[Samba] Classicupgrade succeded with Sernet-samba-4.2.1 AD, but Kinit not wokring
Mario Pio Russo
mariopiorusso at ie.ibm.com
Wed Apr 29 07:01:12 MDT 2015
Thanks Luis
I have changed ccdc.lan to CCDC.LAN
(NOTE: I cannot change the LAN suffix, this is an old domain that needs to
be imported into the samba 4.2.x version, it's a production domain and
cannot be changed, furthermore it's on an isolated network. P.S. I have
used the same name / procedure with the official samba 4.1.6 ubuntu package
and that has give no error whatsoever)
I am using samba internal dns and I'm happy with that (it worked just fine
for me on 4.1.x)
if in the smb.conf I omit the line:
server services = dns
then no dns will not start at all, so I need to keep it
if I use the following line:
server services = dns -winbindd +winbind
then I have the following error:
Apr 29 13:47:02 ccdc-samba4 ntpd_intres[1364]: host name not found:
timeserver.raleigh.ibm.com
Apr 29 13:47:02 ccdc-samba4 ntpd_intres[1364]: host name not found:
timeserver.almaden.ibm.com
Apr 29 13:47:02 ccdc-samba4 ntpd_intres[1364]: host name not found:
timeserver.watson.ibm.com
Apr 29 13:47:02 ccdc-samba4 ntpd_intres[1364]: host name not found:
timeserver.zurich.ibm.com
Apr 29 13:47:02 ccdc-samba4 ntpd_intres[1364]: host name not found:
timeserver.btv.ibm.com
Apr 29 13:47:34 ccdc-samba4 samba[1612]: [2015/04/29 13:47:34.351192,
0] ../source4/smbd/server.c:370(binary_smbd_main)
Apr 29 13:47:34 ccdc-samba4 samba[1612]: samba version
4.2.1-SerNet-Ubuntu-7.trusty started.
Apr 29 13:47:34 ccdc-samba4 samba[1612]: Copyright Andrew Tridgell and
the Samba Team 1992-2014
Apr 29 13:47:34 ccdc-samba4 samba[1613]: [2015/04/29 13:47:34.560196,
0] ../source4/smbd/server.c:488(binary_smbd_main)
Apr 29 13:47:34 ccdc-samba4 samba[1613]: samba: using 'standard' process
model
Apr 29 13:47:34 ccdc-samba4 samba[1613]: [2015/04/29 13:47:34.561393,
0] ../source4/smbd/service.c:98(server_service_startup)
Apr 29 13:47:34 ccdc-samba4 samba[1613]: Failed to start service
'-winbindd' - NT_STATUS_INVALID_SYSTEM_SERVICE
Apr 29 13:47:34 ccdc-samba4 samba[1613]: [2015/04/29 13:47:34.561997,
0] ../lib/util/become_daemon.c:111(exit_daemon)
Apr 29 13:47:34 ccdc-samba4 samba[1613]: STATUS=daemon failed to start:
Samba failed to start services, error code -1073741796
Apr 29 13:48:45 ccdc-samba4 samba[1650]: [2015/04/29 13:48:45.742583,
0] ../source4/smbd/server.c:370(binary_smbd_main)
Apr 29 13:48:45 ccdc-samba4 samba[1650]: samba version
4.2.1-SerNet-Ubuntu-7.trusty started.
Apr 29 13:48:45 ccdc-samba4 samba[1650]: Copyright Andrew Tridgell and
the Samba Team 1992-2014
Apr 29 13:48:45 ccdc-samba4 samba[1651]: [2015/04/29 13:48:45.962817,
0] ../source4/smbd/server.c:488(binary_smbd_main)
Apr 29 13:48:45 ccdc-samba4 samba[1651]: samba: using 'standard' process
model
Apr 29 13:48:45 ccdc-samba4 samba[1651]: [2015/04/29 13:48:45.963978,
0] ../source4/smbd/service.c:98(server_service_startup)
Apr 29 13:48:45 ccdc-samba4 samba[1651]: Failed to start service
'+winbindd' - NT_STATUS_INVALID_SYSTEM_SERVICE
Apr 29 13:48:45 ccdc-samba4 samba[1651]: [2015/04/29 13:48:45.964161,
0] ../lib/util/become_daemon.c:111(exit_daemon)
Apr 29 13:48:45 ccdc-samba4 samba[1651]: STATUS=daemon failed to start:
Samba failed to start services, error code -1073741796
if I use the line
server services = dns winbindd
then I have the following error:
Apr 29 13:49:16 ccdc-samba4 samba[1688]: [2015/04/29 13:49:16.377765,
0] ../source4/smbd/server.c:370(binary_smbd_main)
Apr 29 13:49:16 ccdc-samba4 samba[1688]: samba version
4.2.1-SerNet-Ubuntu-7.trusty started.
Apr 29 13:49:16 ccdc-samba4 samba[1688]: Copyright Andrew Tridgell and
the Samba Team 1992-2014
Apr 29 13:49:16 ccdc-samba4 samba[1689]: [2015/04/29 13:49:16.587401,
0] ../source4/smbd/server.c:488(binary_smbd_main)
Apr 29 13:49:16 ccdc-samba4 samba[1689]: samba: using 'standard' process
model
Apr 29 13:49:16 ccdc-samba4 samba[1689]: [2015/04/29 13:49:16.589677,
0] ../lib/util/become_daemon.c:124(daemon_ready)
Apr 29 13:49:16 ccdc-samba4 samba[1689]: STATUS=daemon 'samba' finished
starting up and ready to serve connections
Apr 29 13:49:16 ccdc-samba4 winbindd[1692]: [2015/04/29 13:49:16.762676,
0] ../source3/winbindd/winbindd_cache.c:3235(initialize_winbindd_cache)
Apr 29 13:49:16 ccdc-samba4 winbindd[1692]: initialize_winbindd_cache:
clearing cache and re-creating with version number 2
Apr 29 13:49:16 ccdc-samba4 winbindd[1692]: [2015/04/29 13:49:16.768143,
0] ../lib/util/become_daemon.c:124(daemon_ready)
Apr 29 13:49:16 ccdc-samba4 winbindd[1692]: STATUS=daemon 'winbindd'
finished starting up and ready to serve connections
Apr 29 13:49:16 ccdc-samba4 winbindd[1693]: [2015/04/29 13:49:16.803340,
0] ../source3/winbindd/winbindd_cm.c:1670(wb_open_internal_pipe)
Apr 29 13:49:16 ccdc-samba4 winbindd[1693]: open_internal_pipe: Could not
connect to dssetup pipe: NT_STATUS_UNSUCCESSFUL
Apr 29 13:49:16 ccdc-samba4 winbindd[1693]: [2015/04/29 13:49:16.837669,
0] ../source3/winbindd/winbindd_cm.c:1670(wb_open_internal_pipe)
Apr 29 13:49:16 ccdc-samba4 winbindd[1693]: open_internal_pipe: Could not
connect to lsarpc pipe: NT_STATUS_UNSUCCESSFUL
Apr 29 13:49:16 ccdc-samba4 winbindd[1693]: [2015/04/29 13:49:16.838379,
0] ../source3/winbindd/winbindd_cm.c:1670(wb_open_internal_pipe)
Apr 29 13:49:16 ccdc-samba4 winbindd[1693]: open_internal_pipe: Could not
connect to dssetup pipe: NT_STATUS_UNSUCCESSFUL
Apr 29 13:49:16 ccdc-samba4 winbindd[1693]: [2015/04/29 13:49:16.838803,
0] ../source3/winbindd/winbindd_cm.c:1670(wb_open_internal_pipe)
Apr 29 13:49:16 ccdc-samba4 winbindd[1693]: open_internal_pipe: Could not
connect to lsarpc pipe: NT_STATUS_UNSUCCESSFUL
Apr 29 13:49:16 ccdc-samba4 winbindd[1693]: [2015/04/29 13:49:16.839251,
0] ../source3/winbindd/winbindd_cm.c:1670(wb_open_internal_pipe)
Apr 29 13:49:16 ccdc-samba4 winbindd[1693]: open_internal_pipe: Could not
connect to lsarpc pipe: NT_STATUS_UNSUCCESSFUL
in any case the kinit won t work
___________________________________________________________________________________________
Mario Pio Russo, System Admin SWG IT Services Dublin, Phone & FAX: +353 1
815 2236, eMail: mariopiorusso at ie.ibm.com
IBM Ireland Product Distribution Limited registered in Ireland with number
92815. Registered Office: IBM House, Shelbourne Road, Ballsbridge, Dublin 4
(Embedded image moved to file: pic32682.gif)
From: "L.P.H. van Belle" <belle at bazuin.nl>
To: "samba at lists.samba.org" <samba at lists.samba.org>
Cc: Mario Pio Russo/Ireland/IBM at IBMIE
Date: 29/04/2015 13:29
Subject: Re: [Samba] Classicupgrade succeded with Sernet-samba-4.2.1 AD,
but Kinit not wokring
Sent by: samba-bounces at lists.samba.org
Hai,.
