samba share et et auth avec Active Directory

nunux
Messages : 10
Inscription : 29 novembre 2017, 13:59

samba share et et auth avec Active Directory

Message par nunux » 27 juin 2018, 17:24

Bonjour,

Je dois configurer les points suivant sur un Centos 7

login avec compte Active Directory --> ok

share samba avec restriction des droits d'accès fixés par groupe Active Directory
C'est ce point qui pose problème...

Ma config. login avec comptes AD, j'ai suivi ce how-to et cet aspect fonctionne correctement:
https://www.linuxtechi.com/integrate-rh ... directory/

Code : Tout sélectionner

[root@SRV-XXXXXXX-02 /]# realm list
XXX.local
  type: kerberos
  realm-name: XXX.LOCAL
  domain-name: XXX.local
  configured: kerberos-member
  server-software: active-directory
  client-software: sssd
  required-package: oddjob
  required-package: oddjob-mkhomedir
  required-package: sssd
  required-package: adcli
  required-package: samba-common-tools
  login-formats: %U@xxxxx.local
  login-policy: allow-realm-logins
[root@SRV-XXX-02 /]#
Rien à dire ici, je peux me connecter correctement avec un compte déclaré uniquement dans l'AD Windows 2012.
Ensuite, configuration d'un share samba, j'ai suivi le tuto ici:
http://www.hexblot.com/blog/centos-7-ac ... -and-samba



Ma config Samba fonctionne correctement avec cette configuration toutes "portes ouvertes":

Code : Tout sélectionner

workgroup = XXXXX.local
server string = Samba Server %v
#netbios name = SRV-XXXXXX-02
security = user
guest account = nobody
map to guest = bad user
dns proxy = no
# hosts allow = 10.60.0.59
hosts allow = ALL
#usershare allow guests = yes

...

[toto]
  path = /home/toto
  public = yes
  browsable = yes
  writable = yes
  guest ok = yes
  create mode = 0666
  #create mask = 0777
  directory mode = 0777
  force user = nobody
  force group = nobody
Mais je vous l'accorde, pas bien difficile en ouvrant tout !

Dès que je tente une configuration basée sur les droits Active Directory

Core-dumps en série déposés dans la racine du serveur et logs qui se remplissent avec des message du genre "Panic":

et le share n'apparaît pas dans Windows.
Windows Error --> Windows cannot access \\srv-xxx\myshare.

Oui je sais, vous devez en avoir marre du nombre de messages remontant ce genre de problème... Mais j'ai pas mal cherché et ne sais plus trop quoi faire... Ce n'est pas mon installation Samba qui est défectueuse étant donne que celle-ci fonctionne en ouvrant tous les accès

config utilisant des droits fixés dans l'AD:

Code : Tout sélectionner

[root@SRV-ELDSHARE-02 samba]# cat smb.conf
[global]
        workgroup = XXXX.local
        server string = Samba Server Version %v

bind interfaces only = True
interfaces = ens160 10.60.1.139

        # Add the IPs / subnets allowed acces to the server in general.
        # The following allows local and 10.0.*.* access
        hosts allow = 127. 10.60.

        log file = /var/log/samba/log.%m
        max log size = 50

        security = ads
        encrypt passwords = yes
        passdb backend = tdbsam
        realm = XXXX.local

        # Not interested in printers
        load printers = no
        cups options = raw

        # This stops an annoying message from appearing in logs
        printcap name = /dev/null

[myshare]
  comment = My shared folder
  path = /var/myshare
  public = no
  writable = yes
  guest ok = no
  valid users = @"grp_scrt_id_rw@XXXX.local"
[root@SRV-XXXXX-02 samba]#
Et qui débouche sur les erreurs suvantes et génération de core dumps:

Code : Tout sélectionner

Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]: [2018/06/27 16:45:13.039388,  0] ../lib/util/fault.c:78(fault_report)
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:  ===============================================================
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]: [2018/06/27 16:45:13.039462,  0] ../lib/util/fault.c:79(fault_report)
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:  INTERNAL ERROR: Signal 11 in pid 2510 (4.7.1)
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:  Please read the Trouble-Shooting section of the Samba HOWTO
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]: [2018/06/27 16:45:13.039492,  0] ../lib/util/fault.c:81(fault_report)
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:  ===============================================================
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]: [2018/06/27 16:45:13.039512,  0] ../source3/lib/util.c:804(smb_panic_s3)
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:  PANIC (pid 2510): internal error
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]: [2018/06/27 16:45:13.040344,  0] ../source3/lib/util.c:915(log_stack_trace)
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:  BACKTRACE: 37 stack frames:
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #0 /lib64/libsmbconf.so.0(log_stack_trace+0x1a) [0x7f38ce763a3a]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #1 /lib64/libsmbconf.so.0(smb_panic_s3+0x20) [0x7f38ce763b10]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #2 /lib64/libsamba-util.so.0(smb_panic+0x2f) [0x7f38d085eeaf]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #3 /lib64/libsamba-util.so.0(+0x250c6) [0x7f38d085f0c6]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #4 /lib64/libpthread.so.0(+0xf5e0) [0x7f38d0cc65e0]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #5 /usr/lib64/samba/libgse-samba4.so(+0x9530) [0x7f38c8dcf530]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #6 /usr/lib64/samba/libgse-samba4.so(gse_krb5_get_server_keytab+0x87) [0x7f38c8dcff07]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #7 /usr/lib64/samba/libgse-samba4.so(+0xc1d8) [0x7f38c8dd21d8]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #8 /usr/lib64/samba/libgensec-samba4.so(+0x19eba) [0x7f38c8bb4eba]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #9 /usr/lib64/samba/libgensec-samba4.so(gensec_start_mech_by_ops+0xc) [0x7f38c8bb5cbc]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #10 /usr/lib64/samba/libgensec-samba4.so(+0xac5c) [0x7f38c8ba5c5c]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #11 /usr/lib64/samba/libgensec-samba4.so(+0xc214) [0x7f38c8ba7214]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #12 /usr/lib64/samba/libgensec-samba4.so(gensec_update_ev+0x7f) [0x7f38c8bb46cf]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #13 /usr/lib64/samba/libgensec-samba4.so(gensec_update+0x17) [0x7f38c8bb47c7]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #14 /usr/lib64/samba/libsmbd-base-samba4.so(negprot_spnego+0xa9) [0x7f38d03fef09]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #15 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_request_process_negprot+0x2ca) [0x7f38d047930a]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #16 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_request_dispatch+0x1bcc) [0x7f38d047609c]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #17 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_process_negprot+0x370) [0x7f38d0478ac0]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #18 /usr/lib64/samba/libsmbd-base-samba4.so(reply_negprot+0x72e) [0x7f38d03ffe7e]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #19 /usr/lib64/samba/libsmbd-base-samba4.so(+0x19ec90) [0x7f38d0460c90]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #20 /usr/lib64/samba/libsmbd-base-samba4.so(+0x1a0a30) [0x7f38d0462a30]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #21 /usr/lib64/samba/libsmbd-base-samba4.so(+0x1a2111) [0x7f38d0464111]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #22 /lib64/libtevent.so.0(+0xaedb) [0x7f38cd16fedb]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #23 /lib64/libtevent.so.0(+0x92a7) [0x7f38cd16e2a7]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #24 /lib64/libtevent.so.0(_tevent_loop_once+0x9d) [0x7f38cd16a0cd]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #25 /lib64/libtevent.so.0(tevent_common_loop_wait+0x1b) [0x7f38cd16a2fb]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #26 /lib64/libtevent.so.0(+0x9247) [0x7f38cd16e247]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #27 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_process+0x6e4) [0x7f38d0465444]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #28 /usr/sbin/smbd(+0xd1d4) [0x5587217c91d4]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #29 /lib64/libtevent.so.0(+0xaedb) [0x7f38cd16fedb]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #30 /lib64/libtevent.so.0(+0x92a7) [0x7f38cd16e2a7]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #31 /lib64/libtevent.so.0(_tevent_loop_once+0x9d) [0x7f38cd16a0cd]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #32 /lib64/libtevent.so.0(tevent_common_loop_wait+0x1b) [0x7f38cd16a2fb]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #33 /lib64/libtevent.so.0(+0x9247) [0x7f38cd16e247]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #34 /usr/sbin/smbd(main+0x1afe) [0x5587217c425e]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #35 /lib64/libc.so.6(__libc_start_main+0xf5) [0x7f38ccdc3c05]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:   #36 /usr/sbin/smbd(+0x8571) [0x5587217c4571]
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]: [2018/06/27 16:45:13.040740,  0] ../source3/lib/dumpcore.c:318(dump_core)
Jun 27 16:45:13 SRV-XXXXXXXX-02 smbd[2510]:  coredump is handled by helper binary specified at /proc/sys/kernel/core_pattern
Jun 27 16:45:13 SRV-XXXXXXXX-02 abrt-hook-ccpp: Process 2510 (smbd) of user 0 killed by SIGABRT - dumping core
Jun 27 16:45:13 SRV-XXXXXXXX-02 abrt-server: Duplicate: core backtrace
Jun 27 16:45:13 SRV-XXXXXXXX-02 abrt-server: DUP_OF_DIR: /var/spool/abrt/ccpp-2018-06-27-16:18:37-1991
Jun 27 16:45:13 SRV-XXXXXXXX-02 abrt-server: Deleting problem directory ccpp-2018-06-27-16:45:13-2510 (dup of ccpp-2018-06-27-16:18:37-1991)
Jun 27 16:45:13 SRV-XXXXXXXX-02 abrt-server: Email address of sender was not specified. Would you like to do so now? If not, 'user@localhost' is to be used [y/N]
Jun 27 16:45:13 SRV-XXXXXXXX-02 abrt-server: Email address of receiver was not specified. Would you like to do so now? If not, 'root@localhost' is to be used [y/N]
Jun 27 16:45:13 SRV-XXXXXXXX-02 abrt-server: Sending an email...
Jun 27 16:45:13 SRV-XXXXXXXX-02 abrt-server: Sending a notification email to: root@localhost
Jun 27 16:45:13 SRV-XXXXXXXX-02 abrt-server: Email was sent to: root@localhost
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]: [2018/06/27 16:45:14.029391,  0] ../lib/util/fault.c:78(fault_report)
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:  ===============================================================
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]: [2018/06/27 16:45:14.029472,  0] ../lib/util/fault.c:79(fault_report)
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:  INTERNAL ERROR: Signal 11 in pid 2522 (4.7.1)
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:  Please read the Trouble-Shooting section of the Samba HOWTO
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]: [2018/06/27 16:45:14.029501,  0] ../lib/util/fault.c:81(fault_report)
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:  ===============================================================
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]: [2018/06/27 16:45:14.029522,  0] ../source3/lib/util.c:804(smb_panic_s3)
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:  PANIC (pid 2522): internal error
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]: [2018/06/27 16:45:14.030327,  0] ../source3/lib/util.c:915(log_stack_trace)
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:  BACKTRACE: 37 stack frames:
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #0 /lib64/libsmbconf.so.0(log_stack_trace+0x1a) [0x7f38ce763a3a]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #1 /lib64/libsmbconf.so.0(smb_panic_s3+0x20) [0x7f38ce763b10]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #2 /lib64/libsamba-util.so.0(smb_panic+0x2f) [0x7f38d085eeaf]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #3 /lib64/libsamba-util.so.0(+0x250c6) [0x7f38d085f0c6]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #4 /lib64/libpthread.so.0(+0xf5e0) [0x7f38d0cc65e0]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #5 /usr/lib64/samba/libgse-samba4.so(+0x9530) [0x7f38c8dcf530]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #6 /usr/lib64/samba/libgse-samba4.so(gse_krb5_get_server_keytab+0x87) [0x7f38c8dcff07]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #7 /usr/lib64/samba/libgse-samba4.so(+0xc1d8) [0x7f38c8dd21d8]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #8 /usr/lib64/samba/libgensec-samba4.so(+0x19eba) [0x7f38c8bb4eba]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #9 /usr/lib64/samba/libgensec-samba4.so(gensec_start_mech_by_ops+0xc) [0x7f38c8bb5cbc]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #10 /usr/lib64/samba/libgensec-samba4.so(+0xac5c) [0x7f38c8ba5c5c]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #11 /usr/lib64/samba/libgensec-samba4.so(+0xc214) [0x7f38c8ba7214]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #12 /usr/lib64/samba/libgensec-samba4.so(gensec_update_ev+0x7f) [0x7f38c8bb46cf]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #13 /usr/lib64/samba/libgensec-samba4.so(gensec_update+0x17) [0x7f38c8bb47c7]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #14 /usr/lib64/samba/libsmbd-base-samba4.so(negprot_spnego+0xa9) [0x7f38d03fef09]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #15 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_request_process_negprot+0x2ca) [0x7f38d047930a]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #16 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_request_dispatch+0x1bcc) [0x7f38d047609c]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #17 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_process_negprot+0x370) [0x7f38d0478ac0]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #18 /usr/lib64/samba/libsmbd-base-samba4.so(reply_negprot+0x72e) [0x7f38d03ffe7e]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #19 /usr/lib64/samba/libsmbd-base-samba4.so(+0x19ec90) [0x7f38d0460c90]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #20 /usr/lib64/samba/libsmbd-base-samba4.so(+0x1a0a30) [0x7f38d0462a30]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #21 /usr/lib64/samba/libsmbd-base-samba4.so(+0x1a2111) [0x7f38d0464111]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #22 /lib64/libtevent.so.0(+0xaedb) [0x7f38cd16fedb]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #23 /lib64/libtevent.so.0(+0x92a7) [0x7f38cd16e2a7]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #24 /lib64/libtevent.so.0(_tevent_loop_once+0x9d) [0x7f38cd16a0cd]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #25 /lib64/libtevent.so.0(tevent_common_loop_wait+0x1b) [0x7f38cd16a2fb]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #26 /lib64/libtevent.so.0(+0x9247) [0x7f38cd16e247]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #27 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_process+0x6e4) [0x7f38d0465444]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #28 /usr/sbin/smbd(+0xd1d4) [0x5587217c91d4]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #29 /lib64/libtevent.so.0(+0xaedb) [0x7f38cd16fedb]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #30 /lib64/libtevent.so.0(+0x92a7) [0x7f38cd16e2a7]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #31 /lib64/libtevent.so.0(_tevent_loop_once+0x9d) [0x7f38cd16a0cd]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #32 /lib64/libtevent.so.0(tevent_common_loop_wait+0x1b) [0x7f38cd16a2fb]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #33 /lib64/libtevent.so.0(+0x9247) [0x7f38cd16e247]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #34 /usr/sbin/smbd(main+0x1afe) [0x5587217c425e]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #35 /lib64/libc.so.6(__libc_start_main+0xf5) [0x7f38ccdc3c05]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:   #36 /usr/sbin/smbd(+0x8571) [0x5587217c4571]
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]: [2018/06/27 16:45:14.030669,  0] ../source3/lib/dumpcore.c:318(dump_core)
Jun 27 16:45:14 SRV-XXXXXXXX-02 smbd[2522]:  coredump is handled by helper binary specified at /proc/sys/kernel/core_pattern
Jun 27 16:45:14 SRV-XXXXXXXX-02 abrt-hook-ccpp: Process 2522 (smbd) of user 0 killed by SIGABRT - ignoring (repeated crash)
Jun 27 16:45:14 SRV-XXXXXXXX-02 abrt-hook-ccpp: Saved core dump of pid 2522 to core.2522 at / (3436544 bytes)
Jun 27 16:47:53 SRV-XXXXXXXX-02 nmbd[2479]: [2018/06/27 16:47:53.921156,  0] ../source3/nmbd/nmbd_namequery.c:109(query_name_response)
Jun 27 16:47:53 SRV-XXXXXXXX-02 nmbd[2479]:  query_name_response: Multiple (2) responses received for a query on subnet 10.60.1.139 for name ELDORA.LOCAL<1d>.
Jun 27 16:47:53 SRV-XXXXXXXX-02 nmbd[2479]:  This response was from IP 10.60.1.125, reporting an IP address of 10.60.1.125.
Jun 27 16:50:01 SRV-XXXXXXXX-02 systemd: Started Session 15 of user root.
Jun 27 16:50:01 SRV-XXXXXXXX-02 systemd: Starting Session 15 of user root.
Jun 27 16:52:56 SRV-XXXXXXXX-02 nmbd[2479]: [2018/06/27 16:52:56.735115,  0] ../source3/nmbd/nmbd_namequery.c:109(query_name_response)
Jun 27 16:52:56 SRV-XXXXXXXX-02 nmbd[2479]:  query_name_response: Multiple (2) responses received for a query on subnet 10.60.1.139 for name ELDORA.LOCAL<1d>.
Jun 27 16:52:56 SRV-XXXXXXXX-02 nmbd[2479]:  This response was from IP 10.60.1.125, reporting an IP address of 10.60.1.125.
Jun 27 16:57:58 SRV-XXXXXXXX-02 nmbd[2479]: [2018/06/27 16:57:58.129855,  0] ../source3/nmbd/nmbd_namequery.c:109(query_name_response)
Jun 27 16:57:58 SRV-XXXXXXXX-02 nmbd[2479]:  query_name_response: Multiple (2) responses received for a query on subnet 10.60.1.139 for name ELDORA.LOCAL<1d>.
Jun 27 16:57:58 SRV-XXXXXXXX-02 nmbd[2479]:  This response was from IP 10.60.1.125, reporting an IP address of 10.60.1.125.
Jun 27 16:59:15 SRV-XXXXXXXX-02 dbus[820]: [system] Activating via systemd: service name='org.freedesktop.realmd' unit='realmd.service'
Jun 27 16:59:15 SRV-XXXXXXXX-02 systemd: Starting Realm and Domain Configuration...
Jun 27 16:59:15 SRV-XXXXXXXX-02 dbus[820]: [system] Successfully activated service 'org.freedesktop.realmd'
Jun 27 16:59:15 SRV-XXXXXXXX-02 systemd: Started Realm and Domain Configuration.
Jun 27 17:00:01 SRV-XXXXXXXX-02 systemd: Started Session 16 of user root.
Jun 27 17:00:01 SRV-XXXXXXXX-02 systemd: Starting Session 16 of user root.
Jun 27 17:01:01 SRV-XXXXXXXX-02 systemd: Started Session 17 of user root.
Jun 27 17:01:01 SRV-XXXXXXXX-02 systemd: Starting Session 17 of user root.
Jun 27 17:02:58 SRV-XXXXXXXX-02 nmbd[2479]: [2018/06/27 17:02:58.572536,  0] ../source3/nmbd/nmbd_namequery.c:109(query_name_response)
Jun 27 17:02:58 SRV-XXXXXXXX-02 nmbd[2479]:  query_name_response: Multiple (2) responses received for a query on subnet 10.60.1.139 for name ELDORA.LOCAL<1d>.
Jun 27 17:02:58 SRV-XXXXXXXX-02 nmbd[2479]:  This response was from IP 10.60.1.125, reporting an IP address of 10.60.1.125.
Auriez-vous une piste ?
Peut-être un package manquant pour gérer samba/AD et autres ?
Mais je ne trouve pas...

Encore une précision:

Code : Tout sélectionner

[root@SRV-XXXX-02 samba]# grep disabled /etc/sysconfig/selinux
#     disabled - No SELinux policy is loaded.
SELINUX=disabled
[root@SRV-XXXX-02 samba]#

[root@SRV-XXXX-02 samba]# service firewalld status
Redirecting to /bin/systemctl status firewalld.service
firewalld.service - firewalld - dynamic firewall daemon
   Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled; vendor preset: enabled)
   Active: inactive (dead)
     Docs: man:firewalld(1)
[root@SRV-XXXXC-02 samba]#


Merci d'avance pour vos suggestions et bonne soirée

Jean

Beta-Pictoris
Messages : 991
Inscription : 07 janvier 2014, 21:48
Localisation : Angers, France

Re: samba share et et auth avec Active Directory

Message par Beta-Pictoris » 27 juin 2018, 19:56

Rapidement, j'aurais dis que le paquet samba est bogué.

Il faudrait que tu testes avec une version plus récente pour voir s'il y a une différence.

nunux
Messages : 10
Inscription : 29 novembre 2017, 13:59

Re: samba share et et auth avec Active Directory

Message par nunux » 27 juin 2018, 20:03

Merci beaucoup pour cette réponse rapide :)

je suis dans les versions suivantes:

Code : Tout sélectionner

[root@SRV-XXXXXX-02 ~]# rpm -qa | grep samba
samba-client-libs-4.7.1-6.el7.x86_64
samba-common-4.7.1-6.el7.noarch
samba-common-tools-4.7.1-6.el7.x86_64
samba-4.7.1-6.el7.x86_64
samba-client-4.7.1-6.el7.x86_64
samba-common-libs-4.7.1-6.el7.x86_64
samba-libs-4.7.1-6.el7.x86_64
[root@SRV-XXXXXXX-02 ~]#
Ce serait un bug connu mon problème ?

Merci encore

Jean

Beta-Pictoris
Messages : 991
Inscription : 07 janvier 2014, 21:48
Localisation : Angers, France

Re: samba share et et auth avec Active Directory

Message par Beta-Pictoris » 27 juin 2018, 20:40

Il y a celui là par exemple: https://bugs.launchpad.net/ubuntu/+sour ... ug/1573181

Essaye avec ceci pour voir:

Code : Tout sélectionner

passdb backend = ldapsam
ldapsam:trusted = yes

nunux
Messages : 10
Inscription : 29 novembre 2017, 13:59

Re: samba share et et auth avec Active Directory

Message par nunux » 27 juin 2018, 21:32

ok, modifié smb.conf puis restarté les service

check de la config:

Code : Tout sélectionner

[[root@SRV-XXXXXXXX-02 ~]# testparm
Load smb config files from /etc/samba/smb.conf
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
Processing section "[myshare]"
Loaded services file OK.
idmap range not specified for domain '*'
ERROR: Invalid idmap range for domain *!

Server role: ROLE_DOMAIN_MEMBER

Press enter to see a dump of your service definitions

# Global parameters
[global]
        bind interfaces only = Yes
        interfaces = ens160 10.60.1.139
        load printers = No
        log file = /var/log/samba/log.%m
        max log size = 50
        printcap name = /dev/null
        realm = XXXXXX.LOCAL
        security = ADS
        server string = Samba Server Version %v
        workgroup = XXXXXX.LOCAL
        ldapsam:trusted = yes
        idmap config * : backend = tdb
        cups options = raw
        hosts allow = 127. 10.60.


[myshare]
        comment = My shared folder
        path = /var/myshare
        read only = No
        valid users = @grp_scrt_id_rw@XXXXXX.local
You have new mail in /var/spool/mail/root
[root@SRV-XXXXXXXX-02 ~]#
Ensuite pas mieux quand j'essaie d'ouvrir le share dans windows
Et erreurs dans /var/log/messages:

Code : Tout sélectionner

Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]: [2018/06/27 21:23:38.897456,  0] ../lib/util/fault.c:78(fault_report)
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:  ===============================================================
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]: [2018/06/27 21:23:38.897618,  0] ../lib/util/fault.c:79(fault_report)
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:  INTERNAL ERROR: Signal 11 in pid 3215 (4.7.1)
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:  Please read the Trouble-Shooting section of the Samba HOWTO
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]: [2018/06/27 21:23:38.897643,  0] ../lib/util/fault.c:81(fault_report)
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:  ===============================================================
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]: [2018/06/27 21:23:38.897657,  0] ../source3/lib/util.c:804(smb_panic_s3)
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:  PANIC (pid 3215): internal error
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]: [2018/06/27 21:23:38.898365,  0] ../source3/lib/util.c:915(log_stack_trace)
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:  BACKTRACE: 37 stack frames:
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #0 /lib64/libsmbconf.so.0(log_stack_trace+0x1a) [0x7f54ded6da3a]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #1 /lib64/libsmbconf.so.0(smb_panic_s3+0x20) [0x7f54ded6db10]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #2 /lib64/libsamba-util.so.0(smb_panic+0x2f) [0x7f54e0e68eaf]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #3 /lib64/libsamba-util.so.0(+0x250c6) [0x7f54e0e690c6]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #4 /lib64/libpthread.so.0(+0xf5e0) [0x7f54e12d05e0]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #5 /usr/lib64/samba/libgse-samba4.so(+0x9530) [0x7f54d93d9530]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #6 /usr/lib64/samba/libgse-samba4.so(gse_krb5_get_server_keytab+0x87) [0x7f54d93d9f07]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #7 /usr/lib64/samba/libgse-samba4.so(+0xc1d8) [0x7f54d93dc1d8]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #8 /usr/lib64/samba/libgensec-samba4.so(+0x19eba) [0x7f54d91beeba]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #9 /usr/lib64/samba/libgensec-samba4.so(gensec_start_mech_by_ops+0xc) [0x7f54d91bfcbc]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #10 /usr/lib64/samba/libgensec-samba4.so(+0xac5c) [0x7f54d91afc5c]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #11 /usr/lib64/samba/libgensec-samba4.so(+0xc214) [0x7f54d91b1214]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #12 /usr/lib64/samba/libgensec-samba4.so(gensec_update_ev+0x7f) [0x7f54d91be6cf]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #13 /usr/lib64/samba/libgensec-samba4.so(gensec_update+0x17) [0x7f54d91be7c7]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #14 /usr/lib64/samba/libsmbd-base-samba4.so(negprot_spnego+0xa9) [0x7f54e0a08f09]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #15 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_request_process_negprot+0x2ca) [0x7f54e0a8330a]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #16 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_request_dispatch+0x1bcc) [0x7f54e0a8009c]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #17 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_process_negprot+0x370) [0x7f54e0a82ac0]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #18 /usr/lib64/samba/libsmbd-base-samba4.so(reply_negprot+0x72e) [0x7f54e0a09e7e]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #19 /usr/lib64/samba/libsmbd-base-samba4.so(+0x19ec90) [0x7f54e0a6ac90]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #20 /usr/lib64/samba/libsmbd-base-samba4.so(+0x1a0a30) [0x7f54e0a6ca30]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #21 /usr/lib64/samba/libsmbd-base-samba4.so(+0x1a2111) [0x7f54e0a6e111]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #22 /lib64/libtevent.so.0(+0xaedb) [0x7f54dd779edb]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #23 /lib64/libtevent.so.0(+0x92a7) [0x7f54dd7782a7]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #24 /lib64/libtevent.so.0(_tevent_loop_once+0x9d) [0x7f54dd7740cd]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #25 /lib64/libtevent.so.0(tevent_common_loop_wait+0x1b) [0x7f54dd7742fb]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #26 /lib64/libtevent.so.0(+0x9247) [0x7f54dd778247]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #27 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_process+0x6e4) [0x7f54e0a6f444]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #28 /usr/sbin/smbd(+0xd1d4) [0x5631629f71d4]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #29 /lib64/libtevent.so.0(+0xaedb) [0x7f54dd779edb]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #30 /lib64/libtevent.so.0(+0x92a7) [0x7f54dd7782a7]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #31 /lib64/libtevent.so.0(_tevent_loop_once+0x9d) [0x7f54dd7740cd]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #32 /lib64/libtevent.so.0(tevent_common_loop_wait+0x1b) [0x7f54dd7742fb]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #33 /lib64/libtevent.so.0(+0x9247) [0x7f54dd778247]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #34 /usr/sbin/smbd(main+0x1afe) [0x5631629f225e]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #35 /lib64/libc.so.6(__libc_start_main+0xf5) [0x7f54dd3cdc05]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:   #36 /usr/sbin/smbd(+0x8571) [0x5631629f2571]
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]: [2018/06/27 21:23:38.898612,  0] ../source3/lib/dumpcore.c:318(dump_core)
Jun 27 21:23:38 SRV-XXXXXXXX-02 smbd[3215]:  coredump is handled by helper binary specified at /proc/sys/kernel/core_pattern
Jun 27 21:23:38 SRV-XXXXXXXX-02 abrt-hook-ccpp: Process 3215 (smbd) of user 0 killed by SIGABRT - dumping core
Jun 27 21:23:39 SRV-XXXXXXXX-02 abrt-server: Duplicate: core backtrace
Jun 27 21:23:39 SRV-XXXXXXXX-02 abrt-server: DUP_OF_DIR: /var/spool/abrt/ccpp-2018-06-27-16:18:37-1991
Jun 27 21:23:39 SRV-XXXXXXXX-02 abrt-server: Deleting problem directory ccpp-2018-06-27-21:23:38-3215 (dup of ccpp-2018-06-27-16:18:37-1991)
Jun 27 21:23:39 SRV-XXXXXXXX-02 abrt-server: Email address of sender was not specified. Would you like to do so now? If not, 'user@localhost' is to be used [y/N]
Jun 27 21:23:39 SRV-XXXXXXXX-02 abrt-server: Email address of receiver was not specified. Would you like to do so now? If not, 'root@localhost' is to be used [y/N]
Jun 27 21:23:39 SRV-XXXXXXXX-02 abrt-server: Sending an email...
Jun 27 21:23:39 SRV-XXXXXXXX-02 abrt-server: Sending a notification email to: root@localhost
Jun 27 21:23:39 SRV-XXXXXXXX-02 abrt-server: Email was sent to: root@localhost
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]: [2018/06/27 21:23:39.898675,  0] ../lib/util/fault.c:78(fault_report)
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:  ===============================================================
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]: [2018/06/27 21:23:39.898745,  0] ../lib/util/fault.c:79(fault_report)
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:  INTERNAL ERROR: Signal 11 in pid 3230 (4.7.1)
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:  Please read the Trouble-Shooting section of the Samba HOWTO
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]: [2018/06/27 21:23:39.898767,  0] ../lib/util/fault.c:81(fault_report)
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:  ===============================================================
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]: [2018/06/27 21:23:39.898780,  0] ../source3/lib/util.c:804(smb_panic_s3)
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:  PANIC (pid 3230): internal error
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]: [2018/06/27 21:23:39.899447,  0] ../source3/lib/util.c:915(log_stack_trace)
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:  BACKTRACE: 37 stack frames:
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #0 /lib64/libsmbconf.so.0(log_stack_trace+0x1a) [0x7f54ded6da3a]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #1 /lib64/libsmbconf.so.0(smb_panic_s3+0x20) [0x7f54ded6db10]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #2 /lib64/libsamba-util.so.0(smb_panic+0x2f) [0x7f54e0e68eaf]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #3 /lib64/libsamba-util.so.0(+0x250c6) [0x7f54e0e690c6]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #4 /lib64/libpthread.so.0(+0xf5e0) [0x7f54e12d05e0]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #5 /usr/lib64/samba/libgse-samba4.so(+0x9530) [0x7f54d93d9530]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #6 /usr/lib64/samba/libgse-samba4.so(gse_krb5_get_server_keytab+0x87) [0x7f54d93d9f07]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #7 /usr/lib64/samba/libgse-samba4.so(+0xc1d8) [0x7f54d93dc1d8]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #8 /usr/lib64/samba/libgensec-samba4.so(+0x19eba) [0x7f54d91beeba]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #9 /usr/lib64/samba/libgensec-samba4.so(gensec_start_mech_by_ops+0xc) [0x7f54d91bfcbc]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #10 /usr/lib64/samba/libgensec-samba4.so(+0xac5c) [0x7f54d91afc5c]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #11 /usr/lib64/samba/libgensec-samba4.so(+0xc214) [0x7f54d91b1214]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #12 /usr/lib64/samba/libgensec-samba4.so(gensec_update_ev+0x7f) [0x7f54d91be6cf]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #13 /usr/lib64/samba/libgensec-samba4.so(gensec_update+0x17) [0x7f54d91be7c7]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #14 /usr/lib64/samba/libsmbd-base-samba4.so(negprot_spnego+0xa9) [0x7f54e0a08f09]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #15 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_request_process_negprot+0x2ca) [0x7f54e0a8330a]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #16 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_request_dispatch+0x1bcc) [0x7f54e0a8009c]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #17 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_process_negprot+0x370) [0x7f54e0a82ac0]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #18 /usr/lib64/samba/libsmbd-base-samba4.so(reply_negprot+0x72e) [0x7f54e0a09e7e]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #19 /usr/lib64/samba/libsmbd-base-samba4.so(+0x19ec90) [0x7f54e0a6ac90]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #20 /usr/lib64/samba/libsmbd-base-samba4.so(+0x1a0a30) [0x7f54e0a6ca30]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #21 /usr/lib64/samba/libsmbd-base-samba4.so(+0x1a2111) [0x7f54e0a6e111]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #22 /lib64/libtevent.so.0(+0xaedb) [0x7f54dd779edb]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #23 /lib64/libtevent.so.0(+0x92a7) [0x7f54dd7782a7]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #24 /lib64/libtevent.so.0(_tevent_loop_once+0x9d) [0x7f54dd7740cd]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #25 /lib64/libtevent.so.0(tevent_common_loop_wait+0x1b) [0x7f54dd7742fb]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #26 /lib64/libtevent.so.0(+0x9247) [0x7f54dd778247]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #27 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_process+0x6e4) [0x7f54e0a6f444]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #28 /usr/sbin/smbd(+0xd1d4) [0x5631629f71d4]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #29 /lib64/libtevent.so.0(+0xaedb) [0x7f54dd779edb]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #30 /lib64/libtevent.so.0(+0x92a7) [0x7f54dd7782a7]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #31 /lib64/libtevent.so.0(_tevent_loop_once+0x9d) [0x7f54dd7740cd]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #32 /lib64/libtevent.so.0(tevent_common_loop_wait+0x1b) [0x7f54dd7742fb]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #33 /lib64/libtevent.so.0(+0x9247) [0x7f54dd778247]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #34 /usr/sbin/smbd(main+0x1afe) [0x5631629f225e]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #35 /lib64/libc.so.6(__libc_start_main+0xf5) [0x7f54dd3cdc05]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:   #36 /usr/sbin/smbd(+0x8571) [0x5631629f2571]
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]: [2018/06/27 21:23:39.899715,  0] ../source3/lib/dumpcore.c:318(dump_core)
Jun 27 21:23:39 SRV-XXXXXXXX-02 smbd[3230]:  coredump is handled by helper binary specified at /proc/sys/kernel/core_pattern
Jun 27 21:23:39 SRV-XXXXXXXX-02 abrt-hook-ccpp: Process 3230 (smbd) of user 0 killed by SIGABRT - ignoring (repeated crash)
Jun 27 21:23:39 SRV-XXXXXXXX-02 abrt-hook-ccpp: Saved core dump of pid 3230 to core.3230 at / (3387392 bytes)
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]: [2018/06/27 21:23:40.849044,  0] ../lib/util/fault.c:78(fault_report)
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:  ===============================================================
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]: [2018/06/27 21:23:40.849160,  0] ../lib/util/fault.c:79(fault_report)
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:  INTERNAL ERROR: Signal 11 in pid 3232 (4.7.1)
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:  Please read the Trouble-Shooting section of the Samba HOWTO
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]: [2018/06/27 21:23:40.849193,  0] ../lib/util/fault.c:81(fault_report)
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:  ===============================================================
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]: [2018/06/27 21:23:40.849212,  0] ../source3/lib/util.c:804(smb_panic_s3)
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:  PANIC (pid 3232): internal error
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]: [2018/06/27 21:23:40.849919,  0] ../source3/lib/util.c:915(log_stack_trace)
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:  BACKTRACE: 37 stack frames:
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #0 /lib64/libsmbconf.so.0(log_stack_trace+0x1a) [0x7f54ded6da3a]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #1 /lib64/libsmbconf.so.0(smb_panic_s3+0x20) [0x7f54ded6db10]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #2 /lib64/libsamba-util.so.0(smb_panic+0x2f) [0x7f54e0e68eaf]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #3 /lib64/libsamba-util.so.0(+0x250c6) [0x7f54e0e690c6]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #4 /lib64/libpthread.so.0(+0xf5e0) [0x7f54e12d05e0]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #5 /usr/lib64/samba/libgse-samba4.so(+0x9530) [0x7f54d93d9530]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #6 /usr/lib64/samba/libgse-samba4.so(gse_krb5_get_server_keytab+0x87) [0x7f54d93d9f07]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #7 /usr/lib64/samba/libgse-samba4.so(+0xc1d8) [0x7f54d93dc1d8]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #8 /usr/lib64/samba/libgensec-samba4.so(+0x19eba) [0x7f54d91beeba]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #9 /usr/lib64/samba/libgensec-samba4.so(gensec_start_mech_by_ops+0xc) [0x7f54d91bfcbc]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #10 /usr/lib64/samba/libgensec-samba4.so(+0xac5c) [0x7f54d91afc5c]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #11 /usr/lib64/samba/libgensec-samba4.so(+0xc214) [0x7f54d91b1214]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #12 /usr/lib64/samba/libgensec-samba4.so(gensec_update_ev+0x7f) [0x7f54d91be6cf]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #13 /usr/lib64/samba/libgensec-samba4.so(gensec_update+0x17) [0x7f54d91be7c7]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #14 /usr/lib64/samba/libsmbd-base-samba4.so(negprot_spnego+0xa9) [0x7f54e0a08f09]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #15 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_request_process_negprot+0x2ca) [0x7f54e0a8330a]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #16 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_request_dispatch+0x1bcc) [0x7f54e0a8009c]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #17 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_process_negprot+0x370) [0x7f54e0a82ac0]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #18 /usr/lib64/samba/libsmbd-base-samba4.so(reply_negprot+0x72e) [0x7f54e0a09e7e]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #19 /usr/lib64/samba/libsmbd-base-samba4.so(+0x19ec90) [0x7f54e0a6ac90]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #20 /usr/lib64/samba/libsmbd-base-samba4.so(+0x1a0a30) [0x7f54e0a6ca30]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #21 /usr/lib64/samba/libsmbd-base-samba4.so(+0x1a2111) [0x7f54e0a6e111]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #22 /lib64/libtevent.so.0(+0xaedb) [0x7f54dd779edb]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #23 /lib64/libtevent.so.0(+0x92a7) [0x7f54dd7782a7]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #24 /lib64/libtevent.so.0(_tevent_loop_once+0x9d) [0x7f54dd7740cd]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #25 /lib64/libtevent.so.0(tevent_common_loop_wait+0x1b) [0x7f54dd7742fb]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #26 /lib64/libtevent.so.0(+0x9247) [0x7f54dd778247]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #27 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_process+0x6e4) [0x7f54e0a6f444]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #28 /usr/sbin/smbd(+0xd1d4) [0x5631629f71d4]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #29 /lib64/libtevent.so.0(+0xaedb) [0x7f54dd779edb]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #30 /lib64/libtevent.so.0(+0x92a7) [0x7f54dd7782a7]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #31 /lib64/libtevent.so.0(_tevent_loop_once+0x9d) [0x7f54dd7740cd]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #32 /lib64/libtevent.so.0(tevent_common_loop_wait+0x1b) [0x7f54dd7742fb]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #33 /lib64/libtevent.so.0(+0x9247) [0x7f54dd778247]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #34 /usr/sbin/smbd(main+0x1afe) [0x5631629f225e]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #35 /lib64/libc.so.6(__libc_start_main+0xf5) [0x7f54dd3cdc05]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:   #36 /usr/sbin/smbd(+0x8571) [0x5631629f2571]
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]: [2018/06/27 21:23:40.850183,  0] ../source3/lib/dumpcore.c:318(dump_core)
Jun 27 21:23:40 SRV-XXXXXXXX-02 smbd[3232]:  coredump is handled by helper binary specified at /proc/sys/kernel/core_pattern
Jun 27 21:23:40 SRV-XXXXXXXX-02 abrt-hook-ccpp: Process 3232 (smbd) of user 0 killed by SIGABRT - ignoring (repeated crash)
Jun 27 21:23:40 SRV-XXXXXXXX-02 abrt-hook-ccpp: Saved core dump of pid 3232 to core.3232 at / (3387392 bytes)
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]: [2018/06/27 21:23:41.756760,  0] ../lib/util/fault.c:78(fault_report)
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:  ===============================================================
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]: [2018/06/27 21:23:41.756832,  0] ../lib/util/fault.c:79(fault_report)
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:  INTERNAL ERROR: Signal 11 in pid 3234 (4.7.1)
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:  Please read the Trouble-Shooting section of the Samba HOWTO
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]: [2018/06/27 21:23:41.756854,  0] ../lib/util/fault.c:81(fault_report)
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:  ===============================================================
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]: [2018/06/27 21:23:41.756868,  0] ../source3/lib/util.c:804(smb_panic_s3)
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:  PANIC (pid 3234): internal error
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]: [2018/06/27 21:23:41.757811,  0] ../source3/lib/util.c:915(log_stack_trace)
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:  BACKTRACE: 37 stack frames:
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #0 /lib64/libsmbconf.so.0(log_stack_trace+0x1a) [0x7f54ded6da3a]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #1 /lib64/libsmbconf.so.0(smb_panic_s3+0x20) [0x7f54ded6db10]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #2 /lib64/libsamba-util.so.0(smb_panic+0x2f) [0x7f54e0e68eaf]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #3 /lib64/libsamba-util.so.0(+0x250c6) [0x7f54e0e690c6]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #4 /lib64/libpthread.so.0(+0xf5e0) [0x7f54e12d05e0]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #5 /usr/lib64/samba/libgse-samba4.so(+0x9530) [0x7f54d93d9530]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #6 /usr/lib64/samba/libgse-samba4.so(gse_krb5_get_server_keytab+0x87) [0x7f54d93d9f07]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #7 /usr/lib64/samba/libgse-samba4.so(+0xc1d8) [0x7f54d93dc1d8]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #8 /usr/lib64/samba/libgensec-samba4.so(+0x19eba) [0x7f54d91beeba]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #9 /usr/lib64/samba/libgensec-samba4.so(gensec_start_mech_by_ops+0xc) [0x7f54d91bfcbc]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #10 /usr/lib64/samba/libgensec-samba4.so(+0xac5c) [0x7f54d91afc5c]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #11 /usr/lib64/samba/libgensec-samba4.so(+0xc214) [0x7f54d91b1214]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #12 /usr/lib64/samba/libgensec-samba4.so(gensec_update_ev+0x7f) [0x7f54d91be6cf]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #13 /usr/lib64/samba/libgensec-samba4.so(gensec_update+0x17) [0x7f54d91be7c7]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #14 /usr/lib64/samba/libsmbd-base-samba4.so(negprot_spnego+0xa9) [0x7f54e0a08f09]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #15 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_request_process_negprot+0x2ca) [0x7f54e0a8330a]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #16 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_request_dispatch+0x1bcc) [0x7f54e0a8009c]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #17 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_process_negprot+0x370) [0x7f54e0a82ac0]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #18 /usr/lib64/samba/libsmbd-base-samba4.so(reply_negprot+0x72e) [0x7f54e0a09e7e]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #19 /usr/lib64/samba/libsmbd-base-samba4.so(+0x19ec90) [0x7f54e0a6ac90]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #20 /usr/lib64/samba/libsmbd-base-samba4.so(+0x1a0a30) [0x7f54e0a6ca30]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #21 /usr/lib64/samba/libsmbd-base-samba4.so(+0x1a2111) [0x7f54e0a6e111]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #22 /lib64/libtevent.so.0(+0xaedb) [0x7f54dd779edb]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #23 /lib64/libtevent.so.0(+0x92a7) [0x7f54dd7782a7]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #24 /lib64/libtevent.so.0(_tevent_loop_once+0x9d) [0x7f54dd7740cd]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #25 /lib64/libtevent.so.0(tevent_common_loop_wait+0x1b) [0x7f54dd7742fb]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #26 /lib64/libtevent.so.0(+0x9247) [0x7f54dd778247]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #27 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_process+0x6e4) [0x7f54e0a6f444]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #28 /usr/sbin/smbd(+0xd1d4) [0x5631629f71d4]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #29 /lib64/libtevent.so.0(+0xaedb) [0x7f54dd779edb]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #30 /lib64/libtevent.so.0(+0x92a7) [0x7f54dd7782a7]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #31 /lib64/libtevent.so.0(_tevent_loop_once+0x9d) [0x7f54dd7740cd]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #32 /lib64/libtevent.so.0(tevent_common_loop_wait+0x1b) [0x7f54dd7742fb]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #33 /lib64/libtevent.so.0(+0x9247) [0x7f54dd778247]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #34 /usr/sbin/smbd(main+0x1afe) [0x5631629f225e]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #35 /lib64/libc.so.6(__libc_start_main+0xf5) [0x7f54dd3cdc05]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:   #36 /usr/sbin/smbd(+0x8571) [0x5631629f2571]
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]: [2018/06/27 21:23:41.758057,  0] ../source3/lib/dumpcore.c:318(dump_core)
Jun 27 21:23:41 SRV-XXXXXXXX-02 smbd[3234]:  coredump is handled by helper binary specified at /proc/sys/kernel/core_pattern
Jun 27 21:23:41 SRV-XXXXXXXX-02 abrt-hook-ccpp: Process 3234 (smbd) of user 0 killed by SIGABRT - ignoring (repeated crash)
Jun 27 21:23:41 SRV-XXXXXXXX-02 abrt-hook-ccpp: Saved core dump of pid 3234 to core.3234 at / (3387392 bytes)
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]: [2018/06/27 21:23:43.161397,  0] ../lib/util/fault.c:78(fault_report)
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:  ===============================================================
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]: [2018/06/27 21:23:43.161468,  0] ../lib/util/fault.c:79(fault_report)
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:  INTERNAL ERROR: Signal 11 in pid 3236 (4.7.1)
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:  Please read the Trouble-Shooting section of the Samba HOWTO
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]: [2018/06/27 21:23:43.161490,  0] ../lib/util/fault.c:81(fault_report)
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:  ===============================================================
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]: [2018/06/27 21:23:43.161504,  0] ../source3/lib/util.c:804(smb_panic_s3)
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:  PANIC (pid 3236): internal error
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]: [2018/06/27 21:23:43.162167,  0] ../source3/lib/util.c:915(log_stack_trace)
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:  BACKTRACE: 37 stack frames:
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #0 /lib64/libsmbconf.so.0(log_stack_trace+0x1a) [0x7f54ded6da3a]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #1 /lib64/libsmbconf.so.0(smb_panic_s3+0x20) [0x7f54ded6db10]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #2 /lib64/libsamba-util.so.0(smb_panic+0x2f) [0x7f54e0e68eaf]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #3 /lib64/libsamba-util.so.0(+0x250c6) [0x7f54e0e690c6]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #4 /lib64/libpthread.so.0(+0xf5e0) [0x7f54e12d05e0]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #5 /usr/lib64/samba/libgse-samba4.so(+0x9530) [0x7f54d93d9530]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #6 /usr/lib64/samba/libgse-samba4.so(gse_krb5_get_server_keytab+0x87) [0x7f54d93d9f07]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #7 /usr/lib64/samba/libgse-samba4.so(+0xc1d8) [0x7f54d93dc1d8]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #8 /usr/lib64/samba/libgensec-samba4.so(+0x19eba) [0x7f54d91beeba]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #9 /usr/lib64/samba/libgensec-samba4.so(gensec_start_mech_by_ops+0xc) [0x7f54d91bfcbc]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #10 /usr/lib64/samba/libgensec-samba4.so(+0xac5c) [0x7f54d91afc5c]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #11 /usr/lib64/samba/libgensec-samba4.so(+0xc214) [0x7f54d91b1214]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #12 /usr/lib64/samba/libgensec-samba4.so(gensec_update_ev+0x7f) [0x7f54d91be6cf]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #13 /usr/lib64/samba/libgensec-samba4.so(gensec_update+0x17) [0x7f54d91be7c7]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #14 /usr/lib64/samba/libsmbd-base-samba4.so(negprot_spnego+0xa9) [0x7f54e0a08f09]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #15 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_request_process_negprot+0x2ca) [0x7f54e0a8330a]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #16 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_request_dispatch+0x1bcc) [0x7f54e0a8009c]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #17 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_process_negprot+0x370) [0x7f54e0a82ac0]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #18 /usr/lib64/samba/libsmbd-base-samba4.so(reply_negprot+0x72e) [0x7f54e0a09e7e]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #19 /usr/lib64/samba/libsmbd-base-samba4.so(+0x19ec90) [0x7f54e0a6ac90]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #20 /usr/lib64/samba/libsmbd-base-samba4.so(+0x1a0a30) [0x7f54e0a6ca30]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #21 /usr/lib64/samba/libsmbd-base-samba4.so(+0x1a2111) [0x7f54e0a6e111]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #22 /lib64/libtevent.so.0(+0xaedb) [0x7f54dd779edb]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #23 /lib64/libtevent.so.0(+0x92a7) [0x7f54dd7782a7]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #24 /lib64/libtevent.so.0(_tevent_loop_once+0x9d) [0x7f54dd7740cd]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #25 /lib64/libtevent.so.0(tevent_common_loop_wait+0x1b) [0x7f54dd7742fb]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #26 /lib64/libtevent.so.0(+0x9247) [0x7f54dd778247]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #27 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_process+0x6e4) [0x7f54e0a6f444]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #28 /usr/sbin/smbd(+0xd1d4) [0x5631629f71d4]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #29 /lib64/libtevent.so.0(+0xaedb) [0x7f54dd779edb]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #30 /lib64/libtevent.so.0(+0x92a7) [0x7f54dd7782a7]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #31 /lib64/libtevent.so.0(_tevent_loop_once+0x9d) [0x7f54dd7740cd]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #32 /lib64/libtevent.so.0(tevent_common_loop_wait+0x1b) [0x7f54dd7742fb]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #33 /lib64/libtevent.so.0(+0x9247) [0x7f54dd778247]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #34 /usr/sbin/smbd(main+0x1afe) [0x5631629f225e]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #35 /lib64/libc.so.6(__libc_start_main+0xf5) [0x7f54dd3cdc05]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:   #36 /usr/sbin/smbd(+0x8571) [0x5631629f2571]
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]: [2018/06/27 21:23:43.162405,  0] ../source3/lib/dumpcore.c:318(dump_core)
Jun 27 21:23:43 SRV-XXXXXXXX-02 smbd[3236]:  coredump is handled by helper binary specified at /proc/sys/kernel/core_pattern
Jun 27 21:23:43 SRV-XXXXXXXX-02 abrt-hook-ccpp: Process 3236 (smbd) of user 0 killed by SIGABRT - ignoring (repeated crash)
Jun 27 21:23:43 SRV-XXXXXXXX-02 abrt-hook-ccpp: Saved core dump of pid 3236 to core.3236 at / (3387392 bytes)
Jun 27 21:27:46 SRV-XXXXXXXX-02 nmbd[3212]: [2018/06/27 21:27:46.026358,  0] ../source3/nmbd/nmbd_namequery.c:109(query_name_response)
Jun 27 21:27:46 SRV-XXXXXXXX-02 nmbd[3212]:  query_name_response: Multiple (2) responses received for a query on subnet 10.60.1.139 for name XXXXX.LOCAL<1d>.
Jun 27 21:27:46 SRV-XXXXXXXX-02 nmbd[3212]:  This response was from IP 10.60.1.125, reporting an IP address of 10.60.1.125.
Effectivement, à part un bug du programme samba, je vois pas ce qui peut provoquer un tel bronx de messages...
:?

Merci encore !

Jean

nunux
Messages : 10
Inscription : 29 novembre 2017, 13:59

Re: samba share et et auth avec Active Directory

Message par nunux » 28 juin 2018, 19:28

Bonsoir,

Bon... ne sachant plus trop quoi faire j'ai installé une nouvelle machine, juste pour tester... A peu de choses près, même résultat !

Liste des packages installés:

Code : Tout sélectionner

[root@SRV-AD-SMB-TEST ~]# yum list installed | grep samba
samba.x86_64                          4.7.1-6.el7                      @base
samba-client-libs.x86_64              4.7.1-6.el7                      @base
samba-common.noarch                   4.7.1-6.el7                      @base
samba-common-libs.x86_64              4.7.1-6.el7                      @base
samba-common-tools.x86_64             4.7.1-6.el7                      @base
samba-libs.x86_64                     4.7.1-6.el7                      @base
[root@SRV-AD-SMB-TEST ~]#
Manquerait-il quelque chose ?

Communication avec le DC:

Code : Tout sélectionner

[root@SRV-AD-SMB-TEST ~]# realm list
eldora.local
  type: kerberos
  realm-name: XXXXXX.LOCAL
  domain-name: eldora.local
  configured: kerberos-member
  server-software: active-directory
  client-software: sssd
  required-package: oddjob
  required-package: oddjob-mkhomedir
  required-package: sssd
  required-package: adcli
  required-package: samba-common-tools
  login-formats: %U@xxxxx.local
  login-policy: allow-realm-logins
[root@SRV-AD-SMB-TEST ~]#
Je me connecte sans problème avec un compte utilisateur déclaré dans l'active directory.

Groupe de sécurité déclaré dans l'AD, dédié à mes tests:

Code : Tout sélectionner

[root@SRV-AD-SMB-TEST ~]# getent group grp_scrt_id_rw@xxxxx.local
grp_scrt_id_rw@xxxxx.local:*:191415320:jbe@xxxxx.local
[root@SRV-AD-SMB-TEST ~]#
La communication est ok entre Linux server et Windows AD.
J'ai même pu fixer les droits sur le répertoire partagé avec le groupe de sécurité déclaré dans l'AD !

Ma configuration Samba:

Code : Tout sélectionner

[root@SRV-AD-SMB-TEST ~]# testparm
Load smb config files from /etc/samba/smb.conf
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
Processing section "[myshare]"
Loaded services file OK.
idmap range not specified for domain '*'
ERROR: Invalid idmap range for domain *!

Server role: ROLE_DOMAIN_MEMBER

Press enter to see a dump of your service definitions

# Global parameters
[global]
        bind interfaces only = Yes
        interfaces = 10.60.1.141
        load printers = No
        log file = /var/log/samba/log.%m
        max log size = 50
        printcap name = /dev/null
        realm = XXXXX.LOCAL
        security = ADS
        server string = Samba Server Version %v
        smb ports = 139
        workgroup = XXXXX.LOCAL
        ldapsam:trusted = yes
        idmap config * : backend = tdb
        cups options = raw
        hosts allow = 127. 10.60.

[myshare]
        comment = My shared folder
        path = /var/myshare
        read only = No
        valid users = @grp_scrt_id_rw@xxxxx.local
[root@SRV-AD-SMB-TEST ~]#
Il y a bien quelques erreurs rlimit mais j'avais corrigé sur le serveur précédent et ça n'avait rien changé (pas eu le temps de corriger ici...)

Bref, et le gros morceau ci-dessous.
Fresh install sur nouveau serveur et messages "panic" quand j'essaie de mapper le Drive dans windows, quelqu'un de vous as-t-il déjà été confronté à ce cas ?

Code : Tout sélectionner

[root@SRV-AD-SMB-TEST samba]# cat log.nmbd
[2018/06/28 16:47:11.166114,  0] ../lib/util/become_daemon.c:124(daemon_ready)
  STATUS=daemon 'nmbd' finished starting up and ready to serve connections
[2018/06/28 16:47:42.105014,  0] ../source3/nmbd/nmbd_become_lmb.c:397(become_local_master_stage2)
  *****

  Samba name server SRV-AD-SMB-TEST is now a local master browser for workgroup XXXXXX.LOCAL on subnet 10.60.1.141

  *****
[root@SRV-AD-SMB-TEST samba]# cat log.srv-helpdesk-01
[2018/06/28 16:47:33.171656,  0] ../lib/util/fault.c:78(fault_report)
  ===============================================================
[2018/06/28 16:47:33.171752,  0] ../lib/util/fault.c:79(fault_report)
  INTERNAL ERROR: Signal 11 in pid 1620 (4.7.1)
  Please read the Trouble-Shooting section of the Samba HOWTO
[2018/06/28 16:47:33.171774,  0] ../lib/util/fault.c:81(fault_report)
  ===============================================================
[2018/06/28 16:47:33.171786,  0] ../source3/lib/util.c:804(smb_panic_s3)
  PANIC (pid 1620): internal error
[2018/06/28 16:47:33.218426,  0] ../source3/lib/util.c:915(log_stack_trace)
  BACKTRACE: 37 stack frames:
   #0 /lib64/libsmbconf.so.0(log_stack_trace+0x1a) [0x7f664145aa3a]
   #1 /lib64/libsmbconf.so.0(smb_panic_s3+0x20) [0x7f664145ab10]
   #2 /lib64/libsamba-util.so.0(smb_panic+0x2f) [0x7f6643555eaf]
   #3 /lib64/libsamba-util.so.0(+0x250c6) [0x7f66435560c6]
   #4 /lib64/libpthread.so.0(+0xf5e0) [0x7f66439bd5e0]
   #5 /usr/lib64/samba/libgse-samba4.so(+0x9530) [0x7f663bac5530]
   #6 /usr/lib64/samba/libgse-samba4.so(gse_krb5_get_server_keytab+0x87) [0x7f663bac5f07]
   #7 /usr/lib64/samba/libgse-samba4.so(+0xc1d8) [0x7f663bac81d8]
   #8 /usr/lib64/samba/libgensec-samba4.so(+0x19eba) [0x7f663b8aaeba]
   #9 /usr/lib64/samba/libgensec-samba4.so(gensec_start_mech_by_ops+0xc) [0x7f663b8abcbc]
   #10 /usr/lib64/samba/libgensec-samba4.so(+0xac5c) [0x7f663b89bc5c]
   #11 /usr/lib64/samba/libgensec-samba4.so(+0xc214) [0x7f663b89d214]
   #12 /usr/lib64/samba/libgensec-samba4.so(gensec_update_ev+0x7f) [0x7f663b8aa6cf]
   #13 /usr/lib64/samba/libgensec-samba4.so(gensec_update+0x17) [0x7f663b8aa7c7]
   #14 /usr/lib64/samba/libsmbd-base-samba4.so(negprot_spnego+0xa9) [0x7f66430f5f09]
   #15 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_request_process_negprot+0x2ca) [0x7f664317030a]
   #16 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_request_dispatch+0x1bcc) [0x7f664316d09c]
   #17 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_process_negprot+0x370) [0x7f664316fac0]
   #18 /usr/lib64/samba/libsmbd-base-samba4.so(reply_negprot+0x72e) [0x7f66430f6e7e]
   #19 /usr/lib64/samba/libsmbd-base-samba4.so(+0x19ec90) [0x7f6643157c90]
   #20 /usr/lib64/samba/libsmbd-base-samba4.so(+0x1a0a30) [0x7f6643159a30]
   #21 /usr/lib64/samba/libsmbd-base-samba4.so(+0x1a2111) [0x7f664315b111]
   #22 /lib64/libtevent.so.0(+0xaf6b) [0x7f663fe65f6b]
   #23 /lib64/libtevent.so.0(+0x9337) [0x7f663fe64337]
   #24 /lib64/libtevent.so.0(_tevent_loop_once+0x9d) [0x7f663fe6010d]
   #25 /lib64/libtevent.so.0(tevent_common_loop_wait+0x1b) [0x7f663fe6033b]
   #26 /lib64/libtevent.so.0(+0x92d7) [0x7f663fe642d7]
   #27 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_process+0x6e4) [0x7f664315c444]
   #28 /usr/sbin/smbd(+0xd1d4) [0x55f5e4fc11d4]
   #29 /lib64/libtevent.so.0(+0xaf6b) [0x7f663fe65f6b]
   #30 /lib64/libtevent.so.0(+0x9337) [0x7f663fe64337]
   #31 /lib64/libtevent.so.0(_tevent_loop_once+0x9d) [0x7f663fe6010d]
   #32 /lib64/libtevent.so.0(tevent_common_loop_wait+0x1b) [0x7f663fe6033b]
   #33 /lib64/libtevent.so.0(+0x92d7) [0x7f663fe642d7]
   #34 /usr/sbin/smbd(main+0x1afe) [0x55f5e4fbc25e]
   #35 /lib64/libc.so.6(__libc_start_main+0xf5) [0x7f663fab9c05]
   #36 /usr/sbin/smbd(+0x8571) [0x55f5e4fbc571]
[2018/06/28 16:47:33.218707,  0] ../source3/lib/dumpcore.c:315(dump_core)
  dumping core in /var/log/samba/cores/smbd
[2018/06/28 16:47:34.250837,  0] ../lib/util/fault.c:78(fault_report)
  ===============================================================
[2018/06/28 16:47:34.250903,  0] ../lib/util/fault.c:79(fault_report)
  INTERNAL ERROR: Signal 11 in pid 1621 (4.7.1)
  Please read the Trouble-Shooting section of the Samba HOWTO
[2018/06/28 16:47:34.250923,  0] ../lib/util/fault.c:81(fault_report)
  ===============================================================
[2018/06/28 16:47:34.250936,  0] ../source3/lib/util.c:804(smb_panic_s3)
  PANIC (pid 1621): internal error
[2018/06/28 16:47:34.251586,  0] ../source3/lib/util.c:915(log_stack_trace)
  BACKTRACE: 37 stack frames:
   #0 /lib64/libsmbconf.so.0(log_stack_trace+0x1a) [0x7f664145aa3a]
   #1 /lib64/libsmbconf.so.0(smb_panic_s3+0x20) [0x7f664145ab10]
   #2 /lib64/libsamba-util.so.0(smb_panic+0x2f) [0x7f6643555eaf]
   #3 /lib64/libsamba-util.so.0(+0x250c6) [0x7f66435560c6]
   #4 /lib64/libpthread.so.0(+0xf5e0) [0x7f66439bd5e0]
   #5 /usr/lib64/samba/libgse-samba4.so(+0x9530) [0x7f663bac5530]
   #6 /usr/lib64/samba/libgse-samba4.so(gse_krb5_get_server_keytab+0x87) [0x7f663bac5f07]
   #7 /usr/lib64/samba/libgse-samba4.so(+0xc1d8) [0x7f663bac81d8]
   #8 /usr/lib64/samba/libgensec-samba4.so(+0x19eba) [0x7f663b8aaeba]
   #9 /usr/lib64/samba/libgensec-samba4.so(gensec_start_mech_by_ops+0xc) [0x7f663b8abcbc]
   #10 /usr/lib64/samba/libgensec-samba4.so(+0xac5c) [0x7f663b89bc5c]
   #11 /usr/lib64/samba/libgensec-samba4.so(+0xc214) [0x7f663b89d214]
   #12 /usr/lib64/samba/libgensec-samba4.so(gensec_update_ev+0x7f) [0x7f663b8aa6cf]
   #13 /usr/lib64/samba/libgensec-samba4.so(gensec_update+0x17) [0x7f663b8aa7c7]
   #14 /usr/lib64/samba/libsmbd-base-samba4.so(negprot_spnego+0xa9) [0x7f66430f5f09]
   #15 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_request_process_negprot+0x2ca) [0x7f664317030a]
   #16 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_request_dispatch+0x1bcc) [0x7f664316d09c]
   #17 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_process_negprot+0x370) [0x7f664316fac0]
   #18 /usr/lib64/samba/libsmbd-base-samba4.so(reply_negprot+0x72e) [0x7f66430f6e7e]
   #19 /usr/lib64/samba/libsmbd-base-samba4.so(+0x19ec90) [0x7f6643157c90]
   #20 /usr/lib64/samba/libsmbd-base-samba4.so(+0x1a0a30) [0x7f6643159a30]
   #21 /usr/lib64/samba/libsmbd-base-samba4.so(+0x1a2111) [0x7f664315b111]
   #22 /lib64/libtevent.so.0(+0xaf6b) [0x7f663fe65f6b]
   #23 /lib64/libtevent.so.0(+0x9337) [0x7f663fe64337]
   #24 /lib64/libtevent.so.0(_tevent_loop_once+0x9d) [0x7f663fe6010d]
   #25 /lib64/libtevent.so.0(tevent_common_loop_wait+0x1b) [0x7f663fe6033b]
   #26 /lib64/libtevent.so.0(+0x92d7) [0x7f663fe642d7]
   #27 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_process+0x6e4) [0x7f664315c444]
   #28 /usr/sbin/smbd(+0xd1d4) [0x55f5e4fc11d4]
   #29 /lib64/libtevent.so.0(+0xaf6b) [0x7f663fe65f6b]
   #30 /lib64/libtevent.so.0(+0x9337) [0x7f663fe64337]
   #31 /lib64/libtevent.so.0(_tevent_loop_once+0x9d) [0x7f663fe6010d]
   #32 /lib64/libtevent.so.0(tevent_common_loop_wait+0x1b) [0x7f663fe6033b]
   #33 /lib64/libtevent.so.0(+0x92d7) [0x7f663fe642d7]
   #34 /usr/sbin/smbd(main+0x1afe) [0x55f5e4fbc25e]
   #35 /lib64/libc.so.6(__libc_start_main+0xf5) [0x7f663fab9c05]
   #36 /usr/sbin/smbd(+0x8571) [0x55f5e4fbc571]
[2018/06/28 16:47:34.251828,  0] ../source3/lib/dumpcore.c:315(dump_core)
  dumping core in /var/log/samba/cores/smbd
[2018/06/28 16:57:37.475879,  0] ../lib/util/fault.c:78(fault_report)
  ===============================================================
[2018/06/28 16:57:37.475953,  0] ../lib/util/fault.c:79(fault_report)
  INTERNAL ERROR: Signal 11 in pid 1630 (4.7.1)
  Please read the Trouble-Shooting section of the Samba HOWTO
[2018/06/28 16:57:37.475974,  0] ../lib/util/fault.c:81(fault_report)
  ===============================================================
[2018/06/28 16:57:37.475990,  0] ../source3/lib/util.c:804(smb_panic_s3)
  PANIC (pid 1630): internal error
[2018/06/28 16:57:37.476704,  0] ../source3/lib/util.c:915(log_stack_trace)
  BACKTRACE: 37 stack frames:
   #0 /lib64/libsmbconf.so.0(log_stack_trace+0x1a) [0x7f664145aa3a]
   #1 /lib64/libsmbconf.so.0(smb_panic_s3+0x20) [0x7f664145ab10]
   #2 /lib64/libsamba-util.so.0(smb_panic+0x2f) [0x7f6643555eaf]
   #3 /lib64/libsamba-util.so.0(+0x250c6) [0x7f66435560c6]
   #4 /lib64/libpthread.so.0(+0xf5e0) [0x7f66439bd5e0]
   #5 /usr/lib64/samba/libgse-samba4.so(+0x9530) [0x7f663bac5530]
   #6 /usr/lib64/samba/libgse-samba4.so(gse_krb5_get_server_keytab+0x87) [0x7f663bac5f07]
   #7 /usr/lib64/samba/libgse-samba4.so(+0xc1d8) [0x7f663bac81d8]
   #8 /usr/lib64/samba/libgensec-samba4.so(+0x19eba) [0x7f663b8aaeba]
   #9 /usr/lib64/samba/libgensec-samba4.so(gensec_start_mech_by_ops+0xc) [0x7f663b8abcbc]
   #10 /usr/lib64/samba/libgensec-samba4.so(+0xac5c) [0x7f663b89bc5c]
   #11 /usr/lib64/samba/libgensec-samba4.so(+0xc214) [0x7f663b89d214]
   #12 /usr/lib64/samba/libgensec-samba4.so(gensec_update_ev+0x7f) [0x7f663b8aa6cf]
   #13 /usr/lib64/samba/libgensec-samba4.so(gensec_update+0x17) [0x7f663b8aa7c7]
   #14 /usr/lib64/samba/libsmbd-base-samba4.so(negprot_spnego+0xa9) [0x7f66430f5f09]
   #15 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_request_process_negprot+0x2ca) [0x7f664317030a]
   #16 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_request_dispatch+0x1bcc) [0x7f664316d09c]
