similar to: Winbind Craziness

On Fri, 27 Jul 2018 21:25:04 +0000 (UTC) ray klassen via samba <samba at lists.samba.org> wrote: > so I had some time to follow this bunny trailand found that even > though all the other servers had no problems this one continued > to.Every so often a new computer couldn't connect and then it would > be all better after a net leave/net join. Net join would not work >

Failed to find cifs/madmain at LAND.SUPERORG.COM(kvno 5) in keytab MEMORY:cifs_srv_keytab (arcfour-hmac-md5)] so far nothing works forever. the above error happens when the pc's are unable to connect to shares net leave/join fixes the problem temporarily. seems to relate to [Samba] Failed to find cifs/foo.bar in keytab MEMORY:cifs_srv_keytab (arcfour-hmac-md5)] On Monday, 30

so I had some time to follow this bunny trailand found that even though all the other servers had no problems this one continued to.Every so often a new computer couldn't connect and then it would be all better after a net leave/net join. Net join would not work without -S <MyDC> in the command lineWhat I found out was that most net rpc commands such as net rpc testjoin would also fail

Hai, In addition to Rowlands question. Can you run this script and post it to the list also. It gives a complete overview of what your running. Its basicly what Rowland asked, but with a few extra things. https://raw.githubusercontent.com/thctlo/samba4/master/samba-collect-debug-info.sh And the output of: kinit Administrator klist klist -ket /var/lib/samba/private/secrets.keytab

oops that was wbinfo -tP On Monday, 30 July 2018, 09:15:44 GMT-7, ray klassen <julius_ahenobarbus at yahoo.co.uk> wrote: thanks for your response. Obviously lmhosts is not part of the equation anymore. But I copied/pasted from something that worked to something that didn't( I thought of clarifying this in a following email but didn't) If there is no /etc/lmhosts I'm

thanks for your response. Obviously lmhosts is not part of the equation anymore. But I copied/pasted from something that worked to something that didn't( I thought of clarifying this in a following email but didn't) If there is no /etc/lmhosts I'm sure nothing will suffer for having that parameter. DNS has been examined and re-examined. All the tests described in the wiki have been

so I'm going to ramble a bit because I need help desperately and I'm slogging away on my own, but something I say might give someone an idea. This whole thing seem to revolve around kerberos kvno's and machine password changes. couple of days after violently recreating the server people start to not be able to connect. today's debugging turned up a mismatch between the kvno

Thanks in advance. here's the total firehose drink. I've obscured host, domain, subnet. Hope that will still work for you. Don't want all the info publicized. klist -ket /var/lib/samba/private/secrets.keytab!! there is no /var/lib/samba/private/secrets.keytab klist -ket /etc/krb5.keytab KVNO Timestamp           Principal ---- -------------------

I have some hardware running CentOS 7 and Sernet Samba 4.7 that started out as a member server that I would like to make into a 2nd DC. However I am having trouble converting it because it seems I am not removing all the remnants of the client setup. What I thought I would have to do is this: 1.) net ads leave -U administrator 2.) Remove the machine entry on the 1st DC 3.) mv /var/lib/samba

Hi Denis, thanks a lot! > you said that the zone is empty. It is not a problem per se but for some > time Bind-DLZ has been a bit more strict and ask for a NS record for > every zone. So you just have to create a NS field in your zone pointing > to one of your DC and you should be fine. Internal DNS does not have > this requirements. > > samba-tool dns mydc

Hi everyone following https://wiki.archlinux.org/index.php/Samba/Active_Directory_domain_controller#DHCP_with_dynamic_DNS_updates, on my samba dc i have installed the dhcp package and the samba-dhcpd-updateAUR package there are two unresolved errors that i cannot fix 1 -: Can't create new lease file: Permission denied 2 -: kinit for dynamic DNS failed can anyone offer any suggestions. #

Daniel R. Meigs wrote: > Thanks for your reply. The problem was having the computers in ou=Computers. > I put them in ou=People and the problem was solved. > > --Dan > Daniel: I deleted the following options from the smb.conf #ldap user suffix = ou=People #ldap machine suffix = ou=Computers But I left the options set in my smbldap.conf.

I have a problem that is now becoming very annoying. Namely I have a Centos 7 member server running Sernet Samba 4.7.4 for which everything seems to work except gdm or ftp logins. On the linux client it seems winbindd is set up correctly. For example (the data shown below has been sanitized): > getent passwd testuser2:*:3001108:3000513::/home/testuser1:/bin/bash

Back on February 28, 2018, I started a thread "User permissions of profile/home directory lost" describing a problem occurring with my wife's user account. Since that time the random problem has persisted so I turned on some debugging. I have been able to determine that somehow her account idmap is broken. Here is the entry for my wife's SID as found in the idmap.ldb file

Hi, I have to add a second DC to a Zone. I use the sernet packages Version 4.11 on a debian 10 host. The bind refuses to start: root at addc-zone02:~# systemctl status bind9 ? bind9.service - BIND Domain Name Server Loaded: loaded (/lib/systemd/system/bind9.service; enabled; vendor preset: enabled) Active: failed (Result: exit-code) since Thu 2020-04-30 14:51:58 EEST; 5s ago Docs:

Hello, I would like to upload windows printer driver to my Samba through the printer "Advanced tab" as described in that doc http://www.samba.org/samba/docs/man/Samba-Guide/happy.html#id2582657 but this tab is totally grayed. I can imagine it's a permission issue but I'm not sure at all. Any idea, Frederic

Hi, i have setup an ad dc with samba 4.8, and then rigorously followed wiki tutorial at : https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs However, when following the last part (File System ACLs in the Back End), I don't get the expected results : [root at mydc ~]# getfattr -d /srv/samba/Demo/ doesn't yield anything and getfacl /srv/samba/Demo/ getfacl : suppression

We defined a share, sales_cifs_test, on our NetApp server. Note that the length of the name is longer than 13 characters. We can see the share with Microsoft Explorer. We can mount the share from Linux using smbmount. What we want to do is to get a list of shares from NetApp. The tools that can do this are the samba programs smbclient and net. Smbclient will not show names longer than 13

Hi All, I am having an issue with Samba joining an active directory domain. When I run 'net ads join -S mydomaincontrollerFQDN -U adminuser command I get this error: Failed to join domain: failed to lookup DC info for domain 'MYDOMAIN.COM' over rpc: Logon failure The credentials we entered are for sure correct but if we see our domain controller it count it

Hi, We have a Linux (RHEL 3.0, update 3) Samba 3 server which worked fine for months but suddently have trouble to keep its trust with the DC server. The only way to recover is to reset the machine account from the Windows DC side and do a "net join" to the domain from the Linux side. The Linux machine is able to keep its "trust" with the domain exactly 7 days, which,