[gentoo-user] samba 3.0.21b issue

[gentoo-user] samba 3.0.21b issue

[Covington, Chris]

Hi all,

For some reason I can't get net-fs/samba-3.0.21b in an W2K3 AD domain 
to work properly unless I totally reboot the system.  Stopping and
restarting samba doesn't help.  Without a reboot I get these
errors:

[2006/03/20 15:31:39, 1] smbd/sesssetup.c:reply_spnego_kerberos(286)
  Username CORP\CAREEROFEVIL$ is invalid on this system
[2006/03/20 15:31:39, 1] smbd/sesssetup.c:reply_spnego_kerberos(286)
  Username CORP\CAREEROFEVIL$ is invalid on this system
[2006/03/20 15:31:52, 1] smbd/sesssetup.c:reply_spnego_kerberos(286)
  Username CORP\CAREEROFEVIL$ is invalid on this system
[2006/03/20 15:31:52, 1] smbd/sesssetup.c:reply_spnego_kerberos(286)
  Username CORP\CAREEROFEVIL$ is invalid on this system
[2006/03/20 15:29:02, 1] smbd/sesssetup.c:reply_spnego_kerberos(180)
  Failed to verify incoming ticket!
[2006/03/20 15:29:10, 1] smbd/sesssetup.c:reply_spnego_kerberos(180)
  Failed to verify incoming ticket!
[2006/03/20 15:29:11, 1] smbd/sesssetup.c:reply_spnego_kerberos(180)
  Failed to verify incoming ticket!

After an emerge the following etc-updates need attention:

1) /etc/pam.d/samba
/etc/pam.d/._cfg0000_samba
2) /etc/openldap/schema/samba.schema
/etc/openldap/schema/._cfg0000_samba.schema
3) /etc/samba/smb.conf.example
/etc/samba/._cfg0000_smb.conf.example

Which I replace with the new versions. 

I'd like to upgrade samba on some of my servers without actually
rebooting them.  How can I do this?

thanks
---
Chris Covington
IT
Plus One Health Management
75 Maiden Lane Suite 801
NY, NY 10038
646-312-6269
http://www.plusoneactive.com
-- 
gentoo-user@gentoo.org mailing list

[gentoo-user] Re: samba 3.0.21b issue

[Covington, Chris]

On Mon, Mar 20, 2006 at 04:18:14PM -0500, Covington, Chris wrote:
> Hi all,
> 
> For some reason I can't get net-fs/samba-3.0.21b in an W2K3 AD domain 
> to work properly unless I totally reboot the system.  Stopping and
> restarting samba doesn't help.  Without a reboot I get these
> errors:
> 
> [2006/03/20 15:31:39, 1] smbd/sesssetup.c:reply_spnego_kerberos(286)
>   Username CORP\CAREEROFEVIL$ is invalid on this system
> [2006/03/20 15:31:39, 1] smbd/sesssetup.c:reply_spnego_kerberos(286)
>   Username CORP\CAREEROFEVIL$ is invalid on this system
> [2006/03/20 15:31:52, 1] smbd/sesssetup.c:reply_spnego_kerberos(286)
>   Username CORP\CAREEROFEVIL$ is invalid on this system
> [2006/03/20 15:31:52, 1] smbd/sesssetup.c:reply_spnego_kerberos(286)
>   Username CORP\CAREEROFEVIL$ is invalid on this system
> [2006/03/20 15:29:02, 1] smbd/sesssetup.c:reply_spnego_kerberos(180)
>   Failed to verify incoming ticket!
> [2006/03/20 15:29:10, 1] smbd/sesssetup.c:reply_spnego_kerberos(180)
>   Failed to verify incoming ticket!
> [2006/03/20 15:29:11, 1] smbd/sesssetup.c:reply_spnego_kerberos(180)
>   Failed to verify incoming ticket!
> 
> After an emerge the following etc-updates need attention:
> 
> 1) /etc/pam.d/samba
> /etc/pam.d/._cfg0000_samba
> 2) /etc/openldap/schema/samba.schema
> /etc/openldap/schema/._cfg0000_samba.schema
> 3) /etc/samba/smb.conf.example
> /etc/samba/._cfg0000_smb.conf.example
> 
> Which I replace with the new versions. 
> 
> I'd like to upgrade samba on some of my servers without actually
> rebooting them.  How can I do this?

Duh, found the problem.  The /etc/init.d/samba init script doesn't seem
to kill the winbindd process:

grendel ccovington # ps -ef | grep winbind
root      7835     1  0 Feb15 ?        00:04:00 /usr/sbin/winbindd
root      7838  7835  0 Feb15 ?        00:00:02 /usr/sbin/winbindd
root     11479 11472  0 16:18 pts/0    00:00:00 grep winbind

I killed it, restarted samba and all is well.

---
Chris Covington
IT
Plus One Health Management
75 Maiden Lane Suite 801
NY, NY 10038
646-312-6269
http://www.plusoneactive.com
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Re: samba 3.0.21b issue

[Iain Buchanan]

On Mon, 2006-03-20 at 16:23 -0500, Covington, Chris wrote:
> Duh, found the problem.  The /etc/init.d/samba init script doesn't seem
> to kill the winbindd process:
> 
> grendel ccovington # ps -ef | grep winbind
> root      7835     1  0 Feb15 ?        00:04:00 /usr/sbin/winbindd
> root      7838  7835  0 Feb15 ?        00:00:02 /usr/sbin/winbindd
> root     11479 11472  0 16:18 pts/0    00:00:00 grep winbind

file a bug, so others can solve it too :)
-- 
Iain Buchanan <iain at netspace dot net dot au>

Fortune finishes the great quotations, #9

	A word to the wise is often enough to start an argument.

-- 
gentoo-user@gentoo.org mailing list