Arch Linux

lac38

Member

Registered: 2020-05-11

Posts: 1

Samba/Active Directory domain controller failed after kinit

I have a samba dc and it failed after the upgrade to samba 4.11. With samba 4.12 (samba-tool is now working) and I have tried to follow the upgrade process:
Add a second DC, move the role.

On the samba dc 4.12 I manage to start it.
If I do a kinit Administrator and I type a wrong password samba stay alive but if I type the right password it failed:

[2020/05/11 15:26:32.375467,  0] ../../source4/kdc/kdc-service-mit.c:344(mitkdc_server_done)
  The MIT KDC daemon died with exit status 6
[2020/05/11 15:26:32.376262,  0] ../../source4/smbd/service_task.c:36(task_server_terminate)
  task_server_terminate: task_server_terminate: [mitkdc child process exited]
[2020/05/11 15:26:32.391520,  0] ../../source4/smbd/server.c:377(samba_terminate)
  samba_terminate: samba_terminate of samba 493: mitkdc child process exited

I have tried to recreate a new domain from scratch and I have the same issue each time something authenticate.

I am completely lock. I will be obliged to roll back to an old backup.

WFV

Member

From: ☭USSA⛧⭒⭒⭒⭒

Registered: 2013-04-23

Posts: 290

Re: Samba/Active Directory domain controller failed after kinit

Maybe this? https://bbs.archlinux.org/viewtopic.php … 7#p1903807
from the link in papvlos post

---

∞ hard times make the strong, the strong make good times, good times make the weak, the weak make hard times ∞

papavlos

Member

Registered: 2017-09-23

Posts: 70

Re: Samba/Active Directory domain controller failed after kinit

No, I don't think it is the same bug. lac38 reports problems with AD/DC while me and rigred we are are suffering because of a bug in share access rights calculation.

@lac38, I'd recommend you going through samba mailing list posts, there are some active threads related to AD/DC, maybe you'll find something similar. If so, get yourself signed on to the mailing list to monitor their progress. Or even ask for a help - there are responsive and helpful people.