Web lists-archives.com

Re: [Samba] Migrating to Samba 4.9.4 AD, kinit administrator -> kinit: Cannot contact any KDC for realm...





On 2019/02/14 21:12, Rowland Penny via samba wrote:
On Thu, 14 Feb 2019 19:14:19 +0200
Ashley via samba <samba@xxxxxxxxxxxxxxx> wrote:

Hi there

I have migrated from an older version of Samba DC to Samba 4.9.4 AD.
Running Centos 7. One server with everything on...  (AD and file
server) Bind 9.9.4

Built from source.
Followed directions in the wiki.
All seems to go fine, but when I startup samba-ad-dc it shows a few
errors. ([kdc failed to setup interfaces])
The initial tests (in the directions in wiki) go fine until I get to
"kinit administrator" and it
just gives ->   kinit: Cannot contact any KDC for realm
'BHUBFAB.DDNS.NET' while getting initial credentials

...has been 3 days now, eish.

Smb.conf:

# Global parameters
[global]
          bind interfaces only = Yes
          interfaces = lo enp0s25
          netbios name = SIMBA
          realm = BHUBFAB.DDNS.NET
          server role = active directory domain controller
          server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc,
drepl, winbindd, ntp_signd, kcc, dnsupdate
          workgroup = BHUBFAB
          idmap_ldb:use rfc2307 = yes

[netlogon]
          path
= /usr/local/samba/var/locks/sysvol/bhubfab.ddns.net/scripts read
only = No

[sysvol]
          path = /usr/local/samba/var/locks/sysvol
          read only = No


krb5.conf:
[libdefaults]
          default_realm = BHUBFAB.DDNS.NET
          dns_lookup_realm = false
          dns_lookup_kdc = true


systemctl status -l samba-ad-dc :

\u25cf samba-ad-dc.service - Samba Active Directory Domain Controller
     Loaded: loaded (/etc/systemd/system/samba-ad-dc.service;
disabled; vendor preset: disabled)
     Active: active (running) since Thu 2019-02-14 18:49:26 SAST;
23min ago Process: 19134 ExecStart=/usr/local/samba/sbin/samba -D
(code=exited, status=0/SUCCESS)
   Main PID: 19141 (samba)
      Tasks: 23
     CGroup: /system.slice/samba-ad-dc.service
             \u251c\u250019141 /usr/local/samba/sbin/samba -D
             \u251c\u250019148 /usr/local/samba/sbin/samba -D
             \u251c\u250019149 /usr/local/samba/sbin/samba -D
             \u251c\u250019150 /usr/local/samba/sbin/samba -D
             \u251c\u250019151 /usr/local/samba/sbin/samba -D
             \u251c\u250019152 /usr/local/samba/sbin/smbd -D
--option=server role check:inhibit=yes --foreground
             \u251c\u250019153 /usr/local/samba/sbin/samba -D
             \u251c\u250019154 /usr/local/samba/sbin/samba -D
             \u251c\u250019155 /usr/local/samba/sbin/samba -D
             \u251c\u250019156 /usr/local/samba/sbin/samba -D
             \u251c\u250019157 /usr/local/samba/sbin/samba -D
             \u251c\u250019158 /usr/local/samba/sbin/samba -D
             \u251c\u250019159 /usr/local/samba/sbin/samba -D
             \u251c\u250019160 /usr/local/samba/sbin/samba -D
             \u251c\u250019161 /usr/local/samba/sbin/samba -D
             \u251c\u250019162 /usr/local/samba/sbin/samba -D
             \u251c\u250019163 /usr/local/samba/sbin/winbindd -D
--option=server role check:inhibit=yes --foreground
             \u251c\u250019174 /usr/local/samba/sbin/smbd -D
--option=server role check:inhibit=yes --foreground
             \u251c\u250019175 /usr/local/samba/sbin/smbd -D
--option=server role check:inhibit=yes --foreground
             \u251c\u250019176 /usr/local/samba/sbin/winbindd -D
--option=server role check:inhibit=yes --foreground
             \u251c\u250019177 /usr/local/samba/sbin/smbd -D
--option=server role check:inhibit=yes --foreground
             \u251c\u250019199 /usr/local/samba/sbin/winbindd -D
--option=server role check:inhibit=yes --foreground
             \u2514\u250019203 /usr/local/samba/sbin/winbindd -D
--option=server role check:inhibit=yes --foreground

Feb 14 18:49:27 simba.bhubfab.ddns.net samba[19156]: [2019/02/14
18:49:27.180408,  0]
../source4/smbd/service_task.c:36(task_server_terminate)
Feb 14 18:49:27 simba.bhubfab.ddns.net samba[19156]:
task_server_terminate: task_server_terminate: [kdc failed to setup
interfaces]
Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]: [2019/02/14
18:49:27.553317,  0]
../source3/winbindd/winbindd_cache.c:3160(initialize_winbindd_cache)
Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]:
initialize_winbindd_cache: clearing cache and re-creating with
version number 2
Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]: [2019/02/14
18:49:27.636798,  0] ../lib/util/become_daemon.c:138(daemon_ready)
Feb 14 18:49:27 simba.bhubfab.ddns.net winbindd[19163]: daemon_ready:
STATUS=daemon 'winbindd' finished starting up and ready to serve
connections Feb 14 18:49:27 simba.bhubfab.ddns.net smbd[19152]:
[2019/02/14 18:49:27.790989,
0] ../lib/util/become_daemon.c:138(daemon_ready) Feb 14 18:49:27
simba.bhubfab.ddns.net smbd[19152]:   daemon_ready: STATUS=daemon
'smbd' finished starting up and ready to serve connections Feb 14
18:49:34 simba.bhubfab.ddns.net samba[19154]: [2019/02/14
18:49:34.418113,
0] ../source4/lib/tls/tlscert.c:170(tls_cert_generate) Feb 14
18:49:34 simba.bhubfab.ddns.net samba[19154]:   TLS self-signed keys
generated OK



Any pointers will be very much appreciated!
Thank you in advance

Did you by any chance upgrade from Samba version 4.7.x (or earlier)
directly to 4.9.4 ?
If you did, start downgrading again, it doesn't work, you will have to
upgrade to to a 4.8.x version first.

Rowland
Rowland hi there
Thank you for quick reply!
Unfortunately I did not make a note of the previous version, but I think it was 4.8.3

I will try install 4.8.x from source, run the classicupgrade, and see if it works.

Many Thanx
Best Regards
ashley


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba