[Samba] Trouble Connecting Windows 8.1 RSAT to Samba Domain

[Mike]

I saw the following thread in the samba list archives but no solution:

http://marc.info/?l=samba&m=141214808508452&w=2

Host OS: CentOS ver 7.1503
Samba: Version 4.1.17-SerNet-RedHat-11.el7
Samba4 is running with internal DNS.
I'm able to add a domain user with samba-tool and connect Win 8.1 client to
the domain.

When I run Microsoft Server Manager and try to "manage" the server using
Administrator credentials, I receive the following error:

"Target computer not accessible 5/4/2015."

The Server Manager activity notification states, "The refresh failed
because WinRM is not running and could not be started."

I have performed ipconfig /all on the Win 8.1 client and Samba4 box is
listed in the "DNS Server" output.

Does anyone know how to resolve the WinRM errors?

--------------------------------------------------

Sidenote: I'm curious how many Samba4 domain admins choose to use the RSAT
tools; or, whether most prefer to use samba-tool to config and manage the
domain users, groups, and services.

--------------------------------------------------

Thank you for your help.

[Mike]

Marc,

Sounds like a great presentation and I wish I could attend.
The steps are:

1. Downloaded and installed the RSAT for Windows 8.1 X64.

2. Log into Windows 8.1 client with Domain Administrator account.

3. Execute Server Manager.

4. From Server Manager Dashboard, I choose "Manage" from the top menu, and
then Add Servers.

5. The Add Servers screen shows up with the Active Directory Tab
highlighted. It already shows the samba server domain name. Example: if
full domain name is internal.example.com, what shows in the Location: field
is "internal".

6. I fill in the CN: a10 and click Find Now. The Samba server machine
name shows up in the field below. I highlight it and then click the ">"
button to make it show up in the "Selected" field to the right. Then click
OK.

7. I'm then back at the All Servers page and I click the Refresh option
under Tasks drop-down menu. The refresh fails and produces a red flag
icon. The error details state:

a10: Refresh failed with the following error: The RPC Server is
unavailable.
a10: Configuration refresh failed with the following error: The metadata
failed to be retrieved from the server, due to the following error: WinRM
cannot complete the operation. Verify that the specified computer name is
valid, that the computer is accessible over the network, and that a
firewall exception for the WinRM service is enabled and allows access from
this computer. By default, the WinRM firewall exception for public
profiles limits access to remote computers within the same local subnet.

The windows client is on the same local subnet.
The windows client can authenticate to the samba server using the domain
User account and/or the Administrator account.
All necessary ports are open on the samba server.
The computer name is correct and hostname -f reports
a10.internal.example.com.

I appreciate your help. Please let me know if there's anything else I can
provide.
Best regards,
Mike

Hello Mike,

Post by Mike
http://marc.info/?l=samba&m=141214808508452&w=2
Host OS: CentOS ver 7.1503
Samba: Version 4.1.17-SerNet-RedHat-11.el7
Samba4 is running with internal DNS.
I'm able to add a domain user with samba-tool and connect Win 8.1 client

to

Post by Mike
the domain.
When I run Microsoft Server Manager and try to "manage" the server using
"Target computer not accessible 5/4/2015."
The Server Manager activity notification states, "The refresh failed
because WinRM is not running and could not be started."
I have performed ipconfig /all on the Win 8.1 client and Samba4 box is
listed in the "DNS Server" output.

Can you give some step-by-step instructions, so I an try to reproduce it?
I just installed the RSAT, opened ADUC, DNS, etc. or started mmc.exe and
added the corresponding snap-ins.

Post by Mike
Sidenote: I'm curious how many Samba4 domain admins choose to use the

RSAT

Post by Mike
tools; or, whether most prefer to use samba-tool to config and manage the
domain users, groups, and services.

This answer is part of my SambaXP presentation (http://www.sambaxp.org/)
in two weeks. ;-)
Slides, raw data and a full report of the user survey I will publish
after the conference and announce here on the list, as well.
Regards,
Marc

[Mike]

Forgot to report: WinRM Service is active as process ID 292 on the windows
client box.
Status "Running."

Post by Mike
Marc,
Sounds like a great presentation and I wish I could attend.
1. Downloaded and installed the RSAT for Windows 8.1 X64.
2. Log into Windows 8.1 client with Domain Administrator account.
3. Execute Server Manager.
4. From Server Manager Dashboard, I choose "Manage" from the top menu,
and then Add Servers.
5. The Add Servers screen shows up with the Active Directory Tab
highlighted. It already shows the samba server domain name. Example: if
field is "internal".
6. I fill in the CN: a10 and click Find Now. The Samba server machine
name shows up in the field below. I highlight it and then click the ">"
button to make it show up in the "Selected" field to the right. Then click
OK.
7. I'm then back at the All Servers page and I click the Refresh option
under Tasks drop-down menu. The refresh fails and produces a red flag
a10: Refresh failed with the following error: The RPC Server is
unavailable.
a10: Configuration refresh failed with the following error: The metadata
failed to be retrieved from the server, due to the following error: WinRM
cannot complete the operation. Verify that the specified computer name is
valid, that the computer is accessible over the network, and that a
firewall exception for the WinRM service is enabled and allows access from
this computer. By default, the WinRM firewall exception for public
profiles limits access to remote computers within the same local subnet.
The windows client is on the same local subnet.
The windows client can authenticate to the samba server using the domain
User account and/or the Administrator account.
All necessary ports are open on the samba server.
The computer name is correct and hostname -f reports
a10.internal.example.com.
I appreciate your help. Please let me know if there's anything else I can
provide.
Best regards,
Mike

Hello Mike,

Post by Mike
http://marc.info/?l=samba&m=141214808508452&w=2
Host OS: CentOS ver 7.1503
Samba: Version 4.1.17-SerNet-RedHat-11.el7
Samba4 is running with internal DNS.
I'm able to add a domain user with samba-tool and connect Win 8.1

client to

Post by Mike
the domain.
When I run Microsoft Server Manager and try to "manage" the server using
"Target computer not accessible 5/4/2015."
The Server Manager activity notification states, "The refresh failed
because WinRM is not running and could not be started."
I have performed ipconfig /all on the Win 8.1 client and Samba4 box is
listed in the "DNS Server" output.

Can you give some step-by-step instructions, so I an try to reproduce it?
I just installed the RSAT, opened ADUC, DNS, etc. or started mmc.exe and
added the corresponding snap-ins.

Post by Mike
Sidenote: I'm curious how many Samba4 domain admins choose to use the

RSAT

Post by Mike
tools; or, whether most prefer to use samba-tool to config and manage

the

Post by Mike
domain users, groups, and services.

This answer is part of my SambaXP presentation (http://www.sambaxp.org/)
in two weeks. ;-)
Slides, raw data and a full report of the user survey I will publish
after the conference and announce here on the list, as well.
Regards,
Marc

[Mike]

Hello Mike,

Post by Mike
7. I'm then back at the All Servers page and I click the Refresh option
under Tasks drop-down menu. The refresh fails and produces a red flag

Right. I can reproduce this.
I don't know how the Server Manager talks to the machines - if it's RPC or
something else. You can file a bug report/feature request in bugzilla, to
track this, if it's not already there. Please add your steps and a level 10
debug log.
However, you can run all required tools from outside directly and without
- Open control panel
- Go to "administrative tools"
There you find ADUC (e. g. for user/group management), DNS, Sites &
Services, Group Policy Management. This are the most common tools you
require and most thinks work like expected.
Regards,
Marc

1. Well this is great news to me that you're able to reproduce the error:
it's nice to know every once in a while that one's lack of skill and
knowledge is not the issue. <<grin>>

2. GOLD!! I have been scouring materials trying to figure out whether the
server manager is absolutely necessary to accomplish many of the items
found in the User Documentation on the Samba Wiki. If I can accomplish all
the same configuration operations via Admin Tools, then all is well.

Thank you so much for you time and help.

Best,
Mike

[Andrey Repin]

Greetings, Mike!

Post by Mike
2. GOLD!! I have been scouring materials trying to figure out whether the
server manager is absolutely necessary to accomplish many of the items
found in the User Documentation on the Samba Wiki. If I can accomplish all
the same configuration operations via Admin Tools, then all is well.
Thank you so much for you time and help.

If you didn't notice, the wiki does not even mention the installation of
server manager in first place.
--
With best regards,
Andrey Repin
Tuesday, May 5, 2015 01:01:01

Sorry for my terrible english...

[Mike]

Andrey, I don't believe that's correct.

https://wiki.samba.org/index.php/Installing_RSAT_on_Windows_for_AD_Management.


RSAT is the server manager.

Post by Andrey Repin
Greetings, Mike!

Post by Mike
2. GOLD!! I have been scouring materials trying to figure out whether

the

Post by Mike
server manager is absolutely necessary to accomplish many of the items
found in the User Documentation on the Samba Wiki. If I can accomplish

all

Post by Mike
the same configuration operations via Admin Tools, then all is well.
Thank you so much for you time and help.

If you didn't notice, the wiki does not even mention the installation of
server manager in first place.
--
With best regards,
Andrey Repin
Tuesday, May 5, 2015 01:01:01
Sorry for my terrible english...

[Andrey Repin]

Greetings, Mike!

Post by Mike

Post by Andrey Repin

Post by Mike
2. GOLD!! I have been scouring materials trying to figure out whether

the

Post by Mike
server manager is absolutely necessary to accomplish many of the items
found in the User Documentation on the Samba Wiki. If I can accomplish

all

Post by Mike
the same configuration operations via Admin Tools, then all is well.
Thank you so much for you time and help.

If you didn't notice, the wiki does not even mention the installation of
server manager in first place.

Andrey, I don't believe that's correct.
https://wiki.samba.org/index.php/Installing_RSAT_on_Windows_for_AD_Management.
RSAT is the server manager.

RSAT is a set of AD management tools.
"Server Manager" is just one of them. From the link you provided, the (rather
useless for non-English readers) image:
Loading Image...
The second checkbox from the bottom. It isn't marked.

P.S.
I would appreciate, if you don't top-post.
It makes messages unnecessary hard to read.
--
With best regards,
Andrey Repin
Tuesday, May 5, 2015 07:47:37

Sorry for my terrible english...