[Samba] NT_STATUS_CONNECTION_REFUSED

[mathias dufresne]

Use the same krb5.conf on members as on DC, no?

2016-01-27 7:42 GMT+01:00 Henry McLaughlin <henry at incred.com.au>:

> On 27 January 2016 at 17:40, mathias dufresne <infractory at gmail.com>
> wrote:
>
> > Hi,
> >
> > Samba DC generates a krb5.conf into private directory, where the database
> > is hold.
> >
> > Its content should be that:
> > [libdefaults]
> >         default_realm = SAMBA.DOMAIN.TLD
> >         dns_lookup_realm = false
> >         dns_lookup_kdc = true
> >
> > Should only as I get it from a forgotten test platform where I set
> > dns_lookup_realm = true
> >
> > Cheers,
> >
> > mathias
> >
>
> Hi Mathias, this is a member server not a DC.
>
> >
> > 2016-01-27 2:03 GMT+01:00 Henry McLaughlin <henry at incred.com.au>:
> >
> >> On 27 January 2016 at 08:24, Rowland penny <rpenny at samba.org> wrote:
> >>
> >> > On 26/01/16 20:54, Henry McLaughlin wrote:
> >> >
> >> >> [root at centos7member ~]# net rpc rights list accounts
> >> >> -U'TESTING\administrator'
> >> >> Enter TESTING\administrator's password:
> >> >> Could not connect to server 127.0.0.1
> >> >> Connection failed: NT_STATUS_CONNECTION_REFUSED
> >> >> [root at centos7member ~]#
> >> >>
> >> >>
> >> >>
> >> > This looks like a dns problem, it is trying to connect to localhost
> >> > instead of your DC, check /etc/resolv.conf and /etc/krb5.conf
> >> >
> >> > Rowland
> >> >
> >> >
> >> > --
> >> > To unsubscribe from this list go to the following URL and read the
> >> > instructions:  https://lists.samba.org/mailman/options/samba
> >> >
> >>
> >> [root at centos7pdc ~]# cat /etc/resolv.conf
> >> search testing.domain.com.au
> >> nameserver 192.168.1.10
> >>
> >> [root at centos7member ~]# cat /etc/krb5.conf
> >> [logging]
> >>  default = FILE:/var/log/krb5libs.log
> >>  kdc = FILE:/var/log/krb5kdc.log
> >>  admin_server = FILE:/var/log/kadmind.log
> >>
> >> [libdefaults]
> >>  dns_lookup_realm = false
> >>  ticket_lifetime = 24h
> >>  renew_lifetime = 7d
> >>  forwardable = true
> >>  rdns = false
> >> # default_realm = EXAMPLE.COM
> >>  default_ccache_name = KEYRING:persistent:%{uid}
> >>
> >> [realms]
> >> # EXAMPLE.COM = {
> >> #  kdc = kerberos.example.com
> >> #  admin_server = kerberos.example.com
> >> # }
> >>
> >> [domain_realm]
> >> # .example.com = EXAMPLE.COM
> >> # example.com = EXAMPLE.COM
> >>
> >>
> >> Looks like krb5.conf is unconfigured. Is there a Samba guide as to how
> >> this
> >> should be configured or a std template?
> >> --
> >> To unsubscribe from this list go to the following URL and read the
> >> instructions:  https://lists.samba.org/mailman/options/samba
> >>
> >
> >
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>