[Samba] Kerberos kinit not running

Maurizio Caloro maurizio at caloro.ch
Tue Jul 19 20:09:04 UTC 2022


hello

after installing Samba 4.15.7 from Luis distro now i have the problem
that me kinit Username not running any more. also arnt possible to join 
to Domain.

i think this are running out from this following error.
meny thanks for possible help

--

/etc/samba# kinit Administrator at Caloro.m
kinit: Cannot find KDC for realm "Caloro.m" while getting initial 
credentials

/etc/samba# kinit Administrator at CALORO.M
kinit: Client 'Administrator at CALORO.M' not found in Kerberos database 
while getting initial credentials


/etc/samba# cat /etc/krb5.conf
[libdefaults]
         default_realm = CALORO.M
         dns_lookup_realm = false
         dns_lookup_kdc = true
         forwardable = true
         proxiable = true

[realms]
CALORO.M = {
         kdc = testad.caloro.m
         kpasswd_server = testad.caloro.m
         admin_server = testad.caloro.m
         default_domain = caloro.m
}

[domain_realm]
         .caloro.m = CALORO.M
         caloro.m = CALORO.M

--

● krb5-kdc.service - Kerberos 5 Key Distribution Center
      Loaded: loaded (/lib/systemd/system/krb5-kdc.service; enabled; 
vendor preset: enabled)
      Active: active (running) since Tue 2022-07-19 20:52:46 BST; 3s ago
     Process: 2877 ExecStart=/usr/sbin/krb5kdc -P /var/run/krb5-kdc.pid 
$DAEMON_ARGS (code=exited, status=0/SUCCESS)
    Main PID: 2878 (krb5kdc)
       Tasks: 1 (limit: 9309)
      Memory: 828.0K
         CPU: 7ms
      CGroup: /system.slice/krb5-kdc.service
              └─2878 /usr/sbin/krb5kdc -P /var/run/krb5-kdc.pid

Jul 19 20:52:46 TESTAD krb5kdc[2877]: Setting pktinfo on socket 0.0.0.0.88
Jul 19 20:52:46 TESTAD krb5kdc[2877]: Setting up UDP socket for address 
::.88
Jul 19 20:52:46 TESTAD krb5kdc[2877]: setsockopt(11,IPV6_V6ONLY,1) worked
Jul 19 20:52:46 TESTAD krb5kdc[2877]: Setting pktinfo on socket ::.88
Jul 19 20:52:46 TESTAD krb5kdc[2877]: Setting up TCP socket for address 
0.0.0.0.88
Jul 19 20:52:46 TESTAD krb5kdc[2877]: Setting up TCP socket for address 
::.88
Jul 19 20:52:46 TESTAD krb5kdc[2877]: setsockopt(13,IPV6_V6ONLY,1) worked
Jul 19 20:52:46 TESTAD krb5kdc[2877]: set up 6 sockets
Jul 19 20:52:46 TESTAD systemd[1]: Started Kerberos 5 Key Distribution 
Center.
Jul 19 20:52:46 TESTAD krb5kdc[2878]: commencing operation

