[Samba] net ads join error message Failed to join domain: failed to connect to AD: Client not found in Kerberos database

2012-05-01 Thread kartheek katakam
hello,

I have a wiered issue, some time when I run net ads join -U username,
some times I have see this error message, and some time it shows as
success. In between the error messages and success result, their are no
changes to any configuration, not sure what is causing this issue.

# net ads join -U 50483
Enter 50483's password:
[2012/05/01 21:41:15.227249,  0] libads/kerberos.c:333(ads_kinit_password)
  kerberos_kinit_password 50...@..com failed: Client not found
in Kerberos database
Failed to join domain: failed to connect to AD: Client not found in
Kerberos database
#
# net ads join -U 50483
Enter 50483's password:
Using short domain name -- CTLAB
Joined 'HOSTNAME' to realm '.xcom'
#
before running this command, I have already add hostname object to Active
directory manually, can someone suggest, do I have to run this command to
see am I joined to AD or not?? What if I have run similar command multiple
times ??

Thanks,
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] creating file on share getting premission denied on a linux client

2012-04-27 Thread kartheek katakam
Hello,

I have linux samba server trying to share user home directories, and I am
trying to mount the shares on a linux client. I am running into a issue.

here is truncated output of smb.conf

turncated o/p of my smb.conf for the share

   [50483]
path = /home/50483
users = dituser
public = no
writable = yes
printable = no
write list = 50483

on the samba server

[root@HOST1 50483]# cd /home/50483
[root@HOST1 50483]# ls -lrt
total 20
-rw---  1 50483 admin   10 Apr 26 12:55 .bash_history
drwxr-xr-x 10 rootroot4096 Apr 26 14:11 ../
drwxrwxr-x  2 50483 admin 4096 Apr 26 14:42 dir1/
drwxr-xr-x  3 50483 admin 4096 Apr 26 14:42 ./
[root@HOST2 ~1]$ id 50483
uid=509(50483) gid=500(admin) groups=500(admin)


I mounted the share on a linux client, but when I create a file I am
getting permission denied, not sure what I am missing here.
on client server

[root@HOST2 ~]# mount -t cifs -o
username=dituser,password=ditpasswd,rw,workgroup=MYGROUP  '//
10.10.3.43/50483' /mnt/cifs/
[root@HOST2 ~]# su - 50483
[50483@HOST2 ~]$ cd /mnt/cifs/dir1/
[50483@HOST2 dir1]$ touch file1
touch: cannot touch `file1': Permission denied
[50483@HOST2 dir1]$ id
uid=509(50483) gid=500(admin) groups=500(admin)

Thanks,
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] samba winbind error host is not configured as a member server

2012-04-23 Thread kartheek katakam
hello,

I had weird issues that I am running into.
1. I have manually updated security = ads entry in /etc/samba/smb.conf
but when I run testparm on the samba configuration file I didnot notice
this security line,its not just one line and I have noticed few other lines
missing, sure what going on !!!

[root@LinuxADtest samba]# testparm /etc/samba/smb.conf
Load smb config files from /etc/samba/smb.conf
Loaded services file OK.
'winbind separator = +' might cause problems with group membership.
Server role: ROLE_STANDALONE
Press enter to see a dump of your service definitions

[global]

workgroup = ADLINUX

realm = ADLINUX.TEST.COM

server string = Samba Server Version %v

password server = ADLINUX.TEST.COM

log file = /var/log/samba/log.%m

max log size = 50

idmap uid = 1-2

idmap gid = 1-2

winbind separator = +

winbind cache time = 10

winbind enum users = Yes

winbind enum groups = Yes

winbind use default domain = Yes

winbind nss info = rfc2307

idmap config ADLINUX:cache time = 1800

idmap config ADLINUX:schema_mode = rfc2307

idmap config ADLINUX:range = 1-2

idmap config ADLINUX:default = yes

idmap config ADLINUX:backend = ad

[root@LinuxADtest samba]#


Here is the truncated o/p for smb.conf file

more /etc/samba/smb.conf

# specifiy it as a per share option as well

#

workgroup = ADLINUX

server string = Samba Server Version %v

realm = ADLINUX.TEST.COM

security = ads

password server = ADLINUX.TEST.COM

winbind nss info = rfc2307

idmap backend = tdb

idmap uid = 1-2

idmap gid = 1-2

idmap config ADLINUX:backend = ad

idmap config ADLINUX:default = yes

idmap config ADLINUX:range = 1-2

idmap config ADLINUX:schema_mode = rfc2307

idmap config ADLINUX:cache time = 1800

;   template shell = /bin/bash

;   template homedir = /home/%U

winbind use default domain = yes

winbind offline logon = false

winbind enum users = yes

winbind enum groups = yes

winbind cache time = 10

winbind nested groups = yes

winbind separator = +





;   netbios name = MYSERVER

--

2. when I trying to join the domain, I am getting this error message

[root@LinuxADtest ~]# net ads join -U 5483

Host is not configured as a member server.

Invalid configuration.  Exiting

Failed to join domain: This operation is only allowed for the PDC of the
domain.

[root@LinuxADtest ~]#

Thanks  Regards,
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba Winbind Standalone issue Failed to join domain

2012-04-18 Thread kartheek katakam
Hello,


as part of environment we are planning to integrate all linux host to
activedirectory for authentication.
I have installed following versions of samba and winbind packages and
update smb.conf file and /etc/krb5.conf
samba3x-3.5.10-0.108.el5_8Wed 11 Apr 2012 10:13:46 AM
CDT
samba3x-common-3.5.10-0.108.el5_8 Wed 11 Apr 2012 10:13:44 AM
CDT
samba3x-winbind-3.5.10-0.108.el5_8Wed 11 Apr 2012 10:13:43 AM
CDT
libtdb-1.2.1-6.el5Wed 11 Apr 2012 10:13:42 AM
CDT
libtalloc-2.0.1-11.el5Wed 11 Apr 2012 10:13:42 AM
CDT

when I run this command I am running into this error. I have address my
server in active directory and also update the DNS server.

[root@LinuxADtest ~]# net ads join -U z875855
Host is not configured as a member server.
Invalid configuration.  Exiting
Failed to join domain: This operation is only allowed for the PDC of the
domain.
[root@LinuxADtest ~]#

please let me know what am I missing here !!

Thanks,
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba wbinfo error message Could not get info for user xxxxxx

2012-03-14 Thread kartheek katakam
Hi Everyone,

I am running into this issue, when I integrated linux host to AD using
samba.
when I run wbinfo -u it is listing all AD users.
but when I pick any one of the user from o/p of previous command and ran
webinfo -i for the user I am getting this error message, any idea ??

#wbinfo -i xx
Could not get info for user xx
# rpm -qa | grep samba
samba-3.5.10-114.el6.x86_64
samba-common-3.5.10-114.el6.x86_64
samba-client-3.5.10-114.el6.x86_64
samba-winbind-clients-3.5.10-114.el6.x86_64
samba-winbind-3.5.10-114.el6.x86_64
#

Thanks,
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba wbinfo error message Could not get info for user xxxxxx

2012-03-14 Thread kartheek katakam
Thanks Bernd,

but it was helpfull, I restarted the winbind service I still see the same
issue.



On Wed, Mar 14, 2012 at 1:06 PM, Bernd Markgraf
bernd.markg...@med.ovgu.dewrote:

 Hi,

 I've seen the same error today. Had to restart winbindd (after running
 for like 200days). That made things work nicely again.

  Bernd

 On Wed, 2012-03-14 at 12:28 -0400, kartheek katakam wrote:
  Hi Everyone,
 
  I am running into this issue, when I integrated linux host to AD using
  samba.
  when I run wbinfo -u it is listing all AD users.
  but when I pick any one of the user from o/p of previous command and ran
  webinfo -i for the user I am getting this error message, any idea ??
 
  #wbinfo -i xx
  Could not get info for user xx
  # rpm -qa | grep samba
  samba-3.5.10-114.el6.x86_64
  samba-common-3.5.10-114.el6.x86_64
  samba-client-3.5.10-114.el6.x86_64
  samba-winbind-clients-3.5.10-114.el6.x86_64
  samba-winbind-3.5.10-114.el6.x86_64
  #
 
  Thanks,



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba wbinfo error message Could not get info for user xxxxxx

2012-03-14 Thread kartheek katakam
Hi Dale,

I haven't seen anything being updated in the log file under  /var/log --
[log.smbd, log.winbindd] when I tried to run these commands in parallel.
Any particular log file do you want me have look into to ??

in /etc/samba/smb.conf file I updated it with following lines for idmap

workgroup = TEST

realm = TEST.LAB.COM

server string = Samba Server Version %v

security = ADS

password server = TEST.LAB.COM

log file = /var/log/samba/log.%m

max log size = 50

idmap backend = nss

idmap uid = 1-2

idmap gid = 1-2

template homedir = /home/%U

template shell = /bin/bash

winbind separator = +

winbind cache time = 10

winbind enum users = Yes

winbind enum groups = Yes

winbind use default domain = Yes

winbind nss info = rfc2307

idmap config TEST:schema_mode = rfc2307

idmap config TEST:range = 1-2

idmap config TEST:default = yes

idmap config TEST:backend = ad

cups options = raw

Thanks,
Kartheek.

On Wed, Mar 14, 2012 at 3:01 PM, Dale Schroeder 
d...@briannassaladdressing.com wrote:

 What error messages are you getting in the logs, and which idmap backend
 are you using?

 Dale



 On 03/14/2012 12:33 PM, kartheek katakam wrote:

 Thanks Bernd,

 but it was helpfull, I restarted the winbind service I still see the same
 issue.



 On Wed, Mar 14, 2012 at 1:06 PM, Bernd Markgraf
 bernd.markg...@med.ovgu.de**wrote:

  Hi,

 I've seen the same error today. Had to restart winbindd (after running
 for like 200days). That made things work nicely again.

  Bernd

 On Wed, 2012-03-14 at 12:28 -0400, kartheek katakam wrote:

 Hi Everyone,

 I am running into this issue, when I integrated linux host to AD using
 samba.
 when I run wbinfo -u it is listing all AD users.
 but when I pick any one of the user from o/p of previous command and ran
 webinfo -i for the user I am getting this error message, any idea ??

 #wbinfo -i xx
 Could not get info for user xx
 # rpm -qa | grep samba
 samba-3.5.10-114.el6.x86_64
 samba-common-3.5.10-114.el6.**x86_64
 samba-client-3.5.10-114.el6.**x86_64
 samba-winbind-clients-3.5.10-**114.el6.x86_64
 samba-winbind-3.5.10-114.el6.**x86_64
 #

 Thanks,





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Error while display user info using wbinfo command

2012-01-20 Thread kartheek katakam
Dale,

The installed version of Samba is 3.5.10-114.e16.
samba.x86_64   3.5.10-114.el6
@base
--
and I noticed error messages aswell on /var/log/samba/log.smbd
[2012/01/20 10:12:42.741585,  0] printing/print_cups.c:109(cups_connect)
  Unable to connect to CUPS server localhost:631 - Connection refused
[2012/01/20 10:12:42.742071,  0]
printing/print_cups.c:468(cups_async_callback)
  failed to retrieve printer list: NT_STATUS_UNSUCCESSFUL
[2012/01/20 10:12:42.742413,  0] smbd/server.c:281(remove_child_pid)
  Could not find child 6579 -- ignoring


Any idea,

Thanks,
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Error while display user info using wbinfo command

2012-01-17 Thread kartheek katakam
Hello,

I was trying to integrate AD to Cent OS 6 server. As part of it I was
running into these error, listed below. Authentication is successful
against the AD server using wbinfo, but cant able to list user information
using wbinfo. Not sure what might be the issue.

error message:
[2012/01/17 15:12:49.472876,  1]
winbindd/idmap_ad.c:651(idmap_ad_sids_to_unixids)

  Could not get unix ID


[root@HOSTNAME1V ~]# wbinfo -a z5073%Car108

plaintext password authentication succeeded

challenge/response password authentication succeeded

[root@HOSTNAME1V ~]# wbinfo -i z5073

Could not get info for user z5073

[root@HOSTNAME1V ~]#


Thanks  Regards,
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba