[Samba] Debian 9.8 and vanbelle-repos

[L.P.H. van Belle]

Hai Stefan, 

Hmm is time in sync.  Did that server have these 3 settings in smb.conf? 
Yes/no/which ones ? 

    kerberos method = secrets and keytab
    dedicated keytab file = /etc/krb5.keytab

    # renew the kerberos ticket
    winbind refresh tickets = yes

Especialy the refresh ticket.. 

I see this is a RID setup? Not AD. 
Because if thats so, i run only in AD backend on the members. 

Can you check that. 


Greetz, 

Louis



> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Stefan G. Weichinger via samba
> Verzonden: vrijdag 22 februari 2019 14:00
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] Debian 9.8 and vanbelle-repos
> 
> Am 22.02.19 um 12:16 schrieb L.P.H. van Belle via samba:
> > Hai, 
> > 
> > Well, i did some extra checking, gone throug more logs. 
> > ... Nothing. No errors. Sorry, i cant find anything.. 
> > 
> > Almost all my server run unattended updates, execpt the DC's. 
> > 
> > I had a few that where waiting for a reboot tomorrow night, 
> all now rebooted, 
> > and no problems before and after. 
> > 
> > So its bit hard to detect whats going on at your side.
> > Are all you servers having this or a few. Whats the 
> difference between these. 
> > 
> > If a few, compair the installed packages thats what i would do. 
> > I dont think it samba to blaim, because i see 15 servers 
> auto-updated without problems.
> > 
> > And i cant think of anything expect the packages check, on 
> what's the problem, to start debugging. 
> > 
> > And i just noticed a new kernel update. From 4.9.144-3.0 to 
> 4.9.144-3.1 
> > Fix boot breakage on 32-bit arm (closes: #922478). 
> > But your not running arm 32bit i think ;-) 
> > 
> > So not much i can help with here i think, sorry.. 
> > I can only think of 2 things here. 
> > 
> > 1) The use of settings in idmap.conf ive shown.
> > 2) use systemd from debian backports, its a try, 
> > i have some server with the normal debian stretch version.
> > And some are on the backports version. 
> > This depends on the server function, most samba servers are 
> using the default systemd.
> > 
> > Now time to eat....   
> > 
> > Good lunch everybody. 
> > 
> > Greetz, 
> > 
> > Louis
> > 
> > 
> 
> thanks for your testing and help on this.
> 
> I hop between jobs and customers and don't have too much time 
> for that now.
> 
> Just looked into winbindd.log:
> 
> [2019/02/22 13:57:48.758769,  3]
> ../source3/winbindd/winbindd_getpwuid.c:49(winbindd_getpwuid_send)
>   getpwuid 10080
> [2019/02/22 13:57:48.770047,  5]
> ../source3/winbindd/wb_xids2sids.c:565(wb_xids2sids_recv)
>   wb_sids_to_xids failed: NT_STATUS_CONNECTION_REFUSED
> [2019/02/22 13:57:48.770088,  5]
> ../source3/winbindd/winbindd_getpwuid.c:111(winbindd_getpwuid_recv)
>   Could not convert sid (NULL SID): NT_STATUS_CONNECTION_REFUSED
> [2019/02/22 13:57:48.770344,  3]
> ../source3/winbindd/winbindd_getgrgid.c:52(winbindd_getgrgid_send)
>   getgrgid 10513
> [2019/02/22 13:57:48.770425,  5]
> ../source3/winbindd/winbindd_getgrgid.c:116(winbindd_getgrgid_recv)
>   Could not convert sid S-1-22-2-10513: NT_STATUS_INVALID_PARAMETER
> [2019/02/22 13:57:48.770746,  3]
> ../source3/winbindd/winbindd_getpwuid.c:49(winbindd_getpwuid_send)
>   getpwuid 10092
> [2019/02/22 13:57:48.770811,  5]
> ../source3/winbindd/winbindd_getpwuid.c:111(winbindd_getpwuid_recv)
>   Could not convert sid S-1-22-1-10092: NT_STATUS_INVALID_PARAMETER
> [2019/02/22 13:57:48.771094,  3]
> ../source3/winbindd/winbindd_getgrgid.c:52(winbindd_getgrgid_send)
>   getgrgid 10513
> [2019/02/22 13:57:48.771159,  5]
> ../source3/winbindd/winbindd_getgrgid.c:116(winbindd_getgrgid_recv)
>   Could not convert sid S-1-22-2-10513: NT_STATUS_INVALID_PARAMETER
> [2019/02/22 13:57:48.771471,  3]
> ../source3/winbindd/winbindd_getpwuid.c:49(winbindd_getpwuid_send)
>   getpwuid 10002
> [2019/02/22 13:57:48.782593,  5]
> ../source3/winbindd/wb_xids2sids.c:565(wb_xids2sids_recv)
>   wb_sids_to_xids failed: NT_STATUS_CONNECTION_REFUSED
> 
> smells bad
> ?
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>