[Samba] Classicupgrade loses shares ?

Rowland Penny rowlandpenny at googlemail.com
Mon Feb 24 10:05:42 MST 2014


On 24/02/14 15:45, Koenraad Lelong wrote:
> op 24-02-14 14:39, Denis Cardon schreef:
>> Hi Koenraad,
>>
>>> I'm trying to do a classicupgrade of my old samba3-server (using tdb).
>>> The upgrade tool seems to run fine, I see no errors. But the resulting
>>> smb.conf does not contain shares. The original had several. Is this
>>> expected ? Or is this implying some error somewhere.
>>
>> yes it is expected, I don't remember ever having classicupgrade creating
>> anything other than the NETLOGON and SYSVOL shares. It is not so hard to
>> just copy back the few lines, and moreover the best practices advise to
>> separate the file server and DC.
>
> Now I only have one file-server/pdc, but since virtual linux-machines 
> are cheap I will do this for the new infrastructure.
> I tried with adding some shares, but that did not help.
>
>>
>>> Testing gives :
>>> smbclient -L localhost -U%
>>> session setup failed : NT_STATUS_INVALID_NETWORK_RESPONSE
>>
>> could you check with kinit, wbinfo and netstat that everything is
>> runnign properly?
>
> DNS-test from the Samba_AD_DC_HOWTO-wiki page worked fine.
> kinit ... is OK :
> klist
> Ticket cache: FILE:/tmp/krb5cc_0
> Default principal: admikoen at AD01.ACE-ELECTRONICS.BE
>
> Valid starting     Expires            Service principal
> 24-02-14 16:12:37  25-02-14 02:12:37 
> krbtgt/AD01.ACE-ELECTRONICS.BE at AD01.ACE-ELECTRONICS.BE
>         renew until 25-02-14 16:12:34
>
> wbinfo for -u and -g gives the expected results.
> wbinfo -p is OK
> wbinfo --own-domain : ACE_DOMAIN
> wbinfo -P :
> checking the NETLOGON dc connection to "" failed
> failed to call wbcPingDc: WBC_ERR_DOMAIN_NOT_FOUND
>
> what does it expect ? The "workgroup-name" :
> wbinfo -P ACE_DOMAIN
> checking the NETLOGON dc connection to "" failed
> failed to call wbcPingDc: WBC_ERR_DOMAIN_NOT_FOUND

I would not worry about this, both of my samba 4 DC's respond just like 
that and they both work ;-)

Have you set /etc/krb5.conf correctly??

What does /etc/resolv.conf contain ?

You seem to using the internal dns server, but have no forwarder line in 
smb.conf.

Is /etc/nsswitch.conf set correctly??

Rowland

>  wbinfo -t
> checking the trust secret for domain ACE_DOMAIN via RPC calls succeeded
>
> Other interesting options to try ?
>
> lsof -i -n
> COMMAND    PID          USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
> avahi-dae  498         avahi   13u  IPv4   7255      0t0  UDP *:mdns
> avahi-dae  498         avahi   14u  IPv6   7256      0t0  UDP *:mdns
> avahi-dae  498         avahi   15u  IPv4   7257      0t0  UDP *:60340
> avahi-dae  498         avahi   16u  IPv6   7258      0t0  UDP *:42302
> cupsd      541          root    8u  IPv4   7321      0t0  TCP 
> 127.0.0.1:ipp (LISTEN)
> sshd       933          root    3u  IPv4   8652      0t0  TCP *:ssh 
> (LISTEN)
> sshd       933          root    4u  IPv6   8654      0t0  TCP *:ssh 
> (LISTEN)
> samba     1290          root   34u  IPv4   9254      0t0  TCP *:1024 
> (LISTEN)
> samba     1290          root   37u  IPv4   9260      0t0  TCP 
> *:loc-srv (LISTEN)
> samba     1291          root   22u  IPv4   9203      0t0  UDP 
> *:netbios-ns
> samba     1291          root   23u  IPv4   9204      0t0  UDP 
> *:netbios-dgm
> samba     1291          root   24u  IPv4   9205      0t0  UDP 
> 192.168.207.255:netbios-ns
> samba     1291          root   25u  IPv4   9206      0t0  UDP 
> 192.168.200.10:netbios-ns
> samba     1291          root   26u  IPv4   9207      0t0  UDP 
> 192.168.207.255:netbios-dgm
> samba     1291          root   27u  IPv4   9208      0t0  UDP 
> 192.168.200.10:netbios-dgm
> smbd      1293          root   40u  IPv6   9304      0t0  TCP 
> *:microsoft-ds (LISTEN)
> smbd      1293          root   41u  IPv6   9305      0t0  TCP 
> *:netbios-ssn (LISTEN)
> smbd      1293          root   42u  IPv4   9306      0t0  TCP 
> *:microsoft-ds (LISTEN)
> smbd      1293          root   43u  IPv4   9307      0t0  TCP 
> *:netbios-ssn (LISTEN)
> samba     1294          root   23u  IPv4   9317      0t0  TCP *:ldap 
> (LISTEN)
> samba     1294          root   24u  IPv4   9318      0t0  TCP *:ldaps 
> (LISTEN)
> samba     1294          root   25u  IPv4   9319      0t0  TCP *:3268 
> (LISTEN)
> samba     1294          root   26u  IPv4   9320      0t0  TCP *:3269 
> (LISTEN)
> samba     1295          root   22u  IPv4   9214      0t0  UDP *:ldap
> samba     1295          root   23u  IPv4   9215      0t0  UDP 
> 192.168.200.10:ldap
> samba     1296          root   22u  IPv4   9273      0t0  TCP 
> *:kerberos (LISTEN)
> samba     1296          root   23u  IPv4   9274      0t0  UDP *:kerberos
> samba     1296          root   24u  IPv4   9275      0t0  TCP 
> *:kpasswd (LISTEN)
> samba     1296          root   25u  IPv4   9276      0t0  UDP *:kpasswd
> samba     1296          root   26u  IPv4   9277      0t0  UDP 
> 192.168.200.10:kerberos
> samba     1296          root   27u  IPv4   9278      0t0  UDP 
> 192.168.200.10:kpasswd
> samba     1302          root   23u  IPv4   9283      0t0  TCP *:domain 
> (LISTEN)
> samba     1302          root   24u  IPv4   9284      0t0  UDP *:domain
> sshd      1679          root    3u  IPv4  45991      0t0  TCP 
> 192.168.200.10:ssh->192.168.200.201:57875 (ESTABLISHED)
> sshd      1827 administrator    3u  IPv4  45991      0t0  TCP 
> 192.168.200.10:ssh->192.168.200.201:57875 (ESTABLISHED)
>
>
> Thanks,
>
> Koenraad
>
> My smb.conf :
> # Global parameters
> [global]
>         workgroup = ACE_DOMAIN
>         realm = ad01.ace-electronics.be
>         netbios name = SAMBA1
>         server role = active directory domain controller
>         idmap_ldb:use rfc2307 = yes
>         log level = 3
>
> [netlogon]
>         path = /var/lib/samba/sysvol/ad01.ace-electronics.be/scripts
>         read only = No
>
> [sysvol]
>         path = /var/lib/samba/sysvol
>         read only = No
> [NDA]
>         comment = Non Disclosure Agreement
>         path = /net/NDA
>         valid users = @NDA
>         read only = No
>         create mask = 0660
>
> [isoadmin]
>         comment = Original ISO9000 files
>         path = /net/isoadmin
>         valid users = @isoadmin
>         read only = No
>



More information about the samba mailing list