search for: pl0024

Hi Jermey, I have checked now (when member look work fine) so i get this informations: klist -k /etc/krb5.keytab Keytab name: FILE:/etc/krb5.keytab KVNO Principal ---- -------------------------------------------------------------------------- 1 host/pl0024.hq.kontrast at HQ.KONTRAST 1 host/pl0024.hq.kontrast at HQ.KONTRAST 1 host/pl0024.hq.kontrast at HQ.KONTRAST 1 host/pl0024.hq.kontrast at HQ.KONTRAST 1 host/pl0024.hq.kontrast at HQ.KONTRAST 1 host/pl0024 at HQ.KONTRAST 1 host/pl0024 at HQ.KONTRAST 1 host/pl0024 at HQ.KONTRAST...

...nherit acls = true' 'dos filemode = true' and 'force unknown acl user = true' for service IPC$ [2016/09/22 08:58:56.928361, 3] ../source3/smbd/service.c:907(make_connection_snum) 192.168.111.159 (ipv4:192.168.111.159:45070) connect to service IPC$ initially as user HQKONTRAST\pl0024$ (uid=3000085, gid=3000015) (pid 3755) [2016/09/22 17:21:05.879733, 3] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_NETWORK_SESSION_EXPIRED] || at ../source3/smbd/smb2_server.c:2415 [2016/09/22 17:2...

hi, now after 10 hours my samba has the next crash and need to restart winbind. Here are the list/kinit: # before kinit pl0024:~# klist klist: Credentials cache file '/tmp/krb5cc_0' not found pl0024:~# kinit Administrator Password for Administrator at HQ.KONTRAST: pl0024:~# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: Administrator at HQ.KONTRAST Valid starting Expires Service princ...

hey, now after observe last changes on the weekend… i have also the issue. After 10 hours i can’t connect to the shares on my member server. On Log of DC i found this: [2016/10/02 20:35:45.601265, 3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: AS-REQ PL0024$@HQ.KONTRAST from ipv4:<member-ip>:55578 for krbtgt/HQ.KONTRAST at HQ.KONTRAST [2016/10/02 20:35:45.605069, 3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: No preauth found, returning PREAUTH-REQUIRED -- PL0024$@HQ.KONTRAST [2016/10/02 20:35:45.605960,...

...r <oliver.werner at kontrast.de <mailto:oliver.werner at kontrast.de>> wrote: > >> hi, >> >> now after 10 hours my samba has the next crash and need to restart >> winbind. >> >> Here are the list/kinit: >> >> # before kinit >> pl0024:~# klist >> klist: Credentials cache file '/tmp/krb5cc_0' not found >> pl0024:~# kinit Administrator >> Password for Administrator at HQ.KONTRAST: >> pl0024:~# klist >> Ticket cache: FILE:/tmp/krb5cc_0 >> Default principal: Administrator at HQ.KONTRAST &g...

...the issue. >> >> After 10 hours i can’t connect to the shares on my member server. >> >> On Log of DC i found this: >> >> [2016/10/02 20:35:45.601265, >> 3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) >> Kerberos: AS-REQ PL0024$@HQ.KONTRAST from ipv4:<member-ip>:55578 for >> krbtgt/HQ.KONTRAST at HQ.KONTRAST [2016/10/02 20:35:45.605069, >> 3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) >> Kerberos: No preauth found, returning PREAUTH-REQUIRED -- >> PL0024$@HQ.KONTR...

...ges on the weekend… i have also the issue. > > After 10 hours i can’t connect to the shares on my member server. > > On Log of DC i found this: > > [2016/10/02 20:35:45.601265, > 3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) > Kerberos: AS-REQ PL0024$@HQ.KONTRAST from ipv4:<member-ip>:55578 for > krbtgt/HQ.KONTRAST at HQ.KONTRAST [2016/10/02 20:35:45.605069, > 3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) > Kerberos: No preauth found, returning PREAUTH-REQUIRED -- > PL0024$@HQ.KONTRAST [2016/10/02...

...ect to the shares on my member server. >>>> >>>> On Log of DC i found this: >>>> >>>> [2016/10/02 20:35:45.601265, >>>> 3] >> ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) >>>> Kerberos: AS-REQ PL0024$@HQ.KONTRAST from ipv4:<member-ip>:55578 for >>>> krbtgt/HQ.KONTRAST at HQ.KONTRAST [2016/10/02 20:35:45.605069, >>>> 3] >> ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) >>>> Kerberos: No preauth found, returning PREAUTH-REQU...

On Fri, 30 Sep 2016 14:31:06 +0200 Oliver Werner <oliver.werner at kontrast.de> wrote: > Hi rowland, > > is pam really need? > > Users should not login via terminal to this system. this is only as > Samba File-Server > Lets put it this way, to connect to the domain member your users must be known to the underlying OS. The domain member I am typing this on, uses a

...o:oliver.werner at kontrast.de>>> wrote: >> >>> hi, >>> >>> now after 10 hours my samba has the next crash and need to restart >>> winbind. >>> >>> Here are the list/kinit: >>> >>> # before kinit >>> pl0024:~# klist >>> klist: Credentials cache file '/tmp/krb5cc_0' not found >>> pl0024:~# kinit Administrator >>> Password for Administrator at HQ.KONTRAST: >>> pl0024:~# klist >>> Ticket cache: FILE:/tmp/krb5cc_0 >>> Default principal: Adminis...

...gt; hi, > >>>> > >>>> now after 10 hours my samba has the next crash and need to restart > >>>> winbind. > >>>> > >>>> Here are the list/kinit: > >>>> > >>>> # before kinit > >>>> pl0024:~# klist > >>>> klist: Credentials cache file '/tmp/krb5cc_0' not found > >>>> pl0024:~# kinit Administrator > >>>> Password for Administrator at HQ.KONTRAST: > >>>> pl0024:~# klist > >>>> Ticket cache: FILE:/tmp/krb...

...rner at kontrast.de<mailto:oliver.werner at kontrast.de> <mailto:oliver.werner at kontrast.de <mailto:oliver.werner at kontrast.de>>>>> wrote: hi, now after 10 hours my samba has the next crash and need to restart winbind. Here are the list/kinit: # before kinit pl0024:~# klist klist: Credentials cache file '/tmp/krb5cc_0' not found pl0024:~# kinit Administrator Password for Administrator at HQ.KONTRAST <mailto:Administrator at HQ.KONTRAST>: pl0024:~# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: Administrator at HQ.KONTRAST <mailto:A...

...;> >>>>>> now after 10 hours my samba has the next crash and need to restart >>>>>> winbind. >>>>>> >>>>>> Here are the list/kinit: >>>>>> >>>>>> # before kinit >>>>>> pl0024:~# klist >>>>>> klist: Credentials cache file '/tmp/krb5cc_0' not found >>>>>> pl0024:~# kinit Administrator >>>>>> Password for Administrator at HQ.KONTRAST <mailto:Administrator at HQ.KONTRAST>: >>>>>> pl0024:~#...

....werner at kontrast.de <mailto:oliver.werner at kontrast.de>>>>> wrote: > > > > > > > > hi, > > now after 10 hours my samba has the next crash and need to restart > winbind. > > Here are the list/kinit: > > # before kinit > pl0024:~# klist > klist: Credentials cache file '/tmp/krb5cc_0' not found > pl0024:~# kinit Administrator > Password for Administrator at HQ.KONTRAST <mailto:Administrator at HQ.KONTRAST>: > pl0024:~# klist > Ticket cache: FILE:/tmp/krb5cc_0 > Default principal: Administrat...

...minutes and directory listing need 2-5 minutes. wbinfo -u takes around 20 seconds and will not return output wbinfo -g takes 3 seconds and show my groups id user.name takes 20 seconds and shows information of the user and its groups smb.conf for samba member: [global] netbios name = PL0024 security = ADS workgroup = HQKONTRAST realm = hq.kontrast log file = /var/log/samba/%m.log log level = 1 dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab winbind refresh tickets = yes winbind trusted doma...

On Fri, 30 Sep 2016 12:24:25 +0200 Oliver Werner via samba <samba at lists.samba.org> wrote: > Hi Louis, > > i have checked my /var/tmp > > But there is nothing like host_ or other for kerberos inside. > > ls -lisa /var/tmp/ > 2 4 drwxrwxrwt 3 root root 4096 Sep 25 08:39 . > 2 4 drwxr-xr-x 13 root root 4096 Jun 20 2013 .. > 11 16 drwx------ 2 root

...>> >> [netlogon] >> path = /var/lib/samba/sysvol/hq.kontrast/scripts >> read only = No >> >> [sysvol] >> path = /var/lib/samba/sysvol >> read only = No >> >> member smb.conf: >> >> [global] >> netbios name = PL0024 >> security = ADS >> workgroup = HQKONTRAST >> realm = HQ.KONTRAST >> >> log file = /var/log/samba/%m.log >> log level = 3 passdb:5 auth:10 winbind:10 >> >> dedicated keytab file = /etc/krb5.keytab >>...

...wbinfo -u takes around 20 seconds and will not return output > > wbinfo -g takes 3 seconds and show my groups > > id user.name takes 20 seconds and shows information of the user and its groups > > > smb.conf for samba member: > > [global] > netbios name = PL0024 > security = ADS > workgroup = HQKONTRAST > realm = hq.kontrast > > log file = /var/log/samba/%m.log > log level = 1 > > dedicated keytab file = /etc/krb5.keytab > kerberos method = secrets and keytab > winbind...