[Samba] Migrating to Samba 4.9.4 AD, kinit administrator -> kinit: Cannot contact any KDC for realm...

[Rowland Penny]

On Thu, 14 Feb 2019 19:14:19 +0200
Ashley via samba <samba at lists.samba.org> wrote:

> Hi there
> 
> I have migrated from an older version of Samba DC to Samba 4.9.4 AD.
> Running Centos 7. One server with everything on...  (AD and file
> server) Bind 9.9.4
> 
> Built from source.
> Followed directions in the wiki.
> All seems to go fine, but when I startup samba-ad-dc it shows a few
> errors. ([kdc failed to setup interfaces])
> The initial tests (in the directions in wiki) go fine until I get to  
> "kinit administrator" and it
> just gives ->   kinit: Cannot contact any KDC for realm 
> 'BHUBFAB.DDNS.NET' while getting initial credentials
> 
> ...has been 3 days now, eish.
> 
> Smb.conf:
> 
> # Global parameters
> [global]
>          bind interfaces only = Yes
>          interfaces = lo enp0s25
>          netbios name = SIMBA
>          realm = BHUBFAB.DDNS.NET
>          server role = active directory domain controller
>          server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, 
> drepl, winbindd, ntp_signd, kcc, dnsupdate
>          workgroup = BHUBFAB
>          idmap_ldb:use rfc2307 = yes
> 
> [netlogon]
>          path
> = /usr/local/samba/var/locks/sysvol/bhubfab.ddns.net/scripts read
> only = No
> 
> [sysvol]
>          path = /usr/local/samba/var/locks/sysvol
>          read only = No
> 
> 
> krb5.conf:
> [libdefaults]
>          default_realm = BHUBFAB.DDNS.NET
>          dns_lookup_realm = false
>          dns_lookup_kdc = true
> 
> 
> systemctl status -l samba-ad-dc :
> 
> \u25cf samba-ad-dc.service - Samba Active Directory Domain Controller
>     Loaded: loaded (/etc/systemd/system/samba-ad-dc.service;
> disabled; vendor preset: disabled)
>     Active: active (running) since Thu 2019-02-14 18:49:26 SAST;
> 23min ago Process: 19134 ExecStart=/usr/local/samba/sbin/samba -D
> (code=exited, status=0/SUCCESS)
>   Main PID: 19141 (samba)
>      Tasks: 23
>     CGroup: /system.slice/samba-ad-dc.service
>             \u251c\u250019141 /usr/local/samba/sbin/samba -D
>             \u251c\u250019148 /usr/local/samba/sbin/samba -D
>             \u251c\u250019149 /usr/local/samba/sbin/samba -D
>             \u251c\u250019150 /usr/local/samba/sbin/samba -D
>             \u251c\u250019151 /usr/local/samba/sbin/samba -D
>             \u251c\u250019152 /usr/local/samba/sbin/smbd -D 
> --option=server role check:inhibit=yes --foreground
>             \u251c\u250019153 /usr/local/samba/sbin/samba -D
>             \u251c\u250019154 /usr/local/samba/sbin/samba -D
>             \u251c\u250019155 /usr/local/samba/sbin/samba -D
>             \u251c\u250019156 /usr/local/samba/sbin/samba -D
>             \u251c\u250019157 /usr/local/samba/sbin/samba -D
>             \u251c\u250019158 /usr/local/samba/sbin/samba -D
>             \u251c\u250019159 /usr/local/samba/sbin/samba -D
>             \u251c\u250019160 /usr/local/samba/sbin/samba -D
>             \u251c\u250019161 /usr/local/samba/sbin/samba -D
>             \u251c\u250019162 /usr/local/samba/sbin/samba -D
>             \u251c\u250019163 /usr/local/samba/sbin/winbindd -D 
> --option=server role check:inhibit=yes --foreground
>             \u251c\u250019174 /usr/local/samba/sbin/smbd -D 
> --option=server role check:inhibit=yes --foreground
>             \u251c\u250019175 /usr/local/samba/sbin/smbd -D 
> --option=server role check:inhibit=yes --foreground
>             \u251c\u250019176 /usr/local/samba/sbin/winbindd -D 
> --option=server role check:inhibit=yes --foreground
>             \u251c\u250019177 /usr/local/samba/sbin/smbd -D 
> --option=server role check:inhibit=yes --foreground
>             \u251c\u250019199 /usr/local/samba/sbin/winbindd -D 
> --option=server role check:inhibit=yes --foreground
>             \u2514\u250019203 /usr/local/samba/sbin/winbindd -D 
> --option=server role check:inhibit=yes --foreground
> 
> Feb 14 18:49:27 simba.bhubfab.ddns.net samba[19156]: [2019/02/14 
> 18:49:27.180408,  0] 
> ../source4/smbd/service_task.c:36(task_server_terminate)
> Feb 14 18:49:27 simba.bhubfab.ddns.net samba[19156]: 
> task_server_terminate: task_server_terminate: [kdc failed to setup 
> interfaces]
> Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]: [2019/02/14 
> 18:49:27.553317,  0] 
> ../source3/winbindd/winbindd_cache.c:3160(initialize_winbindd_cache)
> Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]: 
> initialize_winbindd_cache: clearing cache and re-creating with
> version number 2
> Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]: [2019/02/14 
> 18:49:27.636798,  0] ../lib/util/become_daemon.c:138(daemon_ready)
> Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]: daemon_ready: 
> STATUS=daemon 'winbindd' finished starting up and ready to serve
> connections Feb 14 18:49:27 simba.bhubfab.ddns.net smbd[19152]:
> [2019/02/14 18:49:27.790989,
> 0] ../lib/util/become_daemon.c:138(daemon_ready) Feb 14 18:49:27
> simba.bhubfab.ddns.net smbd[19152]:   daemon_ready: STATUS=daemon
> 'smbd' finished starting up and ready to serve connections Feb 14
> 18:49:34 simba.bhubfab.ddns.net samba[19154]: [2019/02/14
> 18:49:34.418113,
> 0] ../source4/lib/tls/tlscert.c:170(tls_cert_generate) Feb 14
> 18:49:34 simba.bhubfab.ddns.net samba[19154]:   TLS self-signed keys
> generated OK
> 
> 
> 
> Any pointers will be very much appreciated!
> Thank you in advance
> 

Did you by any chance upgrade from Samba version 4.7.x (or earlier)
directly to 4.9.4 ?
If you did, start downgrading again, it doesn't work, you will have to
upgrade to to a 4.8.x version first.

Rowland