We do advice you to change this. .local .lan are reserved names by apple
mDNS/zeroconf"
and the same for : .test .example
(.com/.net/.org) .invalid .localdomain .localhost, dont use these.
More info see : rfc2606, rfc6762
and change the following.
server services = dns winbind
#server services = winbind
If you use BIND9_DLZ
server services = -dns
if you used old winbind on 4.2.1
server services = -dns -winbindd +winbind
and..
realm = ccdc.lan
change it to
realm = CCDC.LAN
Greetz,
Louis
>-----Oorspronkelijk bericht-----
>Van: mariopiorusso at ie.ibm.com
>[mailto:samba-bounces at lists.samba.org] Namens Mario Pio Russo
>Verzonden: woensdag 29 april 2015 14:10
>Aan: samba at lists.samba.org
>Onderwerp: [Samba] Classicupgrade succeded with
>Sernet-samba-4.2.1 AD, but Kinit not wokring
>
>
>Good Day All
>
>I have been trying to upgrade from samba 3 to samba 4.2.1 on
>Ubuntu 14.4
>using the sernet-samba package.
>
>the upgrade seems to work fine and the samba4 comes up correctlly,
>
>I have also run the following script to get rid of bug
>
>
>https://git.samba.org/?p=samba.git;a=blob_plain;f=source4/scrip
>ting/devel/chgtdcpass;h=4f5ea15a80c2862daf170a5657658a8163174f8
>a;hb=HEAD
>
>
>
>I am able to resolve some basic dns entry using the host command, and
>that's good, however any kinit does not work and return
>
>kinit mariopio at CCDC.LAN
>kinit: Cannot contact any KDC for realm 'CCDC.LAN' while
>getting initial
>credentials
>
>
>my smb.conf file is the following
>
># Global parameters
>[global]
> workgroup = CCDC
> realm = ccdc.lan
> netbios name = CCDC-SAMBA4
> server role = active directory domain controller
> idmap_ldb:use rfc2307 = yes
> dns forwarder = 9.0.138.50
> server services = dns winbind
> #server services = winbind
>
>
>[netlogon]
> path = /var/lib/samba/sysvol/ccdc.lan/scripts
> read only = No
>
>[sysvol]
> path = /var/lib/samba/sysvol
> read only = No
>
>
>do you have any suggestion?
>
>thanks
>
>
>_______________________________________________________________
>____________________________
>
>Mario Pio Russo, System Admin SWG IT Services Dublin, Phone &
>FAX: +353 1
>815 2236, eMail: mariopiorusso at ie.ibm.com
>IBM Ireland Product Distribution Limited registered in Ireland
>with number
>92815. Registered Office: IBM House, Shelbourne Road,
>Ballsbridge, Dublin 4
>
>(Embedded image moved to file: pic27694.gif)--
>To unsubscribe from this list go to the following URL and read the
>instructions: https://lists.samba.org/mailman/options/samba
>
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
More information about the samba
mailing list