[Samba] Migrating to Samba 4.9.4 AD, kinit administrator -> kinit: Cannot contact any KDC for realm...
Ashley
ashley at softwareshack.co.za
Thu Feb 14 19:43:43 UTC 2019
On 2019/02/14 21:12, Rowland Penny via samba wrote:
> On Thu, 14 Feb 2019 19:14:19 +0200
> Ashley via samba <samba at lists.samba.org> wrote:
>
>> Hi there
>>
>> I have migrated from an older version of Samba DC to Samba 4.9.4 AD.
>> Running Centos 7. One server with everything on... (AD and file
>> server) Bind 9.9.4
>>
>> Built from source.
>> Followed directions in the wiki.
>> All seems to go fine, but when I startup samba-ad-dc it shows a few
>> errors. ([kdc failed to setup interfaces])
>> The initial tests (in the directions in wiki) go fine until I get to
>> "kinit administrator" and it
>> just gives -> kinit: Cannot contact any KDC for realm
>> 'BHUBFAB.DDNS.NET' while getting initial credentials
>>
>> ...has been 3 days now, eish.
>>
>> Smb.conf:
>>
>> # Global parameters
>> [global]
>> bind interfaces only = Yes
>> interfaces = lo enp0s25
>> netbios name = SIMBA
>> realm = BHUBFAB.DDNS.NET
>> server role = active directory domain controller
>> server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc,
>> drepl, winbindd, ntp_signd, kcc, dnsupdate
>> workgroup = BHUBFAB
>> idmap_ldb:use rfc2307 = yes
>>
>> [netlogon]
>> path
>> = /usr/local/samba/var/locks/sysvol/bhubfab.ddns.net/scripts read
>> only = No
>>
>> [sysvol]
>> path = /usr/local/samba/var/locks/sysvol
>> read only = No
>>
>>
>> krb5.conf:
>> [libdefaults]
>> default_realm = BHUBFAB.DDNS.NET
>> dns_lookup_realm = false
>> dns_lookup_kdc = true
>>
>>
>> systemctl status -l samba-ad-dc :
>>
>> \u25cf samba-ad-dc.service - Samba Active Directory Domain Controller
>> Loaded: loaded (/etc/systemd/system/samba-ad-dc.service;
>> disabled; vendor preset: disabled)
>> Active: active (running) since Thu 2019-02-14 18:49:26 SAST;
>> 23min ago Process: 19134 ExecStart=/usr/local/samba/sbin/samba -D
>> (code=exited, status=0/SUCCESS)
>> Main PID: 19141 (samba)
>> Tasks: 23
>> CGroup: /system.slice/samba-ad-dc.service
>> \u251c\u250019141 /usr/local/samba/sbin/samba -D
>> \u251c\u250019148 /usr/local/samba/sbin/samba -D
>> \u251c\u250019149 /usr/local/samba/sbin/samba -D
>> \u251c\u250019150 /usr/local/samba/sbin/samba -D
>> \u251c\u250019151 /usr/local/samba/sbin/samba -D
>> \u251c\u250019152 /usr/local/samba/sbin/smbd -D
>> --option=server role check:inhibit=yes --foreground
>> \u251c\u250019153 /usr/local/samba/sbin/samba -D
>> \u251c\u250019154 /usr/local/samba/sbin/samba -D
>> \u251c\u250019155 /usr/local/samba/sbin/samba -D
>> \u251c\u250019156 /usr/local/samba/sbin/samba -D
>> \u251c\u250019157 /usr/local/samba/sbin/samba -D
>> \u251c\u250019158 /usr/local/samba/sbin/samba -D
>> \u251c\u250019159 /usr/local/samba/sbin/samba -D
>> \u251c\u250019160 /usr/local/samba/sbin/samba -D
>> \u251c\u250019161 /usr/local/samba/sbin/samba -D
>> \u251c\u250019162 /usr/local/samba/sbin/samba -D
>> \u251c\u250019163 /usr/local/samba/sbin/winbindd -D
>> --option=server role check:inhibit=yes --foreground
>> \u251c\u250019174 /usr/local/samba/sbin/smbd -D
>> --option=server role check:inhibit=yes --foreground
>> \u251c\u250019175 /usr/local/samba/sbin/smbd -D
>> --option=server role check:inhibit=yes --foreground
>> \u251c\u250019176 /usr/local/samba/sbin/winbindd -D
>> --option=server role check:inhibit=yes --foreground
>> \u251c\u250019177 /usr/local/samba/sbin/smbd -D
>> --option=server role check:inhibit=yes --foreground
>> \u251c\u250019199 /usr/local/samba/sbin/winbindd -D
>> --option=server role check:inhibit=yes --foreground
>> \u2514\u250019203 /usr/local/samba/sbin/winbindd -D
>> --option=server role check:inhibit=yes --foreground
>>
>> Feb 14 18:49:27 simba.bhubfab.ddns.net samba[19156]: [2019/02/14
>> 18:49:27.180408, 0]
>> ../source4/smbd/service_task.c:36(task_server_terminate)
>> Feb 14 18:49:27 simba.bhubfab.ddns.net samba[19156]:
>> task_server_terminate: task_server_terminate: [kdc failed to setup
>> interfaces]
>> Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]: [2019/02/14
>> 18:49:27.553317, 0]
>> ../source3/winbindd/winbindd_cache.c:3160(initialize_winbindd_cache)
>> Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]:
>> initialize_winbindd_cache: clearing cache and re-creating with
>> version number 2
>> Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]: [2019/02/14
>> 18:49:27.636798, 0] ../lib/util/become_daemon.c:138(daemon_ready)
>> Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]: daemon_ready:
>> STATUS=daemon 'winbindd' finished starting up and ready to serve
>> connections Feb 14 18:49:27 simba.bhubfab.ddns.net smbd[19152]:
>> [2019/02/14 18:49:27.790989,
>> 0] ../lib/util/become_daemon.c:138(daemon_ready) Feb 14 18:49:27
>> simba.bhubfab.ddns.net smbd[19152]: daemon_ready: STATUS=daemon
>> 'smbd' finished starting up and ready to serve connections Feb 14
>> 18:49:34 simba.bhubfab.ddns.net samba[19154]: [2019/02/14
>> 18:49:34.418113,
>> 0] ../source4/lib/tls/tlscert.c:170(tls_cert_generate) Feb 14
>> 18:49:34 simba.bhubfab.ddns.net samba[19154]: TLS self-signed keys
>> generated OK
>>
>>
>>
>> Any pointers will be very much appreciated!
>> Thank you in advance
>>
> Did you by any chance upgrade from Samba version 4.7.x (or earlier)
> directly to 4.9.4 ?
> If you did, start downgrading again, it doesn't work, you will have to
> upgrade to to a 4.8.x version first.
>
> Rowland
Rowland hi there
Thank you for quick reply!
Unfortunately I did not make a note of the previous version, but I think
it was 4.8.3
I will try install 4.8.x from source, run the classicupgrade, and see if
it works.
Many Thanx
Best Regards
ashley
More information about the samba
mailing list