[Samba] Migrating to Samba 4.9.4 AD, kinit administrator -> kinit: Cannot contact any KDC for realm...

Thu Feb 14 19:43:43 UTC 2019

On 2019/02/14 21:12, Rowland Penny via samba wrote:
> On Thu, 14 Feb 2019 19:14:19 +0200
> Ashley via samba <samba at lists.samba.org> wrote:
>
>> Hi there
>>
>> I have migrated from an older version of Samba DC to Samba 4.9.4 AD.
>> Running Centos 7. One server with everything on...  (AD and file
>> server) Bind 9.9.4
>>
>> Built from source.
>> Followed directions in the wiki.
>> All seems to go fine, but when I startup samba-ad-dc it shows a few
>> errors. ([kdc failed to setup interfaces])
>> The initial tests (in the directions in wiki) go fine until I get to
>> "kinit administrator" and it
>> just gives ->   kinit: Cannot contact any KDC for realm
>> 'BHUBFAB.DDNS.NET' while getting initial credentials
>>
>> ...has been 3 days now, eish.
>>
>> Smb.conf:
>>
>> # Global parameters
>> [global]
>>           bind interfaces only = Yes
>>           interfaces = lo enp0s25
>>           netbios name = SIMBA
>>           realm = BHUBFAB.DDNS.NET
>>           server role = active directory domain controller
>>           server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc,
>> drepl, winbindd, ntp_signd, kcc, dnsupdate
>>           workgroup = BHUBFAB
>>           idmap_ldb:use rfc2307 = yes
>>
>> [netlogon]
>>           path
>> = /usr/local/samba/var/locks/sysvol/bhubfab.ddns.net/scripts read
>> only = No
>>
>> [sysvol]
>>           path = /usr/local/samba/var/locks/sysvol
>>           read only = No
>>
>>
>> krb5.conf:
>> [libdefaults]
>>           default_realm = BHUBFAB.DDNS.NET
>>           dns_lookup_realm = false
>>           dns_lookup_kdc = true
>>
>>
>> systemctl status -l samba-ad-dc :
>>
>> \u25cf samba-ad-dc.service - Samba Active Directory Domain Controller
>>      Loaded: loaded (/etc/systemd/system/samba-ad-dc.service;
>> disabled; vendor preset: disabled)
>>      Active: active (running) since Thu 2019-02-14 18:49:26 SAST;
>> 23min ago Process: 19134 ExecStart=/usr/local/samba/sbin/samba -D
>> (code=exited, status=0/SUCCESS)
>>    Main PID: 19141 (samba)
>>       Tasks: 23
>>      CGroup: /system.slice/samba-ad-dc.service
>>              \u251c\u250019141 /usr/local/samba/sbin/samba -D
>>              \u251c\u250019148 /usr/local/samba/sbin/samba -D
>>              \u251c\u250019149 /usr/local/samba/sbin/samba -D
>>              \u251c\u250019150 /usr/local/samba/sbin/samba -D
>>              \u251c\u250019151 /usr/local/samba/sbin/samba -D
>>              \u251c\u250019152 /usr/local/samba/sbin/smbd -D
>> --option=server role check:inhibit=yes --foreground
>>              \u251c\u250019153 /usr/local/samba/sbin/samba -D
>>              \u251c\u250019154 /usr/local/samba/sbin/samba -D
>>              \u251c\u250019155 /usr/local/samba/sbin/samba -D
>>              \u251c\u250019156 /usr/local/samba/sbin/samba -D
>>              \u251c\u250019157 /usr/local/samba/sbin/samba -D
>>              \u251c\u250019158 /usr/local/samba/sbin/samba -D
>>              \u251c\u250019159 /usr/local/samba/sbin/samba -D
>>              \u251c\u250019160 /usr/local/samba/sbin/samba -D
>>              \u251c\u250019161 /usr/local/samba/sbin/samba -D
>>              \u251c\u250019162 /usr/local/samba/sbin/samba -D
>>              \u251c\u250019163 /usr/local/samba/sbin/winbindd -D
>> --option=server role check:inhibit=yes --foreground
>>              \u251c\u250019174 /usr/local/samba/sbin/smbd -D
>> --option=server role check:inhibit=yes --foreground
>>              \u251c\u250019175 /usr/local/samba/sbin/smbd -D
>> --option=server role check:inhibit=yes --foreground
>>              \u251c\u250019176 /usr/local/samba/sbin/winbindd -D
>> --option=server role check:inhibit=yes --foreground
>>              \u251c\u250019177 /usr/local/samba/sbin/smbd -D
>> --option=server role check:inhibit=yes --foreground
>>              \u251c\u250019199 /usr/local/samba/sbin/winbindd -D
>> --option=server role check:inhibit=yes --foreground
>>              \u2514\u250019203 /usr/local/samba/sbin/winbindd -D
>> --option=server role check:inhibit=yes --foreground
>>
>> Feb 14 18:49:27 simba.bhubfab.ddns.net samba[19156]: [2019/02/14
>> 18:49:27.180408,  0]
>> ../source4/smbd/service_task.c:36(task_server_terminate)
>> Feb 14 18:49:27 simba.bhubfab.ddns.net samba[19156]:
>> task_server_terminate: task_server_terminate: [kdc failed to setup
>> interfaces]
>> Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]: [2019/02/14
>> 18:49:27.553317,  0]
>> ../source3/winbindd/winbindd_cache.c:3160(initialize_winbindd_cache)
>> Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]:
>> initialize_winbindd_cache: clearing cache and re-creating with
>> version number 2
>> Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]: [2019/02/14
>> 18:49:27.636798,  0] ../lib/util/become_daemon.c:138(daemon_ready)
>> Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]: daemon_ready:
>> STATUS=daemon 'winbindd' finished starting up and ready to serve
>> connections Feb 14 18:49:27 simba.bhubfab.ddns.net smbd[19152]:
>> [2019/02/14 18:49:27.790989,
>> 0] ../lib/util/become_daemon.c:138(daemon_ready) Feb 14 18:49:27
>> simba.bhubfab.ddns.net smbd[19152]:   daemon_ready: STATUS=daemon
>> 'smbd' finished starting up and ready to serve connections Feb 14
>> 18:49:34 simba.bhubfab.ddns.net samba[19154]: [2019/02/14
>> 18:49:34.418113,
>> 0] ../source4/lib/tls/tlscert.c:170(tls_cert_generate) Feb 14
>> 18:49:34 simba.bhubfab.ddns.net samba[19154]:   TLS self-signed keys
>> generated OK
>>
>>
>>
>> Any pointers will be very much appreciated!
>> Thank you in advance
>>
> Did you by any chance upgrade from Samba version 4.7.x (or earlier)
> directly to 4.9.4 ?
> If you did, start downgrading again, it doesn't work, you will have to
> upgrade to to a 4.8.x version first.
>
> Rowland
Rowland hi there
Thank you for quick reply!
Unfortunately I did not make a note of the previous version, but I think 
it was 4.8.3

I will try install 4.8.x from source, run the classicupgrade, and see if 
it works.

Many Thanx
Best Regards
ashley