[Bug 1764853] Re: winbind returns PAM_AUTHINFO_UNAVAIL on first login after reboot

2018-04-20 Thread Andreas Hasenack
In fact, I was even able to login after I shut down the windows server,
because of the "winbind offline logon = Yes" setting. I got a notice
saying that the controller was offline, but logged in to the desktop
without further problems, launched applications, etc.

-- 
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/1764853

Title:
  winbind returns PAM_AUTHINFO_UNAVAIL on first login after reboot

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1764853/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 1764853] Re: winbind returns PAM_AUTHINFO_UNAVAIL on first login after reboot

2018-04-20 Thread Andreas Hasenack
Please attach these logs from when the login failure happens:
- /var/log/auth.log
- /var/log/syslog
- /var/log/samba/log*

I configured a VM with your smb.conf, joined a windows 2016 AD server
via net ads join -k and AD users can login just fine immediately after a
reboot.

I also used your netplan file, and I have no /etc/network/interfaces or
interfaces.d/* content. I didn't upgrade from xenial, though, this was a
fresh bionic install.

Since this is a VM I provisioned with uvt-kvm, there are a few differences from 
a normal desktop install:
- I did "apt install ubuntu-desktop" after provisioning the vm
- I removed the cloud-init package after provisioning
- my dns and dhcp server is not the AD server, although I used its DNS server 
temporarily when doing "net ads join" so that the server could be found

I could try a fresh bionic *desktop* install, I know it could configure
networking a bit differently, or even install a xenial desktop and then
upgrade, but let's start with the logs I requested above.

-- 
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/1764853

Title:
  winbind returns PAM_AUTHINFO_UNAVAIL on first login after reboot

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1764853/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 1764778] Re: Problems with SSSD + pam mount

2018-04-20 Thread Andreas Hasenack
Thanks for the feedback.

I haven't tried the sssd gpo controls myself yet, and I see you have
them set at "permissive", which tells me it would not be preventing
users from changing things. But let's say there is a bug in that area,
would the GPO controls be able to cause what you are seeing?

Can you also verify that all files under the user's home directory are
writable and owned by the actual user?

Bionic is shipping with sssd 1.16.1, some default might have changed
there, or a new feature. If you change "ad_gpo_access_control" to
"disabled", does that change anything?

Do you see anything related in the system logs? Check:
/var/log/syslog <-- gnome-shell logs go here as well
/var/log/sssd/*

-- 
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to libpam-mount in Ubuntu.
https://bugs.launchpad.net/bugs/1764778

Title:
  Problems with SSSD + pam mount

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libpam-mount/+bug/1764778/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 1752411] Re: bind9-host, avahi-daemon-check-dns.sh hang forever causes network connections to get stuck

2018-04-20 Thread Andreas Hasenack
I think that time is past, we were in beta freeze in the past week, and
are in final freeze now. Unless there is a clear test case showing under
which conditions this happens and how widespread it is, it's probably
best to start thinking in SRU terms.

It looks like a safe change, but since I don't understand the problem
entirely yet (when it happens, why), I can't say.

-- 
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to bind9 in Ubuntu.
https://bugs.launchpad.net/bugs/1752411

Title:
  bind9-host, avahi-daemon-check-dns.sh hang forever causes network
  connections to get stuck

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/avahi/+bug/1752411/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


Re: [Bug 1764853] Re: winbind returns PAM_AUTHINFO_UNAVAIL on first login after reboot

2018-04-20 Thread Andreas Hasenack
Ok, what are the contents of the netplan file?

On Fri, Apr 20, 2018, 04:31 msaxl <1764...@bugs.launchpad.net> wrote:

> /etc/netplan/ contains 01-network-manager-all.yaml, if I remove it I get
> no network connection.
> This systems seems to be already migrated to netplan.
>
> /etc/network/interfaces.d/ is empty, /etc/network/interfaces contains
> only the default lo interface.
>
> smb.conf:
> [global]
> workgroup = JDW
> realm = JDW.CONET
> security = ads
> idmap config * : backend = tdb
> idmap config * : range = 100-199
> idmap config JDW : backend = rid
> idmap config JDW : range = 126690-20
> template homedir = /home/%D/%U
> template shell = /bin/bash
> winbind use default domain = Yes
> winbind refresh tickets = Yes
> winbind offline logon = Yes
> winbind request timeout = 3
> kerberos method = secrets and keytab
>
>
> #winbind rpc only = yes
>
>
> client signing = yes
>
>
> client use spnego = yes
>
>
> store dos attributes = yes
>
>
> ea support = yes
>
> ** Attachment added: "logfiles"
>
> https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1764853/+attachment/5123369/+files/sambalog.tar.xz
>
> --
> You received this bug notification because you are subscribed to samba
> in Ubuntu.
> https://bugs.launchpad.net/bugs/1764853
>
> Title:
>   winbind returns PAM_AUTHINFO_UNAVAIL on first login after reboot
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1764853/+subscriptions
>

-- 
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/1764853

Title:
  winbind returns PAM_AUTHINFO_UNAVAIL on first login after reboot

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1764853/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs