Sep 7 14:38 ./ drwxr-xr-x 7 root root 4096 Sep 7 14:38 ../ drwx------ 2 root root 4096 Sep 7 14:39 msg.sock/ -rw------- 1 root root 24576 Sep 7 14:38 netlogon_creds_cli.tdb -rw------- 1 root root 421888 Sep 7 13:09 passdb.tdb -rw------- 1 root root 696 Jan 19 2016 randseed.tdb -rw-r--r-- 1 root root 1286144 Sep 7 14:29 sam.ldbobjectClass=* -rw------- 1 root root 1286144 Sep 7 14:38 secrets.ldb -rw------- 1 root root 430080 Sep 4 10:06 secrets.tdb...

...s such as smbprofile.tdb. I can see gencache.tdb is not needed - I have to delete it regularly as it keeps growing. There was a thread in the mailing lists https://lists.samba.org/archive/samba/2018-September/218367.html and this seems to suggest you need nothing except /var/lib/samba/private/{netlogon_creds_cli,secrets}.tdb or, perhaps, just /var/lib/samba/private/secrets.tdb. Is that correct? Is anything needed from /var/lib/samba/lock/. I don't use printing, but is it an idea to backup everything under /var/lib/samba/drivers and /var/lib/samba/DriverStore? If there is a definitive document, I...

I guess I should also do a backup of netlogon_creds_cli.tdb. Is this enough or is there's something else recommended to avoid some bad corner cases? -----Message d'origine----- De : samba <samba-bounces at lists.samba.org> De la part de Vincent DROUIN via samba Envoy? : vendredi 26 janvier 2024 18:38 ? : samba at lists.samba.org Objet :...

Btw, before it looked like this: # ll total 7148 drwxr-xr-x 2 root root 4096 Sep 7 14:36 ./ drwxr-xr-x 7 root root 4096 Sep 7 14:38 ../ -rw-r--r-- 1 root root 1286144 Sep 7 14:34 DC=NLI,DC=LOCAL.ldb -rw------- 1 root root 24576 Sep 7 13:11 netlogon_creds_cli.tdb -rw------- 1 root root 421888 Sep 7 13:09 passdb.tdb -rw------- 1 root root 696 Jan 19 2016 randseed.tdb -rw-r--r-- 1 root root 1286144 Sep 7 13:08 sam.ldb -rw-r--r-- 1 root root 1286144 Sep 7 14:29 sam.ldbobjectClass=* -rw------- 1 root root 1286144 Sep 7 10:50 secrets.ldb -rw-----...

...in the /var/lib/samba directory. [root at dc02 ~]# cd /var/lib/samba/ [root at dc02 samba]# find . -name "*.tdb" ./share_info.tdb ./private/randseed.tdb ./private/sam.ldb.d/metadata.tdb ./private/dns/sam.ldb.d/metadata.tdb ./private/secrets.tdb ./private/smbd.tmp/msg/names.tdb ./private/netlogon_creds_cli.tdb ./private/schannel_store.tdb ./registry.tdb ./winbindd_cache.tdb ./account_policy.tdb The script will include these in the backup without doing a tdbback which I would not have thought was safe? Should these files be excluded or have a tdbbackup done like the ldb files, or am I totally mi...

...e "private dir" onto MooseFS, as instructed in the CTDB docs. So, in that case, I'm assuming from your comments that it is no worry that the mmap test does not pass on the MooseFS mounts? The "private dir" contains these files: -rw-------+ 1 root root 24576 Jun 23 19:48 netlogon_creds_cli.tdb -rw-------+ 1 root root 421888 Jun 23 19:48 passdb.tdb -rw-------+ 1 root root 430080 Jun 23 19:47 secrets.tdb drwxr-xr-x+ 3 root root 1001200 Jun 23 19:48 smbd.tmp It just strikes me as odd that "use mmap = no" causes such a slowdown in the the case I only have these files on my...