--

root at TESTAD:/etc/samba# systemctl status samba-ad-dc
● samba-ad-dc.service - Samba AD Daemon
      Loaded: loaded (/lib/systemd/system/samba-ad-dc.service; enabled; 
vendor preset: enabled)
      Active: active (running) since Tue 2022-07-19 20:35:27 BST; 31min ago
        Docs: man:samba(8)
              man:samba(7)
              man:smb.conf(5)
    Main PID: 2582 (samba)
      Status: "samba: ready to serve connections..."
       Tasks: 58 (limit: 9309)
      Memory: 192.7M
         CPU: 6.385s
      CGroup: /system.slice/samba-ad-dc.service
              ├─2582 samba: root process
              ├─2615 samba: tfork waiter process(2616)
              ├─2616 samba: task[s3fs] pre-fork master
              ├─2617 samba: tfork waiter process(2619)
              ├─2618 samba: tfork waiter process(2620)
              ├─2619 samba: task[rpc] pre-fork master
              ├─2620 /usr/sbin/smbd -D --option=server role 
check:inhibit=yes --foreground
              ├─2621 samba: tfork waiter process(2622)
              ├─2622 samba: task[nbt] pre-fork master
              ├─2623 samba: tfork waiter process(2625)
              ├─2624 samba: tfork waiter process(2626)
              ├─2625 samba: task[rpc] pre-forked worker(0)
              ├─2626 samba: task[wrepl] pre-fork master
              ├─2627 samba: tfork waiter process(2629)
              ├─2628 samba: tfork waiter process(2630)
              ├─2629 samba: task[rpc] pre-forked worker(1)
              ├─2630 samba: task[ldap] pre-fork master
              ├─2631 samba: tfork waiter process(2633)
              ├─2632 samba: tfork waiter process(2634)
              ├─2633 samba: task[cldap] pre-fork master
              ├─2634 samba: task[rpc] pre-forked worker(2)
              ├─2635 samba: tfork waiter process(2637)
              ├─2636 samba: tfork waiter process(2638)
              ├─2637 samba: task[kdc] pre-fork master
              ├─2638 samba: task[rpc] pre-forked worker(3)
              ├─2639 samba: tfork waiter process(2641)
              ├─2640 samba: tfork waiter process(2642)
              ├─2641 samba: task[drepl] pre-fork master
              ├─2642 samba: task[kdc] pre-forked worker(0)
              ├─2643 samba: tfork waiter process(2645)
              ├─2644 samba: tfork waiter process(2646)
              ├─2645 samba: task[winbindd] pre-fork master
              ├─2646 samba: task[kdc] pre-forked worker(1)
              ├─2647 samba: tfork waiter process(2652)
              ├─2648 samba: tfork waiter process(2651)
              ├─2649 samba: tfork waiter process(2650)
              ├─2650 samba: task[ntp_signd] pre-fork master
              ├─2651 samba: task[kdc] pre-forked worker(2)
              ├─2652 /usr/sbin/winbindd -D --option=server role 
check:inhibit=yes --foreground
              ├─2653 samba: tfork waiter process(2655)
              ├─2654 samba: tfork waiter process(2656)
              ├─2655 samba: task[kcc] pre-fork master
              ├─2656 samba: task[kdc] pre-forked worker(3)
              ├─2657 samba: tfork waiter process(2658)
              ├─2658 samba: task[dnsupdate] pre-fork master
              ├─2665 samba: tfork waiter process(2666)
              ├─2666 samba: task[ldap] pre-forked worker(0)
              ├─2667 samba: tfork waiter process(2668)
              ├─2668 samba: task[ldap] pre-forked worker(1)
              ├─2669 samba: tfork waiter process(2670)
              ├─2670 samba: task[ldap] pre-forked worker(2)
              ├─2671 samba: tfork waiter process(2672)
              ├─2672 samba: task[ldap] pre-forked worker(3)
              ├─2673 /usr/sbin/smbd -D --option=server role 
check:inhibit=yes --foreground
              ├─2674 /usr/sbin/smbd -D --option=server role 
check:inhibit=yes --foreground
              ├─2675 /usr/lib/x86_64-linux-gnu/samba/samba-bgqd 
--ready-signal-fd=47 --parent-watch-fd=14 --debuglevel=0 -F
              ├─2676 winbindd: domain child [CALORO]
              └─2711 winbindd: idmap child

Jul 19 20:35:27 TESTAD samba[2637]:   Failed to bind to 0.0.0.0:88 TCP - 
NT_STATUS_ADDRESS_ALREADY_ASSOCIATED
Jul 19 20:35:27 TESTAD systemd[1]: Started Samba AD Daemon.
Jul 19 20:35:27 TESTAD smbd[2620]: [2022/07/19 20:35:27.937214, 0] 
../../source3/smbd/server.c:1734(main)
Jul 19 20:35:27 TESTAD smbd[2620]:   smbd version 4.15.7-Debian started.
Jul 19 20:35:27 TESTAD smbd[2620]:   Copyright Andrew Tridgell and the 
Samba Team 1992-2021
Jul 19 20:35:27 TESTAD winbindd[2652]: [2022/07/19 20:35:27.941656,  0] 
../../source3/winbindd/winbindd.c:1722(main)
Jul 19 20:35:27 TESTAD winbindd[2652]:   winbindd version 4.15.7-Debian 
started.
Jul 19 20:35:27 TESTAD winbindd[2652]:   Copyright Andrew Tridgell and 
the Samba Team 1992-2021
Jul 19 20:35:28 TESTAD winbindd[2652]: [2022/07/19 20:35:28.033849,  0] 
../../source3/winbindd/winbindd_cache.c:3085(initialize_winbindd_cache)
Jul 19 20:35:28 TESTAD winbindd[2652]: initialize_winbindd_cache: 
clearing cache and re-creating with version number 2
root at TESTAD:/etc/samba#





More information about the samba mailing list