[Samba] Fwd: Failed to prepare gensec: NT_STATUS_INVALID_SERVER_STATE

[L.P.H. van Belle]

Ah yeah, if you already have a few running then thats no option. 
But im also a bit out of options here. 

:-/


> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Marcel de Reuver via samba
> Verzonden: donderdag 4 november 2021 15:24
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] Fwd: Failed to prepare gensec: 
> NT_STATUS_INVALID_SERVER_STATE
> 
> 
> >> I've made the suggested changes and the log messages continue.
> > I found in some older list messages a reply of Andrew.
> >
> >> Andrew Bartlett via samba
> >> Verzonden: woensdag 31 maart 2021 9:17
> >> Aan: Stefan Bellon; Stefan Bellon via samba
> >> Onderwerp: Re: [Samba] Failed to prepare gensec:
> >> NT_STATUS_INVALID_SERVER_STATE
> >> This is about failing to setup the
> >> Kerberos code that accepts incoming tickets, so it could 
> fail if the DC
> >> things it is not a DC or can't find the secrets.ldb entry etc.
> > If this is the first AD-DC.
> > Stop samba-ad-dc
> >
> > Whipe the samba data, rename the smb.conf and re-provision.
> > Leave everything else as it.
> >
> > Clean /var/cache/samba/ and /var/lib/samba and there subfolders
> > Dont remove the subfolders, if you do, recreate these.
> >
> > The other option, remove (de-install) samba winbind
> > Clean /var/cache/samba/ and /var/lib/samba and there subfolders
> > Reinstall and reprovision.
> 
> It is a setup with two AD-DC's in two locations connected via a VPN 
> connection. Both AD-DC's have these log messages. Since everything 
> works, removing and re-provisioning seems highly excessive.
> 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>