[Samba] Migrating to Samba 4.9.4 AD, kinit administrator -> kinit: Cannot contact any KDC for realm...
Rowland Penny
rpenny at samba.org
Thu Feb 14 19:12:40 UTC 2019
On Thu, 14 Feb 2019 19:14:19 +0200
Ashley via samba <samba at lists.samba.org> wrote:
> Hi there
>
> I have migrated from an older version of Samba DC to Samba 4.9.4 AD.
> Running Centos 7. One server with everything on... (AD and file
> server) Bind 9.9.4
>
> Built from source.
> Followed directions in the wiki.
> All seems to go fine, but when I startup samba-ad-dc it shows a few
> errors. ([kdc failed to setup interfaces])
> The initial tests (in the directions in wiki) go fine until I get to
> "kinit administrator" and it
> just gives -> kinit: Cannot contact any KDC for realm
> 'BHUBFAB.DDNS.NET' while getting initial credentials
>
> ...has been 3 days now, eish.
>
> Smb.conf:
>
> # Global parameters
> [global]
> bind interfaces only = Yes
> interfaces = lo enp0s25
> netbios name = SIMBA
> realm = BHUBFAB.DDNS.NET
> server role = active directory domain controller
> server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc,
> drepl, winbindd, ntp_signd, kcc, dnsupdate
> workgroup = BHUBFAB
> idmap_ldb:use rfc2307 = yes
>
> [netlogon]
> path
> = /usr/local/samba/var/locks/sysvol/bhubfab.ddns.net/scripts read
> only = No
>
> [sysvol]
> path = /usr/local/samba/var/locks/sysvol
> read only = No
>
>
> krb5.conf:
> [libdefaults]
> default_realm = BHUBFAB.DDNS.NET
> dns_lookup_realm = false
> dns_lookup_kdc = true
>
>
> systemctl status -l samba-ad-dc :
>
> \u25cf samba-ad-dc.service - Samba Active Directory Domain Controller
> Loaded: loaded (/etc/systemd/system/samba-ad-dc.service;
> disabled; vendor preset: disabled)
> Active: active (running) since Thu 2019-02-14 18:49:26 SAST;
> 23min ago Process: 19134 ExecStart=/usr/local/samba/sbin/samba -D
> (code=exited, status=0/SUCCESS)
> Main PID: 19141 (samba)
> Tasks: 23
> CGroup: /system.slice/samba-ad-dc.service
> \u251c\u250019141 /usr/local/samba/sbin/samba -D
> \u251c\u250019148 /usr/local/samba/sbin/samba -D
> \u251c\u250019149 /usr/local/samba/sbin/samba -D
> \u251c\u250019150 /usr/local/samba/sbin/samba -D
> \u251c\u250019151 /usr/local/samba/sbin/samba -D
> \u251c\u250019152 /usr/local/samba/sbin/smbd -D
> --option=server role check:inhibit=yes --foreground
> \u251c\u250019153 /usr/local/samba/sbin/samba -D
> \u251c\u250019154 /usr/local/samba/sbin/samba -D
> \u251c\u250019155 /usr/local/samba/sbin/samba -D
> \u251c\u250019156 /usr/local/samba/sbin/samba -D
> \u251c\u250019157 /usr/local/samba/sbin/samba -D
> \u251c\u250019158 /usr/local/samba/sbin/samba -D
> \u251c\u250019159 /usr/local/samba/sbin/samba -D
> \u251c\u250019160 /usr/local/samba/sbin/samba -D
> \u251c\u250019161 /usr/local/samba/sbin/samba -D
> \u251c\u250019162 /usr/local/samba/sbin/samba -D
> \u251c\u250019163 /usr/local/samba/sbin/winbindd -D
> --option=server role check:inhibit=yes --foreground
> \u251c\u250019174 /usr/local/samba/sbin/smbd -D
> --option=server role check:inhibit=yes --foreground
> \u251c\u250019175 /usr/local/samba/sbin/smbd -D
> --option=server role check:inhibit=yes --foreground
> \u251c\u250019176 /usr/local/samba/sbin/winbindd -D
> --option=server role check:inhibit=yes --foreground
> \u251c\u250019177 /usr/local/samba/sbin/smbd -D
> --option=server role check:inhibit=yes --foreground
> \u251c\u250019199 /usr/local/samba/sbin/winbindd -D
> --option=server role check:inhibit=yes --foreground
> \u2514\u250019203 /usr/local/samba/sbin/winbindd -D
> --option=server role check:inhibit=yes --foreground
>
> Feb 14 18:49:27 simba.bhubfab.ddns.net samba[19156]: [2019/02/14
> 18:49:27.180408, 0]
> ../source4/smbd/service_task.c:36(task_server_terminate)
> Feb 14 18:49:27 simba.bhubfab.ddns.net samba[19156]:
> task_server_terminate: task_server_terminate: [kdc failed to setup
> interfaces]
> Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]: [2019/02/14
> 18:49:27.553317, 0]
> ../source3/winbindd/winbindd_cache.c:3160(initialize_winbindd_cache)
> Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]:
> initialize_winbindd_cache: clearing cache and re-creating with
> version number 2
> Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]: [2019/02/14
> 18:49:27.636798, 0] ../lib/util/become_daemon.c:138(daemon_ready)
> Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]: daemon_ready:
> STATUS=daemon 'winbindd' finished starting up and ready to serve
> connections Feb 14 18:49:27 simba.bhubfab.ddns.net smbd[19152]:
> [2019/02/14 18:49:27.790989,
> 0] ../lib/util/become_daemon.c:138(daemon_ready) Feb 14 18:49:27
> simba.bhubfab.ddns.net smbd[19152]: daemon_ready: STATUS=daemon
> 'smbd' finished starting up and ready to serve connections Feb 14
> 18:49:34 simba.bhubfab.ddns.net samba[19154]: [2019/02/14
> 18:49:34.418113,
> 0] ../source4/lib/tls/tlscert.c:170(tls_cert_generate) Feb 14
> 18:49:34 simba.bhubfab.ddns.net samba[19154]: TLS self-signed keys
> generated OK
>
>
>
> Any pointers will be very much appreciated!
> Thank you in advance
>
Did you by any chance upgrade from Samba version 4.7.x (or earlier)
directly to 4.9.4 ?
If you did, start downgrading again, it doesn't work, you will have to
upgrade to to a 4.8.x version first.
Rowland
More information about the samba
mailing list