On 07/28/2015 11:44 AM, Steve Ankeny wrote:
On 07/28/2015 07:25 AM, Steve Ankeny wrote:
On 07/28/2015 03:49 AM, Rowland Penny wrote:
*update* --
I made the corrections to 'ocsmanager.ini' noted above to no avail.
IMO the 'dcerpc' calls in 'smb.conf' are shutting down Samba services.
### Configuration required by OpenChange server ###
#dsb:shema update allowed = true
You have a typo, it should be 'dsb:schema update allowed = true'
#dcerpc endpoint servers = +epmapper, +mapiproxy
Not sure you need '+epmapper' , I think if you run:
samba-tool testparm -v | grep 'dcerpc endpoint servers'
You will need to press enter twice, the result should show just what
servers are running now (of course you need to run the test with the
openchange lines commented out)
Rowland
thx, I'll give that a try
Rowland is *right* about not needing '+epmapper' when running
'samba-ad-dc'
It's already part of Samba Active Directory and not required in the
'smb.conf'
I've made the other change and will test the fix after hours. Thx.
*Apparently, I reported too soon!*
While several users were able to log into the domain, after about six
hours, it stopped allowing login.
Curiously, the 'samba-ad-dc' service was STILL running --
adam@sogo:~$ sudo initctl list | egrep 'samba|smb|nmb|winbind'
nmbd start/running
winbind stop/waiting
smbd stop/waiting
reload-smbd stop/waiting
samba-ad-dc start/running, process 875
adam@sogo:~$
However, when users tried to login, they received "Access denied!"
*Question*: How do I troubleshoot from this point forward?
Is there a log of failed logins? And, if not, is there a logging level
I can use to try to find the problem?
Thanks for any suggestions.
--
[email protected]
https://inverse.ca/sogo/lists