[Samba] Winbind error "Could not fetch our SID - did we join?"

Sven Schwedas sven.schwedas at tao.at
Mon Nov 13 15:22:35 UTC 2017


On 2017-11-13 16:00, Rowland Penny via samba wrote:
> On Mon, 13 Nov 2017 15:20:05 +0100
> Sven Schwedas <sven.schwedas at tao.at> wrote:
>>
>>> PS, your configs are still wrong.
>>
>> It would be *really* helpful if you explained *why*. Sprinkling magic
>> pixie dust over random config files isn't exactly purposeful
>> debugging.
>>
> 
> Lets start with /etc/krb5.conf
> 
> Samba doesn't need most of what you will find in it, this is mostly
> because most of what you will find there, is a default setting.
> Believe it, or believe it not, you only really need:
> 
> [libdefaults]
>     default_realm = AD.TAO.AT

'unnecessary' and 'wrong' are two different things. No doubt that the
config files are overly verbose, but that doesn't make them wrong, does it?

> using 'search' in /etc/resolv.conf means you use host-name lookups

'search' and 'domain' are supposed to be idempotent if there's only one
domain, aren't they?

> /etc/hosts should contain information in the following format:
> 
> ipaddress 'canonical-name' 'alias' 
> 
> 'canonical-name' is anotherway of saying FQDN
> 'alias' is another way of saying short hostname

But how does it affect samba?

> When trying to identify a problem, you start with the obvious from the
> info supplied and fix anything that might be causing the problem.
> If this doesn't work, then look further, ask other questions etc

Yes, but I'd like to get away from asking the *same* five questions
every time by understanding *how* Samba reacts to changes /
misconfigurations here.

-- 
Mit freundlichen Grüßen, / Best Regards,
Sven Schwedas, Systemadministrator
Mail/XMPP sven.schwedas at tao.at | Skype sven.schwedas
TAO Digital | Lendplatz 45 | A8020 Graz
https://www.tao-digital.at | Tel +43 680 301 7167

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 659 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba/attachments/20171113/fd065e27/signature.sig>


More information about the samba mailing list