[Samba] Cannot contact any KDC for realm

[L.P.H. van Belle]

If this is a new setup. 

And if this reflex your primary dns domain for your AD-DC. 
        realm = EXAMPLE.COM

Then i hope your really good with DNS setups, to easy to make errors here. 
Cannot contact any KDC for realm can be one of them. 

My advice use something like : 
realm = INTERNAL.EXAMPLE.COM 


Greetz, 

Louis

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Alfonso Conner via samba
> Verzonden: woensdag 12 augustus 2020 9:25
> Aan: Rowland penny
> CC: samba at lists.samba.org
> Onderwerp: Re: [Samba] Cannot contact any KDC for realm
> 
> Hi Rowland,
> 
> Sorry I missed out on the OS.
> 
> CentOS Linux release 7.6.1810 (Core)
> 
> smb.conf
> # Global parameters
> [global]
>         bind interfaces only = Yes
>         interfaces = lo ens192
>         netbios name = SERVER1
>         realm = EXAMPLE.COM
>         server role = active directory domain controller
>         workgroup = WORKGROUP
>         idmap_ldb:use rfc2307  = yes
>         ldap server require strong auth = no
>         template shell = /bin/bash
>         template homedir = /home/%U
>         time server = yes
> 
> [netlogon]
>         path = /usr/local/samba/var/locks/sysvol/example.com/scripts
>         read only = No
> 
> [sysvol]
>         path = /usr/local/samba/var/locks/sysvol
>         read only = No
> 
> Regards
> Alfonso
> 
> On Wed, Aug 12, 2020 at 3:04 PM Rowland penny via samba <
> samba at lists.samba.org> wrote:
> 
> > On 12/08/2020 02:28, Alfonso Conner via samba wrote:
> > > Hello Samba Community,
> > >
> > > I would like to seek advice as my Samba AD tends to 
> consume high memory
> > > usage caused by KDC service.
> > > This issue will always come back within a couple of days 
> after I restart
> > > samba-ad-dc service.
> > > It does not help by increasing memory.
> > >
> > >  From message log:
> > > kernel: Out of memory: Kill process 14527 (samba) score 
> 873 or sacrifice
> > > child
> > >
> > > Identified pid 14527 belongs to kdc_server:
> > > kdc_server             14527
> > >
> > > Samba installed version: 4.9.11 (dns backend using Samba_Internal)
> > >
> > > Configured memory:
> > > Mem: 6GB
> > > Swap: 4GB
> > >
> > > Appreciate any advice provided.
> > > Thank you.
> > >
> > > Regards
> > > Alfonso
> >
> > Hi, can you give us a bit more info ?
> >
> > OS, smb.conf etc
> >
> > Rowland
> >
> >
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> >
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>