Messages

1

Installation and Upgrades / Could not connect to samba LDAP server: connect: Connection refused

« on: September 23, 2013, 04:50:32 pm »

Hi All,

I am having the following issue with a Zentyal server running as an additional DC, the other domain controllers are Zentyal as well.

The issue started happening after we lost power at one of our sites, now the entyal DC comes up, however the samba and DNS module in the dashboard refuse to start, this is the output of the log - /var/log/zentyal/zentyal.log;

2013/09/23 15:09:31 INFO> Service.pm:949 EBox::Module::Service::restartService - Restarting service for module: samba
2013/09/23 15:09:32 WARN> LDB.pm:193 EBox::LDB::safeConnect - Could not connect to samba LDAP server: connect: Connection refused, retrying. (1 attempts)
2013/09/23 15:09:34 INFO> SysvolSync.pm:204 EBox::Samba::SysvolSync::run - Samba sysvol synchronizer script started
2013/09/23 15:09:42 WARN> LDB.pm:193 EBox::LDB::safeConnect - Could not connect to samba LDAP server: connect: Connection refused, retrying. (100 attempts)
2013/09/23 15:09:52 WARN> LDB.pm:193 EBox::LDB::safeConnect - Could not connect to samba LDAP server: connect: Connection refused, retrying. (200 attempts)
2013/09/23 15:10:02 WARN> LDB.pm:193 EBox::LDB::safeConnect - Could not connect to samba LDAP server: connect: Connection refused, retrying. (300 attempts)
2013/09/23 15:10:02 DEBUG> LDB.pm:197 EBox::LDB::safeConnect - FATAL: Could not connect to samba LDAP server: connect: Connection refused
2013/09/23 15:10:02 ERROR> Service.pm:954 EBox::Module::Service::__ANON__ - Error restarting service: FATAL: Could not connect to samba LDAP server: connect: Connection refused
2013/09/23 15:10:07 INFO> Service.pm:949 EBox::Module::Service::restartService - Restarting service for module: samba
2013/09/23 15:10:08 WARN> LDB.pm:193 EBox::LDB::safeConnect - Could not connect to samba LDAP server: connect: Connection refused, retrying. (1 attempts)
2013/09/23 15:10:09 INFO> SysvolSync.pm:204 EBox::Samba::SysvolSync::run - Samba sysvol synchronizer script started
2013/09/23 15:10:18 WARN> LDB.pm:193 EBox::LDB::safeConnect - Could not connect to samba LDAP server: connect: Connection refused, retrying. (100 attempts)
2013/09/23 15:10:28 WARN> LDB.pm:193 EBox::LDB::safeConnect - Could not connect to samba LDAP server: connect: Connection refused, retrying. (200 attempts)
2013/09/23 15:10:38 WARN> LDB.pm:193 EBox::LDB::safeConnect - Could not connect to samba LDAP server: connect: Connection refused, retrying. (300 attempts)
2013/09/23 15:10:38 DEBUG> LDB.pm:197 EBox::LDB::safeConnect - FATAL: Could not connect to samba LDAP server: connect: Connection refused
2013/09/23 15:10:38 ERROR> Service.pm:954 EBox::Module::Service::__ANON__ - Error restarting service: FATAL: Could not connect to samba LDAP server: connect: Connection refused

I have tried to start the services manually within the CLI but with no luck.

Any suggestions on how I can get this back up and running?

Thanks

2

Installation and Upgrades / Re: http-proxy SSO (single sign on) zentyal 3.0 - problem

« on: September 19, 2013, 04:24:41 pm »

Hi,

Has anyone managed to find a solution to this? I am having the same issue as the others, "Cache access denied" when using SSO, disable SSO and it works fine. I am running a pure Samba4/Zentyal3 domain with Win7 and XP workstations.

I unfortunately cannot go through the process of reinistalling and following the steps as per the user above's suggestions as this is a live system.

Also, the solution mentioned by halban does not work either.

Any assistance would be appreciated.

3

Installation and Upgrades / Re: Samba4 Crash Zentyal

« on: November 16, 2012, 12:28:07 pm »

Thats excellent news, thanks Kernevil.

I really appreciate all the hard work you have put into this.

4

Installation and Upgrades / Re: Samba4 Crash Zentyal

« on: November 15, 2012, 06:33:21 pm »

Thanks.

I will be REALLY appreciative if you could solve this kernevil.

I am trying to implement Zentyal 3.0 in a production environment and at the moment this is a real show stopper for me. This is critical that I get implemented ASAP, as their current Resara server is showing signs of breaking down.

Thanks again for all your help.

5

Installation and Upgrades / Re: Samba4 Crash Zentyal

« on: November 12, 2012, 12:31:45 am »

Hi,

I have just updated File Sharing and Domain services to 3.0.7 and this is still happening.

Does anyone know if the Samba developers are aware of this issue?

6

Installation and Upgrades / Re: Samba4 Crash Zentyal

« on: November 08, 2012, 02:28:56 pm »

Thanks guys.

I have managed to reproduce the issues myself.

If I set a user to change their password on logon, then attempt to log into that username it crashes. A restart then fixes it, reproduced it 3 times now, same thing happens every time.

Just some more troubleshooting that I have done, this is what the Samba log reports when I try to login into a user that has the option checked to change pssword on next login:

Code: [Select]

Kerberos: AS-REQ test1@SITEST from ipv4:192.168.106.202:63114 for krbtgt/SITEST@SITEST
  Kerberos: Looking for PK-INIT(ietf) pa-data -- test1@SITEST
  Kerberos: Looking for PK-INIT(win2k) pa-data -- test1@SITEST
  Kerberos: Looking for ENC-TS pa-data -- test1@SITEST
  Kerberos: AS-REQ test1@SITEST from ipv4:192.168.106.202:63115 for krbtgt/SITEST@SITEST
  Kerberos: Looking for PK-INIT(ietf) pa-data -- test1@SITEST
  Kerberos: Looking for PK-INIT(win2k) pa-data -- test1@SITEST
  Kerberos: Looking for ENC-TS pa-data -- test1@SITEST
  Kerberos: ENC-TS Pre-authentication succeeded -- test1@SITEST using arcfour-hmac-md5
  Kerberos: ENC-TS pre-authentication succeeded -- test1@SITEST
  sam_account_ok: Account for user 'test1@SITEST' password must change!.
  auth_check_password_send: Checking password for unmapped user [SITEST]\[test1]@[WIN7-TEST]
  auth_check_password_send: mapped user is: [SITEST]\[test1]@[WIN7-TEST]
  ntlm_password_check: Interactive logon: NT password check failed for user test1
  auth_check_password_recv: sam_ignoredomain authentication for user [SITEST\test1] FAILED with error NT_STATUS_WRONG_PASSWORD

7

Installation and Upgrades / Re: Samba4 Crash Zentyal

« on: November 07, 2012, 09:20:37 am »

Ok - do you use the web interface to create accounts or RSAT tools?

8

Installation and Upgrades / Re: Samba4 Crash Zentyal

« on: November 06, 2012, 08:05:51 pm »

Yep.

Is there anything unique about your setup?

We are running this on a VM, using Proxmox 2. There is another guest on the host running Resara DC.

I have tried to replicate the issue in a lab and no matter what I can't seem to do it.

Is there anything that I have stated in the above that is the same as your situation?

I would really like to get to the bottom of this.

9

Installation and Upgrades / Samba4 Crash Zentyal

« on: October 20, 2012, 12:48:54 pm »

Hi Guys,

I am having an issue with running Zentyal 3 as a PDC using Samba4 RC2.

Right now I am in a testing phase - I have 2 workstations on this domain with a few user accounts created using RSAT.

The problem is that the Samba4 daemon seems to be crashing randomly. The symptom is that the workstations are no longer able to authenticate, it just keeps coming back saying that the Username and Password you have entered is incorrect (Windows 7 workstations). After a restart of the File and Sharing service in the dashboard the workstations are able to authenticate again. I have looked through the logs and nothing stands out. When this happens, I have also tried to run a kinit to get a kerberos ticket on the Zentyal PDC but it just comes back saying that no KDC could be contacted in the realm, once I restart the samba4 service it works again.

I was hoping someone could point me in the right direction on what the issue is? The only unique aspect of the environment is that there is already an existing domain on the network. Could they possibly be conflicting or something? Which I actually doubt because the other domain controller is a Samba4 Alpha16 and that is still running fine.

Thanks for any help.

10

Installation and Upgrades / Re: How to stop Zentyal from sourcing traffic out?

« on: March 12, 2012, 02:05:01 pm »

Thanks. Found it.

I assume I need to restart a daemon here for it to take affect? Can I just restart the firewall service?

11

Installation and Upgrades / How to stop Zentyal from sourcing traffic out?

« on: March 12, 2012, 10:04:42 am »

Hi,

I would like to stop Zentyal from sourcing traffic out as it's eth1 address before it gets to my internet router (I have a specific reason I need to do this).

Is there an iptables command or something in the GUI that will allow me to disable this?

Thanks for any help.