Discussion:
[Samba] NT_STATUS_INTERNAL_ERROR
Ricardo Pardim Claus
2016-07-25 17:27:10 UTC
Permalink
Dear,Samba updated to 4.4.5 version.The Samba is a secundary DC.I'm getting some authentication errors.
smbclient -k -L //domain.localsession setup failed: NT_STATUS_INTERNAL_ERROR
Using my PC when I try to access the \\sambadc, is asking User and Password.The logs appears this:
ctx setting sec (0, 0) - 0 = sec_ctx_stack_ndx[25/07/2016 14: 08: 04.581532, 5] ../libcli/security/security_token.c:53(security_token_debug)   Security token: (NULL)[25/07/2016 14: 08: 04.581539, 5] ../source3/auth/token_util.c:639(debug_unix_user_token)   UNIX token of user 0   Primary group is 0 and 0 contains supplementary groups[25/07/2016 14: 08: 04.581551, 5] ../source3/smbd/uid.c:425(smbd_change_to_root_user)   change_to_root_user: now uid = (0,0) gid = (0,0)[07/25/2016 14: 08: 04.581807 3] ../source3/smbd/server_exit.c:246(exit_server_common)   Server exit (NT_STATUS_CONNECTION_RESET)

What can be wrong in the settings?
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
Ricardo Pardim Claus
2016-07-25 18:21:05 UTC
Permalink
Correcting information.In the test environment, compiled Samba 4.4.5 package and entered the field as a secondary DC. The VM was not configured Samba.After joining the domain until then it seemed that everything was fine.I was looking for a solution to the "access denied" in sysvol.I decided to restart the server. When he came back, I started receiving the error NT_STATUS_INTERNAL_ERROR.

De: Ricardo Pardim Claus <***@yahoo.com.br>
Para: "***@lists.samba.org" <***@lists.samba.org>
Enviadas: Segunda-feira, 25 de Julho de 2016 14:27
Assunto: NT_STATUS_INTERNAL_ERROR

Dear,Samba updated to 4.4.5 version.The Samba is a secundary DC.I'm getting some authentication errors.
smbclient -k -L //domain.localsession setup failed: NT_STATUS_INTERNAL_ERROR
Using my PC when I try to access the \\sambadc, is asking User and Password.The logs appears this:
ctx setting sec (0, 0) - 0 = sec_ctx_stack_ndx[25/07/2016 14: 08: 04.581532, 5] ../libcli/security/security_token.c:53(security_token_debug)   Security token: (NULL)[25/07/2016 14: 08: 04.581539, 5] ../source3/auth/token_util.c:639(debug_unix_user_token)   UNIX token of user 0   Primary group is 0 and 0 contains supplementary groups[25/07/2016 14: 08: 04.581551, 5] ../source3/smbd/uid.c:425(smbd_change_to_root_user)   change_to_root_user: now uid = (0,0) gid = (0,0)[07/25/2016 14: 08: 04.581807 3] ../source3/smbd/server_exit.c:246(exit_server_common)   Server exit (NT_STATUS_CONNECTION_RESET)

What can be wrong in the settings?
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
Ricardo Pardim Claus
2016-07-26 11:35:14 UTC
Permalink
Dear Rowland,
Follows the requested information:DC Primary: Windows 2008 R2Secondary DC: Samba 4.4.5
Content smb.conf
[global]        #bind interfaces only = Yes        interfaces = lo eno16777984        netbios name = SRV14        realm = DOMAIN.LOCAL        server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate, dns        workgroup = DOMAIN        server role = active directory domain controller        comment =        #vfs objects = acl_xattr        #map acl inherit = yes        #store dos attributes = yes        log file = /var/log/samba/%m.log        log level = 9
[netlogon]        path = /usr/local/samba/var/locks/sysvol/domain.local/scripts        read only = No
[sysvol]        path = /usr/local/samba/var/locks/sysvol        read only = No

Content krb5.conf

[logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log
[libdefaults] dns_lookup_realm = false dns_lookup_kdc = true ticket_lifetime = 24h renew_lifetime = 7d forwardable = true rdns = false default_realm = DOMAIN.LOCAL default_ccache_name = KEYRING:persistent:%{uid}
[realms]# EXAMPLE.COM = {#  kdc = kerberos.example.com#  admin_server = kerberos.example.com# }
[domain_realm]# .example.com = EXAMPLE.COM# example.com = EXAMPLE.COM

I hope I have passed all the necessary information. If you need any more information, I ask you to let me know.Thank you!
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
Ricardo Pardim Claus
2016-07-26 11:41:55 UTC
Permalink
I apologize for the lack of standardization and alignment of text to post the answers. I will try to send the information a little more standardized and aligned.


Dear Rowland,
Follows the requested information:
DC Primary: Windows 2008 R2
Secondary DC: Samba 4.4.5

Content smb.conf

[global]
#bind interfaces only = Yes
interfaces = lo eno16777984
netbios name = SRV14
realm = DOMAIN.LOCAL
server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate, dns
workgroup = DOMAIN
server role = active directory domain controller
comment =
#vfs objects = acl_xattr
#map acl inherit = yes
#store dos attributes = yes
log file = /var/log/samba/%m.log
log level = 9

[netlogon]
path = /usr/local/samba/var/locks/sysvol/domain.local/scripts
read only = No


[sysvol]
path = /usr/local/samba/var/locks/sysvol
read only = No


Content krb5.conf


[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log

[libdefaults]
dns_lookup_realm = false
dns_lookup_kdc = true
ticket_lifetime = 24h
renew_lifetime = 7d
forwardable = true
rdns = false
default_realm = DOMAIN.LOCAL
default_ccache_name = KEYRING:persistent:%{uid}

[realms]
# EXAMPLE.COM = {
# kdc = kerberos.example.com
# admin_server = kerberos.example.com
# }

[domain_realm]
# .example.com = EXAMPLE.COM
# example.com = EXAMPLE.COM


I hope I have passed all the necessary information. If you need any more information, I ask you to let me know.
Thank you!
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
Ricardo Pardim Claus
2016-07-26 13:01:40 UTC
Permalink
Dear Rowland
Strange thing is that I do not receive notification on my email about your answers.

Here we run an internal DNS. Samba was configured with Bind 9 as secondary DNS.

When I put in domain.local settings, it is because we omit the company name. But the name of my domain ends with .local.

I disabled Avahi daemon.

When I try to run the command you quoted:
smbclient -k -L //srv.domain.local

I get the same error:
session setup failed: NT_STATUS_INTERNAL_ERROR

The command "kinit administrator" works perfectly.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
Reindl Harald
2016-07-26 13:08:05 UTC
Permalink
Post by Ricardo Pardim Claus
Dear Rowland
Strange thing is that I do not receive notification on my email about your answers.
Here we run an internal DNS. Samba was configured with Bind 9 as secondary DNS.
When I put in domain.local settings, it is because we omit the company name. But the name of my domain ends with .local.
I disabled Avahi daemon.
smbclient -k -L //srv.domain.local
session setup failed: NT_STATUS_INTERNAL_ERROR
The command "kinit administrator" works perfectly
you should not use .local
https://lists.samba.org/archive/samba/2015-January/188062.html

i bet /etc/nsswitch.conf is using "mdns4_minimal" before DNS
Ricardo Pardim Claus
2016-07-26 13:36:59 UTC
Permalink
This Samba 4 deployment job, is part of a project to replace
DC Windows 2008.
When we were testing the Samba 4.4.4 at any time we receive this error NT_STATUS_INTERNAL_ERROR.
The .local domain is a small network, with approximately 90 computers.
When it was set the domain name as empresa.local, the invez of empresa.com.br, the intention was to separate the internal domain of the external field, because when we try to raise the domain as empresa.com.br, DNS began to conflict with the external field, since we have an external domain registered as .com.br.
With regard to my domain is .local, I will not be able to follow up the implementation of a DC with Samba 4?

About nsswitch.conf, I do not get it right.
So I'll post the contents of this file to view.

#passwd: db files nisplus nis
#shadow: db files nisplus nis
#group: db files nisplus nis

passwd: files sss
shadow: files sss
group: files sss
#initgroups: files

#hosts: db files nisplus nis dns
hosts: files dns myhostname

# Example - obey only what nisplus tells us...
#services: nisplus [NOTFOUND=return] files
#networks: nisplus [NOTFOUND=return] files
#protocols: nisplus [NOTFOUND=return] files
#rpc: nisplus [NOTFOUND=return] files
#ethers: nisplus [NOTFOUND=return] files
#netmasks: nisplus [NOTFOUND=return] files

bootparams: nisplus [NOTFOUND=return] files

ethers: files
netmasks: files
networks: files
protocols: files
rpc: files
services: files sss

netgroup: files sss

publickey: nisplus

automount: files sss
aliases: files nisplus
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
L.P.H. van Belle
2016-07-26 13:44:38 UTC
Permalink
Yes it wil work fine, if correct configured.
But i see you use sssd, and i dont know anything of sssd.
Post de debug logs first..

About the .local ( and .lan ) these are reserved names.
https://en.wikipedia.org/wiki/.local
++> Microsoft recommendations
TechNet article 726016[5] cautioned against using .local:
…we do not recommend using unregistered suffixes, such as .local.
https://technet.microsoft.com/en-us/library/cc726016
But if you in a running .local domain DONT CHANGE IT, changeing a domain name is really not recommended.
Just keep it in mind for a new setup.

Greetz,

Louis
-----Oorspronkelijk bericht-----
Claus
Verzonden: dinsdag 26 juli 2016 15:37
Onderwerp: Re: [Samba] NT_STATUS_INTERNAL_ERROR
This Samba 4 deployment job, is part of a project to replace
DC Windows 2008.
When we were testing the Samba 4.4.4 at any time we receive this error
NT_STATUS_INTERNAL_ERROR.
The .local domain is a small network, with approximately 90 computers.
When it was set the domain name as empresa.local, the invez of
empresa.com.br, the intention was to separate the internal domain of the
external field, because when we try to raise the domain as empresa.com.br,
DNS began to conflict with the external field, since we have an external
domain registered as .com.br.
With regard to my domain is .local, I will not be able to follow up the
implementation of a DC with Samba 4?
About nsswitch.conf, I do not get it right.
So I'll post the contents of this file to view.
#passwd: db files nisplus nis
#shadow: db files nisplus nis
#group: db files nisplus nis
passwd: files sss
shadow: files sss
group: files sss
#initgroups: files
#hosts: db files nisplus nis dns
hosts: files dns myhostname
# Example - obey only what nisplus tells us...
#services: nisplus [NOTFOUND=return] files
#networks: nisplus [NOTFOUND=return] files
#protocols: nisplus [NOTFOUND=return] files
#rpc: nisplus [NOTFOUND=return] files
#ethers: nisplus [NOTFOUND=return] files
#netmasks: nisplus [NOTFOUND=return] files
bootparams: nisplus [NOTFOUND=return] files
ethers: files
netmasks: files
networks: files
protocols: files
rpc: files
services: files sss
netgroup: files sss
publickey: nisplus
automount: files sss
aliases: files nisplus
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
Ricardo Pardim Claus
2016-07-26 13:54:53 UTC
Permalink
Rowland:

I took the "dns" from "server services" line in smb.conf, then restart the Samba service.
The commands I have given, is running on the DC Samba

Run the command:

[***@srv14 ~]# kinit administrator
Password for ***@DOMAIN.LOCAL:


[***@srv14 ~]# klist -e
Ticket cache: KEYRING:persistent:0:0
Default principal: ***@DOMAIN.LOCAL

Valid starting Expires Service principal
26-07-2016 10:43:48 26-07-2016 20:43:48 krbtgt/***@DOMAIN.LOCAL
renew until 02-08-2016 10:43:46, Etype (skey, tkt): arcfour-hmac, aes256-cts-hmac-sha1-96
[***@srv14 ~]#


Louis:

I ran the following command to display the results:

smbclient -k -L //srv.domain.local -d5

INFO: Current debug levels:
all: 5
tdb: 5
printdrivers: 5
lanman: 5
smb: 5
rpc_parse: 5
rpc_srv: 5
rpc_cli: 5
passdb: 5
sam: 5
auth: 5
winbind: 5
vfs: 5
idmap: 5
quota: 5
acls: 5
locking: 5
msdfs: 5
dmapi: 5
registry: 5
scavenger: 5
dns: 5
ldb: 5
tevent: 5
lp_load_ex: refreshing parameters
Initialising global parameters
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
INFO: Current debug levels:
all: 5
tdb: 5
printdrivers: 5
lanman: 5
smb: 5
rpc_parse: 5
rpc_srv: 5
rpc_cli: 5
passdb: 5
sam: 5
auth: 5
winbind: 5
vfs: 5
idmap: 5
quota: 5
acls: 5
locking: 5
msdfs: 5
dmapi: 5
registry: 5
scavenger: 5
dns: 5
ldb: 5
tevent: 5
Processing section "[global]"
doing parameter interfaces = lo eno16777984
doing parameter netbios name = SRV14
doing parameter realm = DOMAIN.LOCAL
doing parameter server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate
doing parameter workgroup = DOMAIN
doing parameter server role = active directory domain controller
doing parameter comment =
doing parameter log file = /var/log/samba/%m.log
doing parameter log level = 9
pm_process() returned Yes
added interface lo ip=::1 bcast= netmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
added interface lo ip=127.0.0.1 bcast=127.255.255.255 netmask=255.0.0.0
added interface eno16777984 ip=172.16.16.3 bcast=172.16.17.255 netmask=255.255.254.0
Netbios name list:-
my_netbios_names[0]="SRV14"
Client started (version 4.4.5).
Opening cache file at /usr/local/samba/var/cache/gencache.tdb
Opening cache file at /usr/local/samba/var/lock/gencache_notrans.tdb
sitename_fetch: No stored sitename for DOMAIN.LOCAL
name srv13.domain.local#20 found.
Connecting to 172.16.16.19 at port 445
Socket options:
SO_KEEPALIVE = 0
SO_REUSEADDR = 0
SO_BROADCAST = 0
TCP_NODELAY = 1
TCP_KEEPCNT = 9
TCP_KEEPIDLE = 7200
TCP_KEEPINTVL = 75
IPTOS_LOWDELAY = 0
IPTOS_THROUGHPUT = 0
SO_REUSEPORT = 0
SO_SNDBUF = 87040
SO_RCVBUF = 367360
SO_SNDLOWAT = 1
SO_RCVLOWAT = 1
SO_SNDTIMEO = 0
SO_RCVTIMEO = 0
TCP_QUICKACK = 1
TCP_DEFER_ACCEPT = 0
session request ok
Doing spnego session setup (blob length=120)
got OID=1.3.6.1.4.1.311.2.2.30
got OID=1.2.840.48018.1.2.2
got OID=1.2.840.113554.1.2.2
got OID=1.2.840.113554.1.2.2.3
got OID=1.3.6.1.4.1.311.2.2.10
got principal=***@please_ignore
cli_session_setup_spnego: using target hostname not SPNEGO principal
cli_session_setup_spnego: guessed server principal=cifs/***@DOMAIN.LOCAL
GENSEC backend 'gssapi_spnego' registered
GENSEC backend 'gssapi_krb5' registered
GENSEC backend 'gssapi_krb5_sasl' registered
GENSEC backend 'spnego' registered
GENSEC backend 'schannel' registered
GENSEC backend 'naclrpc_as_system' registered
GENSEC backend 'sasl-EXTERNAL' registered
GENSEC backend 'ntlmssp' registered
GENSEC backend 'ntlmssp_resume_ccache' registered
GENSEC backend 'http_basic' registered
GENSEC backend 'http_ntlm' registered
GENSEC backend 'krb5' registered
GENSEC backend 'fake_gssapi_krb5' registered
Starting GENSEC mechanism spnego
Starting GENSEC submechanism gse_krb5
gss_acquire_creds failed for GSS_C_NO_NAME with [ No credentials were supplied, or the credentials were unavailable or inaccessible.: unknown mech-code 0 for mech 1 2 840 113554 1 2 2] -the caller may retry after a kinit.
Failed to start GENSEC client mech gse_krb5: NT_STATUS_INTERNAL_ERROR
SPNEGO login failed: An internal error occurred.
session setup failed: NT_STATUS_INTERNAL_ERROR
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
Ricardo Pardim Claus
2016-07-28 11:18:53 UTC
Permalink
Dear,
Does anyone have any idea what may be causing this error?
Even I had to leave off Samba, because I believe that due to NT_STATUS_INTERNAL_ERROR error, several desktops are presenting failure credentials when they try to access shares. After I left off Samba, the errors are gone.


------------------- Mensagem original -------------------------------
Assunto: Re: [Samba] NT_STATUS_INTERNAL_ERROR

Rowland:

I took the "dns" from "server services" line in smb.conf, then restart the Samba service.
The commands I have given, is running on the DC Samba

Run the command:

[***@srv14 ~]# kinit administrator
Password for ***@DOMAIN.LOCAL:


[***@srv14 ~]# klist -e
Ticket cache: KEYRING:persistent:0:0
Default principal: ***@DOMAIN.LOCAL

Valid starting Expires Service principal
26-07-2016 10:43:48 26-07-2016 20:43:48 krbtgt/***@DOMAIN.LOCAL
renew until 02-08-2016 10:43:46, Etype (skey, tkt): arcfour-hmac, aes256-cts-hmac-sha1-96
[***@srv14 ~]#


Louis:

I ran the following command to display the results:

smbclient -k -L //srv.domain.local -d5

INFO: Current debug levels:
all: 5
tdb: 5
printdrivers: 5
lanman: 5
smb: 5
rpc_parse: 5
rpc_srv: 5
rpc_cli: 5
passdb: 5
sam: 5
auth: 5
winbind: 5
vfs: 5
idmap: 5
quota: 5
acls: 5
locking: 5
msdfs: 5
dmapi: 5
registry: 5
scavenger: 5
dns: 5
ldb: 5
tevent: 5
lp_load_ex: refreshing parameters
Initialising global parameters
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
INFO: Current debug levels:
all: 5
tdb: 5
printdrivers: 5
lanman: 5
smb: 5
rpc_parse: 5
rpc_srv: 5
rpc_cli: 5
passdb: 5
sam: 5
auth: 5
winbind: 5
vfs: 5
idmap: 5
quota: 5
acls: 5
locking: 5
msdfs: 5
dmapi: 5
registry: 5
scavenger: 5
dns: 5
ldb: 5
tevent: 5
Processing section "[global]"
doing parameter interfaces = lo eno16777984
doing parameter netbios name = SRV14
doing parameter realm = DOMAIN.LOCAL
doing parameter server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate
doing parameter workgroup = DOMAIN
doing parameter server role = active directory domain controller
doing parameter comment =
doing parameter log file = /var/log/samba/%m.log
doing parameter log level = 9
pm_process() returned Yes
added interface lo ip=::1 bcast= netmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
added interface lo ip=127.0.0.1 bcast=127.255.255.255 netmask=255.0.0.0
added interface eno16777984 ip=172.16.16.3 bcast=172.16.17.255 netmask=255.255.254.0
Netbios name list:-
my_netbios_names[0]="SRV14"
Client started (version 4.4.5).
Opening cache file at /usr/local/samba/var/cache/gencache.tdb
Opening cache file at /usr/local/samba/var/lock/gencache_notrans.tdb
sitename_fetch: No stored sitename for DOMAIN.LOCAL
name srv13.domain.local#20 found.
Connecting to 172.16.16.19 at port 445
Socket options:
SO_KEEPALIVE = 0
SO_REUSEADDR = 0
SO_BROADCAST = 0
TCP_NODELAY = 1
TCP_KEEPCNT = 9
TCP_KEEPIDLE = 7200
TCP_KEEPINTVL = 75
IPTOS_LOWDELAY = 0
IPTOS_THROUGHPUT = 0
SO_REUSEPORT = 0
SO_SNDBUF = 87040
SO_RCVBUF = 367360
SO_SNDLOWAT = 1
SO_RCVLOWAT = 1
SO_SNDTIMEO = 0
SO_RCVTIMEO = 0
TCP_QUICKACK = 1
TCP_DEFER_ACCEPT = 0
session request ok
Doing spnego session setup (blob length=120)
got OID=1.3.6.1.4.1.311.2.2.30
got OID=1.2.840.48018.1.2.2
got OID=1.2.840.113554.1.2.2
got OID=1.2.840.113554.1.2.2.3
got OID=1.3.6.1.4.1.311.2.2.10
got principal=***@please_ignore
cli_session_setup_spnego: using target hostname not SPNEGO principal
cli_session_setup_spnego: guessed server principal=cifs/***@DOMAIN.LOCAL
GENSEC backend 'gssapi_spnego' registered
GENSEC backend 'gssapi_krb5' registered
GENSEC backend 'gssapi_krb5_sasl' registered
GENSEC backend 'spnego' registered
GENSEC backend 'schannel' registered
GENSEC backend 'naclrpc_as_system' registered
GENSEC backend 'sasl-EXTERNAL' registered
GENSEC backend 'ntlmssp' registered
GENSEC backend 'ntlmssp_resume_ccache' registered
GENSEC backend 'http_basic' registered
GENSEC backend 'http_ntlm' registered
GENSEC backend 'krb5' registered
GENSEC backend 'fake_gssapi_krb5' registered
Starting GENSEC mechanism spnego
Starting GENSEC submechanism gse_krb5
gss_acquire_creds failed for GSS_C_NO_NAME with [ No credentials were supplied, or the credentials were unavailable or inaccessible.: unknown mech-code 0 for mech 1 2 840 113554 1 2 2] -the caller may retry after a kinit.
Failed to start GENSEC client mech gse_krb5: NT_STATUS_INTERNAL_ERROR
SPNEGO login failed: An internal error occurred.

session setup failed: NT_STATUS_INTERNAL_ERROR
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
Ricardo Pardim Claus
2016-08-02 12:59:06 UTC
Permalink
Dear,I found the solution to the error: NT_STATUS_INTERNAL_ERRORThis error acontencia in Samba versions: 4.4.4, 4.4.5 and 4.5.0rc1.For my case, after checking the logs, something wrong about authentication.I solved the problem by releasing the ports and services (AD, DC, DNS, SMB, etc.) on the firewall. In Centos 7, I had already released these ports, but can not explain why he returned to block everything.the tip is recorded if someone will go through this problem.Greetings to all !
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
Ricardo Pardim Claus
2016-08-02 13:04:14 UTC
Permalink
To follow the historical post, follow the link:
[Samba] NT_STATUS_INTERNAL_ERROR


|   |
|   |   |   |   |   |
| [Samba] NT_STATUS_INTERNAL_ERROR[Samba] NT_STATUS_INTERNAL_ERROR Ricardo Pardim Claus ricardo.claus at yahoo.com.br Mon Jul 25 17:27:10 UTC 2016 Previous message: [Samba] Samba domain member and rfc2307 user IDs |
| |
| Visualizar em lists.samba.org | Visualizado por Yahoo |
| |
|   |


 

De: Ricardo Pardim Claus <***@yahoo.com.br>
Para: "***@lists.samba.org" <***@lists.samba.org>
Enviadas: Terça-feira, 2 de Agosto de 2016 9:59
Assunto: Re: [Samba] NT_STATUS_INTERNAL_ERROR

Dear,I found the solution to the error: NT_STATUS_INTERNAL_ERRORThis error acontencia in Samba versions: 4.4.4, 4.4.5 and 4.5.0rc1.For my case, after checking the logs, something wrong about authentication.I solved the problem by releasing the ports and services (AD, DC, DNS, SMB, etc.) on the firewall. In Centos 7, I had already released these ports, but can not explain why he returned to block everything.the tip is recorded if someone will go through this problem.Greetings to all !
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
L.P.H. van Belle
2016-07-26 13:30:31 UTC
Permalink
Can you run it again but now with the debug parameter.

smbclient -k -L //srv.domain.local -d3
or
smbclient -k -L //srv.domain.local -d5

and post that output again.

Greetz,

Louis
-----Oorspronkelijk bericht-----
Claus
Verzonden: dinsdag 26 juli 2016 15:02
Onderwerp: Re: [Samba] NT_STATUS_INTERNAL_ERROR
Dear Rowland
Strange thing is that I do not receive notification on my email about your
answers.
Here we run an internal DNS. Samba was configured with Bind 9 as secondary
DNS.
When I put in domain.local settings, it is because we omit the company
name. But the name of my domain ends with .local.
I disabled Avahi daemon.
smbclient -k -L //srv.domain.local
session setup failed: NT_STATUS_INTERNAL_ERROR
The command "kinit administrator" works perfectly.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
Continue reading on narkive:
Loading...