similar to: security = ads parameter not working in samba 4.9.5

Hi Rowland, I get below error while running the script again. bash samba-collect-debug-info.sh > samba-output kinit: Client's credentials have been revoked while getting initial credentials cat samba-output Please wait, collecting debug info. Wrong password or kerberos REALM problems, exiting now. Below is my /etc/krb5.conf [libdefaults] default_realm = EMEA.MEDIA.GLOBAL.LOC

Hi Rowland, The line 60 contains "{" in the script. The exit 1 statement is on line number 58. Am I missing something? Regards Sachin Kumar On Fri, Nov 29, 2019 at 5:21 PM Rowland penny via samba < samba at lists.samba.org> wrote: > On 29/11/2019 11:28, Sac Isilia wrote: > > Hi Rowland, > > > > I get below error while running the script again. > >

On 03/12/2019 09:58, Sac Isilia wrote: > Hi Rowland, > > The dns domain is - emea.media.global.loc? . > OK, it looks like you need a few changes ;-) Remove the '127.0.1.1' line from /etc/hosts Make /etc/resolv.conf look like this: search emea.media.global.loc nameserver `ipaddress of a DC' nameserver `ipaddress of another DC' You might have to stop Network manager

On 10/12/2019 11:10, Sac Isilia wrote: > Hi Rowland, > > Please let me know what else I can try from my?side. We are stuck as > the server cant be joined to domain. > Sorry, I thought you had fixed this :-( You seem to be doing everything correctly, so it should work, but obviously, it isn't for you. Can I suggest you use Louis's repo: http://apt.van-belle.nl/ This will

On 11/12/2019 14:10, Sac Isilia wrote: > Hi Rowland, > > The good news is that server is joined to EMEA-MEDIA domain. But I can > not id my user however SID is returned when I run wbinfo. > > root at esmad1apl01:~# wbinfo -t > checking the trust secret for domain EMEA-MEDIA via RPC calls succeeded > root at esmad1apl01:~# wbinfo -m > BUILTIN > ESMAD1APL01 >

Hai, Please read : https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member And adjust your smb.conf, start with a minimal smb.conf then join and then add optional extra settings. You current config is incomplete. I suggest you carefully read this chapter.: Choose backend for id mapping in winbindd > Host is not configured as a member server. > Invalid configuration.

Hi Belle, Below is the output after I performed the suggested steps. root at esmad1apl01:~# net ads join -U media\\svc_domjoin02 -d6 INFO: Current debug levels: all: 6 tdb: 6 printdrivers: 6 lanman: 6 smb: 6 rpc_parse: 6 rpc_srv: 6 rpc_cli: 6 passdb: 6 sam: 6 auth: 6 winbind: 6 vfs: 6 idmap: 6 quota: 6 acls: 6 locking: 6 msdfs: 6 dmapi: 6 registry: 6

On Tue, 2019-11-26 at 14:26 +0000, S?rgio Basto wrote: > On Tue, 2019-11-26 at 15:07 +0100, L.P.H. van Belle via samba wrote: > > Hai, > > > > Please read : > > https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member > > And adjust your smb.conf, start with a minimal smb.conf then join > > and > > then add optional extra settings. >

I've re-read this thread but its a bit confusing due to 2 persons with the same probem in one thread. Im thinking here, how is samba started, since winbind is not running. Im suspecting samba-addc or samba is starting. Not smbd nmbd winbind. I suggest to run this: Disable that all again. systemctl disable samba-addc samba smbd nmbd winbind systemctl mask samba-addc samba smbd nmbd

On 27/11/2019 11:03, S?rgio Basto via samba wrote: > Sorry I meant man idmap_ad. But checking again man is equal of > https://wiki.samba.org/index.php/Idmap_config_ad in EXAMPLES of man > page [1] > > Examples don't mention netbios name ... I did [2] which instead use > workgroup I used netbios name and it is working but still don't know > why or even if it correct

