similar to: DC Join Error

i have now try some other options: - Fresh install of Samba AD Member - rejoin Member - change from winbindd to winbind But nothing helps. Also really slow time ls -lisa /daten/samba/ insgesamt 48 8222 4 drwxrwxrwx 8 postmaster.postmaster kontrast_ws_quack_fischer 4096 Mai 3 15:52 . 2 4 drwxr-xr-x 12 root root 4096 Jan 25 15:30 .. 145 12

the interface part is ok. eth0 has another IP as eth0:35 DCs show me the profiles unix authentication register user session in the systemd…. inheritable capabilities management OLIVER WERNER Systemadministrator Kontrast Communication Services GmbH Grafenberger Allee 100, 40237 Düsseldorf, Germany Fon +49-211-91505-500 Fax +49-211-91505-530 www.kontrast.de

Ok, now my smb.con on DCs looks [global] workgroup = HQKONTRAST realm = HQ.KONTRAST netbios name = VL0227 server role = active directory domain controller idmap_ldb:use rfc2307 = yes interfaces = eth0:35 bind interfaces only=yes log level = 3 tls enabled = yes tls keyfile = /var/lib/samba/private/tls/key.pem tls certfile = /var/lib/samba/private/tls/cert.pem

Hi, i have a permanent problem with my samba members. there lost after some times his connections to DCs and i need to restart winbind. Also same problem with winds client that running 24x7. After few days i can not logged in. i think thats a problem with kerberos tickets. i have checks samba logs and found that samba member and windows client ask for new tickets and get new expiration. in my

Please Post your member smb.conf. But probely your missing. winbind refresh tickets = yes and/or dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Oliver Werner > Verzonden: vrijdag 11 maart 2016 8:55 > Aan: samba at

Any errors atm in syslog and/or messages and the samba logs.   And the interval of the problem, still 5 days?       Gr.   Louis       Van: Oliver Werner [mailto:oliver.werner at kontrast.de] Verzonden: dinsdag 22 maart 2016 11:00 Aan: L.P.H. van Belle CC: samba at lists.samba.org Onderwerp: Re: [Samba] Problem with Winbind and Windows Clients   Hi,   now i have tested again

Ok, next test. Change : kerberos method = secrets and keytab to kerberos method = secrets and wait again. I'll explain by giving this link. http://changelogs.ubuntu.com/changelogs/pool/main/s/samba/samba_4.3.6+dfsg-1ubuntu1/changelog Look at the last line bugfix in this change log of 4.3.6. Im testing here also, because this looks like its also involves the kerberos changes, now, i

Hi, we have upgrade an Samba Member (DCs already upgraded) from Samba 4.1.17 to Samba 4.2.10. On DCs work fine after install winbind. But our member extremely slow. Connect to the Share takes 2-3 minutes and directory listing need 2-5 minutes. wbinfo -u takes around 20 seconds and will not return output wbinfo -g takes 3 seconds and show my groups id user.name takes 20 seconds and shows

Hi, since today some users can not login to my member fileserver. in logs i got this error: [2016/10/10 11:31:28.920022, 10, pid=3809, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_sam.c:75(auth_samstrict_auth) Check auth for: [oliver.werner] [2016/10/10 11:31:28.920051, 6, pid=3809, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_sam.c:88(auth_samstrict_auth)

hi, now after 10 hours my samba has the next crash and need to restart winbind. Here are the list/kinit: # before kinit pl0024:~# klist klist: Credentials cache file '/tmp/krb5cc_0' not found pl0024:~# kinit Administrator Password for Administrator at HQ.KONTRAST: pl0024:~# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: Administrator at HQ.KONTRAST Valid starting

Haha, really? :D It should be possible without reboot not? OLIVER WERNER System-Administrator Kontrast Communication Services GmbH Grafenberger Allee 100, 40237 Düsseldorf, Germany Fon +49-211-91505-500 Fax +49-211-91505-530 www.kontrast.de <http://www.kontrast.de/> Amtsgericht Düsseldorf: HRB 26934 Geschäftsführer: Joachim Fischer, Anja Grote-Lutter, Leontine van der Vlist

Hi Rowland, Also change on DCs to [libdefaults] default_realm = HQ.KONTRAST dns_lookup_realm = false dns_lookup_kdc = true ? I was used wiki article and there was listed for DC. the config i have post was only für vl0227 (my Master DC) all other Maschines have the config you prefer. OLIVER WERNER System-Administrator Kontrast Communication Services GmbH Grafenberger Allee 100,

Yes, thats possible also, but i dont know if thats possible with the KDC settings from samba. I dont use them, If you want, you can set things like in GPO, but normaly not needed imo.   So i suggest, remove the KDC settings, restart the DC?s, reboot the computer and wait what happpens.   Maybe Rowland or an other samba Dev can tell more about the KDC setting, but i can, just dont know,

On 11/03/16 07:54, Oliver Werner wrote: > Hi, > > i have a permanent problem with my samba members. there lost after some times his connections to DCs and i need to restart winbind. > > Also same problem with winds client that running 24x7. After few days i can not logged in. > > i think thats a problem with kerberos tickets. > > i have checks samba logs and found that

On Mon, 3 Oct 2016 17:56:07 +0200 Oliver Werner <oliver.werner at kontrast.de> wrote: > hey, > > now after observe last changes on the weekend… i have also the issue. > > After 10 hours i can’t connect to the shares on my member server. > > On Log of DC i found this: > > [2016/10/02 20:35:45.601265, > 3]

OMG Louis thats look really good!!! After going to Samba 4.4.5 i do not had that issue since last 20 hours :o i will check it next hours (i hope days :D) OLIVER WERNER Systemadministrator > Am 04.10.2016 um 09:21 schrieb L.P.H. van Belle <belle at bazuin.nl>: > > Samba 4.5.0 ... go back to 4.4.5/4.4.6 > > Check the bug list, 4.5.0 has lots of bugs.. > > Greetz.

so i add the pam yesterday and now after 10 hours no connection to member is possible. :( Same errors in logs i send yesterday OLIVER WERNER Systemadministrator > Am 03.10.2016 um 18:54 schrieb Rowland Penny via samba <samba at lists.samba.org>: > > On Mon, 3 Oct 2016 17:56:07 +0200 > Oliver Werner <oliver.werner at kontrast.de <mailto:oliver.werner at

hey, now after observe last changes on the weekend… i have also the issue. After 10 hours i can’t connect to the shares on my member server. On Log of DC i found this: [2016/10/02 20:35:45.601265, 3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: AS-REQ PL0024$@HQ.KONTRAST from ipv4:<member-ip>:55578 for krbtgt/HQ.KONTRAST at HQ.KONTRAST [2016/10/02

Hi, After some hours (maybe 8-12h) i can’t connect to my Samba Member (SMB://). After restarting winbind works fine again. We using 4.5.0 right now. I hope the following informations will be enough at this moment In samba log on DC i got the following Error: [2016/09/22 08:58:56.925190, 3] ../source3/smbd/vfs.c:139(vfs_init_custom) Initialising custom vfs hooks from [dfs_samba4]

Ah..   So every 5 days this happens, correct ? Solution, reboot your pc every 4.99999999 days.    This way its gets a new ticket and isnt the old reused.   As it stats on the site,. " tickets can be renewed for a maximum of 5 days from the date of original issue."     Greetz,   Louis       > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces