similar to: win bind extremely slow after Upgrade to 4.2

Ok, next test. Change : kerberos method = secrets and keytab to kerberos method = secrets and wait again. I'll explain by giving this link. http://changelogs.ubuntu.com/changelogs/pool/main/s/samba/samba_4.3.6+dfsg-1ubuntu1/changelog Look at the last line bugfix in this change log of 4.3.6. Im testing here also, because this looks like its also involves the kerberos changes, now, i

On 11/03/16 09:40, Oliver Werner wrote: > Haha, really? :D > > It should be possible without reboot not? > > OLIVER WERNER > System-Administrator > > > > > > Yes, remove the kdc lines :-D Rowland

Any errors atm in syslog and/or messages and the samba logs.   And the interval of the problem, still 5 days?       Gr.   Louis       Van: Oliver Werner [mailto:oliver.werner at kontrast.de] Verzonden: dinsdag 22 maart 2016 11:00 Aan: L.P.H. van Belle CC: samba at lists.samba.org Onderwerp: Re: [Samba] Problem with Winbind and Windows Clients   Hi,   now i have tested again

Hi, i have a permanent problem with my samba members. there lost after some times his connections to DCs and i need to restart winbind. Also same problem with winds client that running 24x7. After few days i can not logged in. i think thats a problem with kerberos tickets. i have checks samba logs and found that samba member and windows client ask for new tickets and get new expiration. in my

Hi, since today some users can not login to my member fileserver. in logs i got this error: [2016/10/10 11:31:28.920022, 10, pid=3809, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_sam.c:75(auth_samstrict_auth) Check auth for: [oliver.werner] [2016/10/10 11:31:28.920051, 6, pid=3809, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_sam.c:88(auth_samstrict_auth)

Ah..   So every 5 days this happens, correct ? Solution, reboot your pc every 4.99999999 days.    This way its gets a new ticket and isnt the old reused.   As it stats on the site,. " tickets can be renewed for a maximum of 5 days from the date of original issue."     Greetz,   Louis       > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces

On Fri, 30 Sep 2016 12:24:25 +0200 Oliver Werner via samba <samba at lists.samba.org> wrote: > Hi Louis, > > i have checked my /var/tmp > > But there is nothing like host_ or other for kerberos inside. > > ls -lisa /var/tmp/ > 2 4 drwxrwxrwt 3 root root 4096 Sep 25 08:39 . > 2 4 drwxr-xr-x 13 root root 4096 Jun 20 2013 .. > 11 16 drwx------ 2 root

Hi Rowland, Also change on DCs to [libdefaults] default_realm = HQ.KONTRAST dns_lookup_realm = false dns_lookup_kdc = true ? I was used wiki article and there was listed for DC. the config i have post was only für vl0227 (my Master DC) all other Maschines have the config you prefer. OLIVER WERNER System-Administrator Kontrast Communication Services GmbH Grafenberger Allee 100,

Hi Peter, do you have setup on DC or Member? Thanks OLIVER WERNER Systemadministrator Kontrast Communication Services GmbH Grafenberger Allee 100, 40237 Düsseldorf, Germany Fon +49-211-91505-500 Fax +49-211-91505-530 www.kontrast.de <http://www.kontrast.de/> Amtsgericht Düsseldorf: HRB 26934 Geschäftsführer: Joachim Fischer, Anja Grote-Lutter, Leontine van der Vlist

Hi Jermey, I have checked now (when member look work fine) so i get this informations: klist -k /etc/krb5.keytab Keytab name: FILE:/etc/krb5.keytab KVNO Principal ---- -------------------------------------------------------------------------- 1 host/pl0024.hq.kontrast at HQ.KONTRAST 1 host/pl0024.hq.kontrast at HQ.KONTRAST 1 host/pl0024.hq.kontrast at HQ.KONTRAST 1

I have Samba 4.2 on Redhat 7. "wbinfo -u" and "wbinfo -g" commands give no output and no error. I can authenticate using "wbinfo -a username". Anyone knows what could be the problem? Thanks.

i have now try some other options: - Fresh install of Samba AD Member - rejoin Member - change from winbindd to winbind But nothing helps. Also really slow time ls -lisa /daten/samba/ insgesamt 48 8222 4 drwxrwxrwx 8 postmaster.postmaster kontrast_ws_quack_fischer 4096 Mai 3 15:52 . 2 4 drwxr-xr-x 12 root root 4096 Jan 25 15:30 .. 145 12

ok.. and you did also a .. chmod -R 2770 /path/to/dir The folder you are share-ing also needs 2770 >-----Oorspronkelijk bericht----- >Van: Oliver Werner [mailto:oliver.werner at kontrast.de] >Verzonden: donderdag 19 februari 2015 13:45 >Aan: L.P.H. van Belle >CC: samba at lists.samba.org >Onderwerp: Re: [Samba] Excel and Samba Problem > >I have try it but does not

Hai, sorry about the delay.. i had to do some work here.. in my global settings in smb.conf ## Acl-EA settings ea support = yes store dos attributes = yes map archive = no map hidden = no map system = no map readonly = no inherit permissions = yes inherit acls = yes map acl inherit = yes acl group control = yes

hi, now after 10 hours my samba has the next crash and need to restart winbind. Here are the list/kinit: # before kinit pl0024:~# klist klist: Credentials cache file '/tmp/krb5cc_0' not found pl0024:~# kinit Administrator Password for Administrator at HQ.KONTRAST: pl0024:~# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: Administrator at HQ.KONTRAST Valid starting

If everything fails try this. Is working form e even on a windows 8.1X64 client full patched in a samba 3.6 domain and Samba 4. Ans I run it on a ext3 glusterd replicating share without any issue First set the sticky bit for your group on that share [share] path= /yourpath posix locking =NO <--I need that for my gluster not shure you will readonly=no valid users = @yourusersgroup

look at this thread. http://userssuck.com/2007/03/13/samba-file-permission-issue-with-microsoft-office/ try adding : posix locking = no >-----Oorspronkelijk bericht----- >Van: belle at bazuin.nl [mailto:samba-bounces at lists.samba.org] >Namens L.P.H. van Belle >Verzonden: donderdag 19 februari 2015 16:53 >Aan: samba at lists.samba.org >Onderwerp: Re: [Samba] Excel and

hey, now after observe last changes on the weekend… i have also the issue. After 10 hours i can’t connect to the shares on my member server. On Log of DC i found this: [2016/10/02 20:35:45.601265, 3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: AS-REQ PL0024$@HQ.KONTRAST from ipv4:<member-ip>:55578 for krbtgt/HQ.KONTRAST at HQ.KONTRAST [2016/10/02

Did you try fort he share: oplocks = no level2 oplocks = no EDV Daniel M?ller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 T?bingen Tel.: 07071/206-463, Fax: 07071/206-499 eMail: mueller at tropenklinik.de Internet: www.tropenklinik.de -----Urspr?ngliche Nachricht----- Von: Oliver Werner [mailto:oliver.werner at kontrast.de] Gesendet: Freitag, 20. Februar

On Fri, 30 Sep 2016 14:31:06 +0200 Oliver Werner <oliver.werner at kontrast.de> wrote: > Hi rowland, > > is pam really need? > > Users should not login via terminal to this system. this is only as > Samba File-Server > Lets put it this way, to connect to the domain member your users must be known to the underlying OS. The domain member I am typing this on, uses a