On Tue, 2019-11-26 at 15:07 +0100, L.P.H. van Belle via samba wrote: > Hai, > > Please read : > https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member > And adjust your smb.conf, start with a minimal smb.conf then join and > then add optional extra settings. BTW , unfortunately I hadn't time to write about but see man idmap.ad , it have the right

Hi Rowland, Exactly. I commented the same line that you mentioned, but the same error persists. Regards Sachin Kumar On Fri, Nov 29, 2019 at 5:43 PM Rowland penny via samba < samba at lists.samba.org> wrote: > On 29/11/2019 11:58, Sac Isilia wrote: > > Hi Rowland, > > > > The line 60 contains "{" in the script. The exit 1 statement is on > > line

Hi Rowland, I have done the edits as you suggested and ran again the script that you provided. Below is the output. Collected config --- 2019-12-04-11:46 ----------- Hostname: esmad1apl01 DNS Domain: emea.media.global.loc FQDN: esmad1apl01.emea.media.global.loc ipaddress: 10.34.54.152 ----------- Kerberos SRV _kerberos._tcp.emea.media.global.loc record verified ok, sample output: ;;

Hi Rowland, Below is the output that is produced. Collected config --- 2019-11-29-15:33 ----------- Hostname: esmad1apl01 DNS Domain: emea.media.global.loc FQDN: esmad1apl01.emea.media.global.loc ipaddress: 10.34.54.152 ----------- Kerberos SRV _kerberos._tcp.emea.media.global.loc record verified ok, sample output: ;; Truncated, retrying in TCP mode. Server: 10.10.136.85 Address:

Hi Team, I need to join the server in AD domain using winbind . Below are the package version for reference. The server runs Debian 10 and the default install of samba is 4.9.5. ii samba 2:4.9.5+dfsg-5+deb10u1 amd64 SMB/CIFS file, print, and login server for Unix ii samba-common 2:4.9.5+dfsg-5+deb10u1 all common

On 15/03/2020 13:51, Sac Isilia wrote: > Hi Rowland, Please do not send posts directly to me, send them to the list. > > I am running RHEL 6.8 and try to join to EMEA-MEDIA domain. Below is > the output of net ads join in the debug mode. It seems that it is not > able to find the DC info however I have updated the DC in resolv.conf > , ntp.conf and krb5.conf as well. I

On 16/03/2020 10:05, Sac Isilia wrote: > Hi Rowland, > > Sorry typo. We are not using sssd. We are using winbind. > Okay, in which case, the join will always fail, your new machine is NOT in the active directory dns domain. You posted in your smb.conf: password server = 10.19.26.136 From your /etc/hosts: 10.19.59.58 emdc1ftpl03.dmz.local? emdc1ftpl03 and 10.19.26.136???

On 16/03/2020 12:23, Sac Isilia wrote: > Hi Rowland, > > I have created the AD object now in DMZ domain only and updated the > realm and workgroup in smb.conf as well. UPdated the resolv.conf as > well and included the DMZ domain DC . But still the machine refuses to > join to domain. > > [root at emdc1ftpl03 ~]# net ads join -U dmz\\rkumar02# -d 7 > >

Hai marcio, As far i can see, most look ok to me. A few very small points. First change this : > cat /etc/hosts > 192.168.1.19 samba4-dc2.empresa.com.br samba4-dc2 > 192.168.1.20 samba4-dc1.empresa.com.br. samba4-dc1 > 10.133.84.135 win-dc2.empresa.com.br. wind-dc2 > > > cat /etc/resolv.conf > domain empresa.com.br > search empresa.com.br >

can you run these commands and tell us the output. ( copy past it. ) SETFQDN=`hostname -f` SETDNSDOMAIN=`hostname -d` SETHOSTNAME=`hostname -s` SETSERVERIP=`hostname -i` echo "==========Test DNS Records ===============================" echo "Testing : dns entries" if [ -z "`host -t SRV _ldap._tcp.${SETDNSDOMAIN}. | grep 'not found'`" ]; then echo