[Samba] Service Winbind stopped, what could be the reason ?
Edouard Guigné
eguigne at pasteur-cayenne.fr
Tue Apr 28 15:25:49 UTC 2020
Dear Rowland,
Please find a dump of smb.conf and resolv.conf of my centos 7 server :
# testparm
Load smb config files from /etc/samba/smb.conf
Loaded services file OK.
Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions
# Global parameters
[global]
client min protocol = SMB2
client signing = required
disable spoolss = Yes
domain master = No
kerberos method = secrets and keytab
load printers = No
local master = No
log file = /var/log/samba/%m.log
preferred master = No
printcap name = /dev/null
realm = MYAD.MYDOMAIN.FR
security = ADS
server min protocol = SMB2_02
server signing = required
winbind nss info = rfc2307
winbind use default domain = Yes
workgroup = IPGAD
idmap config ipgad : unix_primary_group = yes
idmap config ipgad : unix_nss_info = yes
idmap config ipgad : range = 10000 - 14999
idmap config ipgad : schema_mode = rfc2307
idmap config ipgad : backend = ad
idmap config * : range = 15000-99999
idmap config * : backend = tdb
cups options = raw
hosts allow = 127. 10.9.8. 10.9.7. 10.9.2. 10.9.4. 10.9.5.
hosts deny = 10.9.9. 10.9.10.
map acl inherit = Yes
use sendfile = Yes
vfs objects = acl_xattr
[groups]
comment = jaguar2
path = /var/datashared
read only = No
valid users = "@MYAD\utilisateurs du domaine"
vfs objects = acl_xattr streams_xattr shadow_copy2
shadow:format = daily_%Y.%m.%d-%H.%M.%S
shadow:localtime = yes
shadow:sort = desc
shadow:basedir = /var/datashared
shadow:snapdir = /data/datashared/snapshots
[homes]
browseable = No
comment = Home Directories
create mask = 0700
directory mask = 0700
hide files = /~*.tmp/profile/desktop.ini/~$*/
path = /home
read only = No
valid users = %S
[printers]
browseable = No
comment = All Printers
create mask = 0600
path = /var/tmp
printable = Yes
[print$]
comment = Printer Drivers
create mask = 0664
directory mask = 0775
path = /var/lib/samba/drivers
write list = root
# cat /etc/resolv.conf
# Generated by NetworkManager
nameserver 10.9.x.xx1
nameserver 10.9.x.xx2
10.9.x.xx1 is the ip of first domain controler, 10.9.x.xx2 is the ip of the second domain controler.
I notice that "domain" is not mentioned in resolv.conf ; so domain machine by short hostname is not possible for this reason ?
Best Regards,
Ed
----- Mail original -----
De: "sambalist" <samba at lists.samba.org>
À: "sambalist" <samba at lists.samba.org>
Envoyé: Mardi 28 Avril 2020 12:08:44
Objet: Re: [Samba] Service Winbind stopped, what could be the reason ?
On 28/04/2020 15:35, Edouard Guigné via samba wrote:
> Hello dear Samba users,
>
> I recently faced an issue with samba (4.10.4) and winbind.
> The winbind service was stopped, so no user can acces to my samba share.
> I restart the winbind service, and all users can access to the share as usually...
> But I would like to understand why this issue occured.
>
> My samba server is a centos 7 linux, configured as domain member to a microsoft AD (windows server 2012 R2).
> All services (samba, winbind) are in automatic, started with linux start, and should always remained started.
>
> In winbindd.log, there are many entries like :
> [2020/04/27 08:20:14.167335, 1] ../source3/lib/util.c:1700(name_to_fqdn)
> getaddrinfo: Échec temporaire dans la résolution du nom
>
> On my Centos 7 samba server, the DNS resolution works only for fulled qualified name :
> ping workstation1
> ping: workstation1 : Échec temporaire dans la résolution du nom
> but
> ping workstation1.mydomain.fr
> 64 bytes from workstation1!.mydomain.fr (10.9.x.x): icmp_seq=1 ttl=127 time=1.58 ms
> 64 bytes from workstation1!.mydomain.fr (10.9.x.x): icmp_seq=2 ttl=127 time=1.33 ms
> 64 bytes from workstation1!.mydomain.fr (10.9.x.x): icmp_seq=3 ttl=127 time=1.04 ms
>
> Can it be the explanation why winbind has stopped ?
>
> Do I have to add "domain=mydomain.fr" in /etc/sysconfig/network-scripts/ifcfg-eth0 of my centos 7 server network adapter ?
> May it help Winbind for DNS resolving ?
>
> Best Regards,
> Ed
Please post your smb.conf and /etc/resolv.conf
You must be able to ping any domain machine by short hostname, FQDN or IP.
Rowland
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
More information about the samba
mailing list