[Samba] Domain member seems to work, wbinfo -u not (update3)

[L.P.H. van Belle]

Hai Rowland, 

Yes its weird, did some more testing and only the printer driver upload didnt work, but everything else on my servers work. 
I checked so many logs today, and no errors found. 
I'll up the loglevels of a few servers tomorrow.

> Have you tried leaving the domain, deleting the keytab and then
> re-joining the domain ?
Yes, i did, i tested some things also on with the kerberos and this works all fine. So must rule out kerberos again.

> If I remember correctly, you use your own certificates, I don't, I
> wonder if this could be a problem ?
No, i checked that to, that was the first i checked. 

And strangly 
wbinfo --user-info username , works also fine.
Maybe its a "cosmatic" bug since everything works but like a bug in how the out is done,.. now im just bit guessing..  its really strange. 

.. I'm done for today...  
I'll make a good log tomorror for debugging and post it, maybe someone will see something.. 


Greetz, 

Louis





> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Rowland penny
> Verzonden: zondag 17 april 2016 17:45
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] Domain member seems to work, wbinfo -u not
> (update3)
> 
> On 17/04/16 14:51, L.P.H. van Belle wrote:
> > Ok some new info.
> >
> > Yesterday file server worked, print server not.
> > Today, both dont work.
> >
> > Same test today, proxy1 and proxy2.
> > Proxy1 didnt work, proxy2 did ( at that time 4.3.6)
> >
> > I upgraded (to 4.3.8) proxy2, tested again, still working.
> > Ok, now this proxy 2 is an vm ( a copy of proxy1 ), so lets try
> something..
> >
> > I remove proxy2 from the ad domain (proxy1 is our main proxy) so this
> one is to test with.
> > Cleared up /var/(lib/cache)/samba folders
> > Re-added the server to the domain, started samba and winbind, and..
> > Same problem here now.
> 
> This is getting weird.
> 
> >
> > Im thinking its something related to the kerberos keytab file.
> > I checked also the (yesterday) working file server, and i did see that
> > Only the keytab file was refreshed.
> > Since there where no changed on that server, why did it work yesterday
> and not today.. so keytab related is my guess.
> > And i noticed some mount where not automounting on bootup and these use
> kerberos also.
> > Re-creating the keytab file didnt help.
> 
> Have you tried leaving the domain, deleting the keytab and then
> re-joining the domain ?
> 
> If I remember correctly, you use your own certificates, I don't, I
> wonder if this could be a problem ?
> 
> Rowland
> 
> >
> > Tomorrow more testing..
> >
> >
> > Greetz,
> >
> > Louis
> >
> >
> >
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba