This is a discussion on Fwd: [Samba] machine being dropped from ads within the Samba forums, part of the Networking and Network Related category; ------=_Part_1257_342856.1210266037307 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline I wanted to ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
------=_Part_1257_342856.1210266037307
Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline I wanted to bring this question back to the main list. I am lost for ideas, The issue is that my samba server is being dropped from ADS for some reason, or is disconnecting itself. Everything is up and working but randomly winbind will be unable to lookup domain users. Any debug info or ideas would be much appreciated, could there be something on the windows side? It looks like the kerberos ticket is only valid for today? here is some of my configs: smb.conf ---------------------------------------- [global] workgroup = WINIX realm = CORPEDIA.INTERNAL preferred master = no server string = File Server security = ADS encrypt passwords = yes log level = 3 log file = /var/log/samba/%m max log size = 50 # printcap name = cups # printing = cups winbind enum users = Yes winbind enum groups = Yes winbind use default domain = true winbind nested groups = Yes # winbind separator = + idmap uid = 600-20000 idmap gid = 600-20000 #template primary group = "Domain Users" template shell = /bin/bash # obey pam restrictions = no # winbind use default domain = yes obey pam restrictions = yes #pam password change = yes #root preexec = /usr/local/sbin/mkhomedir.sh %U #template homedir = /home/WINIX+%U security mask = 0775 force security mode = 0 directory security mask = 0775 force directory security mode = 0 create mask = 0775 ---------------------------- [kylec@beedril ~]$ wbinfo -u administrator guest support_388945a0 (cut ....) --------------------------- [kylec@beedril ~]$ net ads info LDAP server: 10.0.0.6 LDAP server name: charizard.corpedia.internal Realm: CORPEDIA.INTERNAL Bind Path: dc=CORPEDIA,dc=INTERNAL LDAP port: 389 Server time: Thu, 08 May 2008 09:52:29 MST KDC server: 10.0.0.6 Server time offset: 95 ----------------------------- [root@beedril kylec]# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: samba@CORPEDIA.INTERNAL Valid starting Expires Service principal 05/08/08 09:54:25 05/08/08 19:55:48 krbtgt/CORPEDIA.INTERNAL@CORPEDIA.INTERNAL renew until 05/09/08 09:54:25 Kerberos 4 ticket cache: /tmp/tkt0 klist: You have no tickets cached ------=_Part_1257_342856.1210266037307 Content-Type: text/plain; name=signature.asc Content-Transfer-Encoding: base64 X-Attachment-Id: 0.1 Content-Disposition: attachment; filename=signature.asc LS0tLS1CRUdJTiBQR1AgU0lHTkFUVVJFLS0tLS0KVmVyc2lvbj ogR251UEcgdjEuNC45IChHTlUv TGludXgpCgppRDhEQlFCSUlraDB6NEE4V3lpME5yc1JBamVqQU owZW1zVUw5WTIyMG9wUzhCNmpa ZS9BK1k0Zkl3Q2ZVUVVxCi9KU3Zwb1Bhd3BUalcyYWczN2NYdE w4PQo9aXBvMgotLS0tLUVORCBQ R1AgU0lHTkFUVVJFLS0tLS0K ------=_Part_1257_342856.1210266037307 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba ------=_Part_1257_342856.1210266037307-- |
![]() |
| Thread Tools | |
| Display Modes | |
|
|