similar to: Issue when adding an user to group

This looks all good to me but the problem lays in the DC winbind code, not the member. You can try to witch back ( temperarly ) to winbind ( on the DC ) As i did, al least you get the correct id's back. ( for now ) For you this the change you need on the DC. server services = -winbindd +winbind Im recompiling the samba 4.3.3 from sid now atm, so ill test them out what happpens.

Ok, im having this : DC's Debian Wheezy 7.9, sernet samba 4.2.8 Member servers. Debian Jessie samba 4.1.17 ( fileserver ) Debian Jessie samba 4.2.7 ( print server ) This one isnt updated yet with latest updates. The following packages have been kept back: samba sernet-samba sernet-samba-client sernet-samba-common sernet-samba-libs sernet-samba-libsmbclient0 sernet-samba-winbind

Hai Oliver,   Yes, thats ook pretty standard. On this questiosn. >thats the only one kerberos cache file in /tmp right now. >looks like kerberos does not renew the ticket :(? Do you have something like :  ( look in /var/tmp )   These are the tickes generated by the server. -rw-------  1 root  root   488 Sep 27 10:05 host_0 -rw-------  1 proxy proxy 9646 Sep 30 09:05 HTTP_13

hi, we have tested last week our problem with change parameter server services = -winbindd +winbind but our member server get also the issue that the winbind lost user and group mapping for valid users. so for the test i have changed on our three DCs the parameter above. May i need to set this parameter on member server also? Oliver > Am 12.02.2016 um 11:30 schrieb L.P.H. van Belle

Hi, i have a permanent problem with my samba members. there lost after some times his connections to DCs and i need to restart winbind. Also same problem with winds client that running 24x7. After few days i can not logged in. i think thats a problem with kerberos tickets. i have checks samba logs and found that samba member and windows client ask for new tickets and get new expiration. in my

Hi Jermey, I have checked now (when member look work fine) so i get this informations: klist -k /etc/krb5.keytab Keytab name: FILE:/etc/krb5.keytab KVNO Principal ---- -------------------------------------------------------------------------- 1 host/pl0024.hq.kontrast at HQ.KONTRAST 1 host/pl0024.hq.kontrast at HQ.KONTRAST 1 host/pl0024.hq.kontrast at HQ.KONTRAST 1

Hello, the last two days i have problems with my AD group which is defined in share setting valid users Winbind looks to lost mapping of this group and so no user can connect to this share anymore. When restart winbind service mapping works again until mapping lost again. ls -lsa shows me in issue this: 2 4 drwxr-x--- 63 root 12001

hey, now after observe last changes on the weekend… i have also the issue. After 10 hours i can’t connect to the shares on my member server. On Log of DC i found this: [2016/10/02 20:35:45.601265, 3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: AS-REQ PL0024$@HQ.KONTRAST from ipv4:<member-ip>:55578 for krbtgt/HQ.KONTRAST at HQ.KONTRAST [2016/10/02

Hi, After some hours (maybe 8-12h) i can’t connect to my Samba Member (SMB://). After restarting winbind works fine again. We using 4.5.0 right now. I hope the following informations will be enough at this moment In samba log on DC i got the following Error: [2016/09/22 08:58:56.925190, 3] ../source3/smbd/vfs.c:139(vfs_init_custom) Initialising custom vfs hooks from [dfs_samba4]

so i add the pam yesterday and now after 10 hours no connection to member is possible. :( Same errors in logs i send yesterday OLIVER WERNER Systemadministrator > Am 03.10.2016 um 18:54 schrieb Rowland Penny via samba <samba at lists.samba.org>: > > On Mon, 3 Oct 2016 17:56:07 +0200 > Oliver Werner <oliver.werner at kontrast.de <mailto:oliver.werner at

yeah > /var/lib/samba/sysvol/hq.kontrast/scripts was i typo hq.internal was correct. uidNumber and gidNumber is set for our own users and group, but not Administrator or Administrators. Today it was an issue again on a member so i test command wbinfo --group-info=group_intern and got the error failed to call wbcGetgrnam: WBC_ERR_DOMAIN_NOT_FOUND Could not get info for group

hi, now after 10 hours my samba has the next crash and need to restart winbind. Here are the list/kinit: # before kinit pl0024:~# klist klist: Credentials cache file '/tmp/krb5cc_0' not found pl0024:~# kinit Administrator Password for Administrator at HQ.KONTRAST: pl0024:~# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: Administrator at HQ.KONTRAST Valid starting

Hi Oliver , If you config is still the samba as i found in the list. On the member server, in smb.conf Change : realm = hq.kontrast To : realm = HQ.KONTRAST And whats in the krb5.conf of the member server? Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Oliver Werner via > samba > Verzonden: woensdag 28

Yes the file /etc/krb5.keytab is exists. You mean this lines? dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab winbind refresh tickets = yes there was edits when i join the system. OLIVER WERNER Systemadministrator > Am 23.09.2016 um 08:55 schrieb Rowland Penny via samba <samba at lists.samba.org>: > > On Fri, 23 Sep 2016

my os is debian 8.3 win bind and samba are in version 4.1.17 > Am 12.02.2016 um 08:58 schrieb L.P.H. van Belle <belle at bazuin.nl>: > > Ok, same problem as im having.. > > What is your os running? > > >> -----Oorspronkelijk bericht----- >> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Oliver Werner >> Verzonden: vrijdag 12 februari

On Tue, Mar 27, 2018 at 9:15 AM, Rowland Penny <rpenny at samba.org> wrote: > On Tue, 27 Mar 2018 08:46:00 -0600 > Jeff Sadowski via samba <samba at lists.samba.org> wrote: > >> My smb.conf looks like so. >> >> [global] >> security = ads >> realm = MIND.UNM.EDU >> workgroup = MIND >> idmap config * : backend = tdb >>

On 29.05.2017 12:03, Rowland Penny via samba wrote: > On Mon, 29 May 2017 11:33:21 +0200 > aluno3--- via samba <samba at lists.samba.org> wrote: > >> My configuration for idmap backend is: >> >> idmap config dev2 : range = 65536-19999999 >> idmap config dev2 : backend = rid >> idmap config * : range = 20000000-39999999 >> idmap config * : backend

Ok, next test. Change : kerberos method = secrets and keytab to kerberos method = secrets and wait again. I'll explain by giving this link. http://changelogs.ubuntu.com/changelogs/pool/main/s/samba/samba_4.3.6+dfsg-1ubuntu1/changelog Look at the last line bugfix in this change log of 4.3.6. Im testing here also, because this looks like its also involves the kerberos changes, now, i

Hello community, i have added a new Domain Controller. But when i add it, no dns records will be created. No A-Record, no CNAME-Record and also the _ldap._tcp.dc._msdcs.hq.kontrast record for the new DC is missing. This article i have checked and fix the A-records https://wiki.samba.org/index.php/Verifying_and_Creating_a_DC_DNS_Record

Hi, we have upgrade an Samba Member (DCs already upgraded) from Samba 4.1.17 to Samba 4.2.10. On DCs work fine after install winbind. But our member extremely slow. Connect to the Share takes 2-3 minutes and directory listing need 2-5 minutes. wbinfo -u takes around 20 seconds and will not return output wbinfo -g takes 3 seconds and show my groups id user.name takes 20 seconds and shows