[Samba] Debian 9.8 and vanbelle-repos
L.P.H. van Belle
belle at bazuin.nl
Fri Feb 22 13:42:27 UTC 2019
Hai Stefan,
Hmm is time in sync. Did that server have these 3 settings in smb.conf?
Yes/no/which ones ?
kerberos method = secrets and keytab
dedicated keytab file = /etc/krb5.keytab
# renew the kerberos ticket
winbind refresh tickets = yes
Especialy the refresh ticket..
I see this is a RID setup? Not AD.
Because if thats so, i run only in AD backend on the members.
Can you check that.
Greetz,
Louis
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens
> Stefan G. Weichinger via samba
> Verzonden: vrijdag 22 februari 2019 14:00
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] Debian 9.8 and vanbelle-repos
>
> Am 22.02.19 um 12:16 schrieb L.P.H. van Belle via samba:
> > Hai,
> >
> > Well, i did some extra checking, gone throug more logs.
> > ... Nothing. No errors. Sorry, i cant find anything..
> >
> > Almost all my server run unattended updates, execpt the DC's.
> >
> > I had a few that where waiting for a reboot tomorrow night,
> all now rebooted,
> > and no problems before and after.
> >
> > So its bit hard to detect whats going on at your side.
> > Are all you servers having this or a few. Whats the
> difference between these.
> >
> > If a few, compair the installed packages thats what i would do.
> > I dont think it samba to blaim, because i see 15 servers
> auto-updated without problems.
> >
> > And i cant think of anything expect the packages check, on
> what's the problem, to start debugging.
> >
> > And i just noticed a new kernel update. From 4.9.144-3.0 to
> 4.9.144-3.1
> > Fix boot breakage on 32-bit arm (closes: #922478).
> > But your not running arm 32bit i think ;-)
> >
> > So not much i can help with here i think, sorry..
> > I can only think of 2 things here.
> >
> > 1) The use of settings in idmap.conf ive shown.
> > 2) use systemd from debian backports, its a try,
> > i have some server with the normal debian stretch version.
> > And some are on the backports version.
> > This depends on the server function, most samba servers are
> using the default systemd.
> >
> > Now time to eat....
> >
> > Good lunch everybody.
> >
> > Greetz,
> >
> > Louis
> >
> >
>
> thanks for your testing and help on this.
>
> I hop between jobs and customers and don't have too much time
> for that now.
>
> Just looked into winbindd.log:
>
> [2019/02/22 13:57:48.758769, 3]
> ../source3/winbindd/winbindd_getpwuid.c:49(winbindd_getpwuid_send)
> getpwuid 10080
> [2019/02/22 13:57:48.770047, 5]
> ../source3/winbindd/wb_xids2sids.c:565(wb_xids2sids_recv)
> wb_sids_to_xids failed: NT_STATUS_CONNECTION_REFUSED
> [2019/02/22 13:57:48.770088, 5]
> ../source3/winbindd/winbindd_getpwuid.c:111(winbindd_getpwuid_recv)
> Could not convert sid (NULL SID): NT_STATUS_CONNECTION_REFUSED
> [2019/02/22 13:57:48.770344, 3]
> ../source3/winbindd/winbindd_getgrgid.c:52(winbindd_getgrgid_send)
> getgrgid 10513
> [2019/02/22 13:57:48.770425, 5]
> ../source3/winbindd/winbindd_getgrgid.c:116(winbindd_getgrgid_recv)
> Could not convert sid S-1-22-2-10513: NT_STATUS_INVALID_PARAMETER
> [2019/02/22 13:57:48.770746, 3]
> ../source3/winbindd/winbindd_getpwuid.c:49(winbindd_getpwuid_send)
> getpwuid 10092
> [2019/02/22 13:57:48.770811, 5]
> ../source3/winbindd/winbindd_getpwuid.c:111(winbindd_getpwuid_recv)
> Could not convert sid S-1-22-1-10092: NT_STATUS_INVALID_PARAMETER
> [2019/02/22 13:57:48.771094, 3]
> ../source3/winbindd/winbindd_getgrgid.c:52(winbindd_getgrgid_send)
> getgrgid 10513
> [2019/02/22 13:57:48.771159, 5]
> ../source3/winbindd/winbindd_getgrgid.c:116(winbindd_getgrgid_recv)
> Could not convert sid S-1-22-2-10513: NT_STATUS_INVALID_PARAMETER
> [2019/02/22 13:57:48.771471, 3]
> ../source3/winbindd/winbindd_getpwuid.c:49(winbindd_getpwuid_send)
> getpwuid 10002
> [2019/02/22 13:57:48.782593, 5]
> ../source3/winbindd/wb_xids2sids.c:565(wb_xids2sids_recv)
> wb_sids_to_xids failed: NT_STATUS_CONNECTION_REFUSED
>
> smells bad
> ?
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
>
>
More information about the samba
mailing list