   #17 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_process_negprot+0x370) [0x7f664316fac0]
   #18 /usr/lib64/samba/libsmbd-base-samba4.so(reply_negprot+0x72e) [0x7f66430f6e7e]
   #19 /usr/lib64/samba/libsmbd-base-samba4.so(+0x19ec90) [0x7f6643157c90]
   #20 /usr/lib64/samba/libsmbd-base-samba4.so(+0x1a0a30) [0x7f6643159a30]
   #21 /usr/lib64/samba/libsmbd-base-samba4.so(+0x1a2111) [0x7f664315b111]
   #22 /lib64/libtevent.so.0(+0xaf6b) [0x7f663fe65f6b]
   #23 /lib64/libtevent.so.0(+0x9337) [0x7f663fe64337]
   #24 /lib64/libtevent.so.0(_tevent_loop_once+0x9d) [0x7f663fe6010d]
   #25 /lib64/libtevent.so.0(tevent_common_loop_wait+0x1b) [0x7f663fe6033b]
   #26 /lib64/libtevent.so.0(+0x92d7) [0x7f663fe642d7]
   #27 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_process+0x6e4) [0x7f664315c444]
   #28 /usr/sbin/smbd(+0xd1d4) [0x55f5e4fc11d4]
   #29 /lib64/libtevent.so.0(+0xaf6b) [0x7f663fe65f6b]
   #30 /lib64/libtevent.so.0(+0x9337) [0x7f663fe64337]
   #31 /lib64/libtevent.so.0(_tevent_loop_once+0x9d) [0x7f663fe6010d]
   #32 /lib64/libtevent.so.0(tevent_common_loop_wait+0x1b) [0x7f663fe6033b]
   #33 /lib64/libtevent.so.0(+0x92d7) [0x7f663fe642d7]
   #34 /usr/sbin/smbd(main+0x1afe) [0x55f5e4fbc25e]
   #35 /lib64/libc.so.6(__libc_start_main+0xf5) [0x7f663fab9c05]
   #36 /usr/sbin/smbd(+0x8571) [0x55f5e4fbc571]
[2018/06/28 16:57:37.476952,  0] ../source3/lib/dumpcore.c:315(dump_core)
  dumping core in /var/log/samba/cores/smbd
[2018/06/28 16:57:38.508467,  0] ../lib/util/fault.c:78(fault_report)
  ===============================================================
[2018/06/28 16:57:38.508539,  0] ../lib/util/fault.c:79(fault_report)
  INTERNAL ERROR: Signal 11 in pid 1631 (4.7.1)
  Please read the Trouble-Shooting section of the Samba HOWTO
[2018/06/28 16:57:38.508559,  0] ../lib/util/fault.c:81(fault_report)
  ===============================================================
[2018/06/28 16:57:38.508572,  0] ../source3/lib/util.c:804(smb_panic_s3)
  PANIC (pid 1631): internal error
[2018/06/28 16:57:38.509209,  0] ../source3/lib/util.c:915(log_stack_trace)
  BACKTRACE: 37 stack frames:
   #0 /lib64/libsmbconf.so.0(log_stack_trace+0x1a) [0x7f664145aa3a]
   #1 /lib64/libsmbconf.so.0(smb_panic_s3+0x20) [0x7f664145ab10]
   #2 /lib64/libsamba-util.so.0(smb_panic+0x2f) [0x7f6643555eaf]
   #3 /lib64/libsamba-util.so.0(+0x250c6) [0x7f66435560c6]
   #4 /lib64/libpthread.so.0(+0xf5e0) [0x7f66439bd5e0]
   #5 /usr/lib64/samba/libgse-samba4.so(+0x9530) [0x7f663bac5530]
   #6 /usr/lib64/samba/libgse-samba4.so(gse_krb5_get_server_keytab+0x87) [0x7f663bac5f07]
   #7 /usr/lib64/samba/libgse-samba4.so(+0xc1d8) [0x7f663bac81d8]
   #8 /usr/lib64/samba/libgensec-samba4.so(+0x19eba) [0x7f663b8aaeba]
   #9 /usr/lib64/samba/libgensec-samba4.so(gensec_start_mech_by_ops+0xc) [0x7f663b8abcbc]
   #10 /usr/lib64/samba/libgensec-samba4.so(+0xac5c) [0x7f663b89bc5c]
   #11 /usr/lib64/samba/libgensec-samba4.so(+0xc214) [0x7f663b89d214]
   #12 /usr/lib64/samba/libgensec-samba4.so(gensec_update_ev+0x7f) [0x7f663b8aa6cf]
   #13 /usr/lib64/samba/libgensec-samba4.so(gensec_update+0x17) [0x7f663b8aa7c7]
   #14 /usr/lib64/samba/libsmbd-base-samba4.so(negprot_spnego+0xa9) [0x7f66430f5f09]
   #15 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_request_process_negprot+0x2ca) [0x7f664317030a]
   #16 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_request_dispatch+0x1bcc) [0x7f664316d09c]
   #17 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_process_negprot+0x370) [0x7f664316fac0]
   #18 /usr/lib64/samba/libsmbd-base-samba4.so(reply_negprot+0x72e) [0x7f66430f6e7e]
   #19 /usr/lib64/samba/libsmbd-base-samba4.so(+0x19ec90) [0x7f6643157c90]
   #20 /usr/lib64/samba/libsmbd-base-samba4.so(+0x1a0a30) [0x7f6643159a30]
   #21 /usr/lib64/samba/libsmbd-base-samba4.so(+0x1a2111) [0x7f664315b111]
   #22 /lib64/libtevent.so.0(+0xaf6b) [0x7f663fe65f6b]
   #23 /lib64/libtevent.so.0(+0x9337) [0x7f663fe64337]
   #24 /lib64/libtevent.so.0(_tevent_loop_once+0x9d) [0x7f663fe6010d]
   #25 /lib64/libtevent.so.0(tevent_common_loop_wait+0x1b) [0x7f663fe6033b]
   #26 /lib64/libtevent.so.0(+0x92d7) [0x7f663fe642d7]
   #27 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_process+0x6e4) [0x7f664315c444]
   #28 /usr/sbin/smbd(+0xd1d4) [0x55f5e4fc11d4]
   #29 /lib64/libtevent.so.0(+0xaf6b) [0x7f663fe65f6b]
   #30 /lib64/libtevent.so.0(+0x9337) [0x7f663fe64337]
   #31 /lib64/libtevent.so.0(_tevent_loop_once+0x9d) [0x7f663fe6010d]
   #32 /lib64/libtevent.so.0(tevent_common_loop_wait+0x1b) [0x7f663fe6033b]
   #33 /lib64/libtevent.so.0(+0x92d7) [0x7f663fe642d7]
   #34 /usr/sbin/smbd(main+0x1afe) [0x55f5e4fbc25e]
   #35 /lib64/libc.so.6(__libc_start_main+0xf5) [0x7f663fab9c05]
   #36 /usr/sbin/smbd(+0x8571) [0x55f5e4fbc571]
[2018/06/28 16:57:38.509491,  0] ../source3/lib/dumpcore.c:315(dump_core)
  dumping core in /var/log/samba/cores/smbd
[2018/06/28 16:57:39.543307,  0] ../lib/util/fault.c:78(fault_report)
  ===============================================================
[2018/06/28 16:57:39.543391,  0] ../lib/util/fault.c:79(fault_report)
  INTERNAL ERROR: Signal 11 in pid 1632 (4.7.1)
  Please read the Trouble-Shooting section of the Samba HOWTO
[2018/06/28 16:57:39.543418,  0] ../lib/util/fault.c:81(fault_report)
  ===============================================================
[2018/06/28 16:57:39.543432,  0] ../source3/lib/util.c:804(smb_panic_s3)
  PANIC (pid 1632): internal error
[2018/06/28 16:57:39.544053,  0] ../source3/lib/util.c:915(log_stack_trace)
  BACKTRACE: 37 stack frames:
   #0 /lib64/libsmbconf.so.0(log_stack_trace+0x1a) [0x7f664145aa3a]
   #1 /lib64/libsmbconf.so.0(smb_panic_s3+0x20) [0x7f664145ab10]
   #2 /lib64/libsamba-util.so.0(smb_panic+0x2f) [0x7f6643555eaf]
   #3 /lib64/libsamba-util.so.0(+0x250c6) [0x7f66435560c6]
   #4 /lib64/libpthread.so.0(+0xf5e0) [0x7f66439bd5e0]
   #5 /usr/lib64/samba/libgse-samba4.so(+0x9530) [0x7f663bac5530]
   #6 /usr/lib64/samba/libgse-samba4.so(gse_krb5_get_server_keytab+0x87) [0x7f663bac5f07]
   #7 /usr/lib64/samba/libgse-samba4.so(+0xc1d8) [0x7f663bac81d8]
   #8 /usr/lib64/samba/libgensec-samba4.so(+0x19eba) [0x7f663b8aaeba]
   #9 /usr/lib64/samba/libgensec-samba4.so(gensec_start_mech_by_ops+0xc) [0x7f663b8abcbc]
   #10 /usr/lib64/samba/libgensec-samba4.so(+0xac5c) [0x7f663b89bc5c]
   #11 /usr/lib64/samba/libgensec-samba4.so(+0xc214) [0x7f663b89d214]
   #12 /usr/lib64/samba/libgensec-samba4.so(gensec_update_ev+0x7f) [0x7f663b8aa6cf]
   #13 /usr/lib64/samba/libgensec-samba4.so(gensec_update+0x17) [0x7f663b8aa7c7]
   #14 /usr/lib64/samba/libsmbd-base-samba4.so(negprot_spnego+0xa9) [0x7f66430f5f09]
   #15 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_request_process_negprot+0x2ca) [0x7f664317030a]
   #16 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_request_dispatch+0x1bcc) [0x7f664316d09c]
   #17 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_process_negprot+0x370) [0x7f664316fac0]
   #18 /usr/lib64/samba/libsmbd-base-samba4.so(reply_negprot+0x72e) [0x7f66430f6e7e]
   #19 /usr/lib64/samba/libsmbd-base-samba4.so(+0x19ec90) [0x7f6643157c90]
   #20 /usr/lib64/samba/libsmbd-base-samba4.so(+0x1a0a30) [0x7f6643159a30]
   #21 /usr/lib64/samba/libsmbd-base-samba4.so(+0x1a2111) [0x7f664315b111]
   #22 /lib64/libtevent.so.0(+0xaf6b) [0x7f663fe65f6b]
   #23 /lib64/libtevent.so.0(+0x9337) [0x7f663fe64337]
   #24 /lib64/libtevent.so.0(_tevent_loop_once+0x9d) [0x7f663fe6010d]
   #25 /lib64/libtevent.so.0(tevent_common_loop_wait+0x1b) [0x7f663fe6033b]
   #26 /lib64/libtevent.so.0(+0x92d7) [0x7f663fe642d7]
   #27 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_process+0x6e4) [0x7f664315c444]
   #28 /usr/sbin/smbd(+0xd1d4) [0x55f5e4fc11d4]
   #29 /lib64/libtevent.so.0(+0xaf6b) [0x7f663fe65f6b]
   #30 /lib64/libtevent.so.0(+0x9337) [0x7f663fe64337]
   #31 /lib64/libtevent.so.0(_tevent_loop_once+0x9d) [0x7f663fe6010d]
   #32 /lib64/libtevent.so.0(tevent_common_loop_wait+0x1b) [0x7f663fe6033b]
   #33 /lib64/libtevent.so.0(+0x92d7) [0x7f663fe642d7]
   #34 /usr/sbin/smbd(main+0x1afe) [0x55f5e4fbc25e]
   #35 /lib64/libc.so.6(__libc_start_main+0xf5) [0x7f663fab9c05]
   #36 /usr/sbin/smbd(+0x8571) [0x55f5e4fbc571]
[2018/06/28 16:57:39.544291,  0] ../source3/lib/dumpcore.c:315(dump_core)
  dumping core in /var/log/samba/cores/smbd
[2018/06/28 16:57:40.578432,  0] ../lib/util/fault.c:78(fault_report)
  ===============================================================
[2018/06/28 16:57:40.578497,  0] ../lib/util/fault.c:79(fault_report)
  INTERNAL ERROR: Signal 11 in pid 1633 (4.7.1)
  Please read the Trouble-Shooting section of the Samba HOWTO
[2018/06/28 16:57:40.578517,  0] ../lib/util/fault.c:81(fault_report)
  ===============================================================
[2018/06/28 16:57:40.578530,  0] ../source3/lib/util.c:804(smb_panic_s3)
  PANIC (pid 1633): internal error
[2018/06/28 16:57:40.579151,  0] ../source3/lib/util.c:915(log_stack_trace)
  BACKTRACE: 37 stack frames:
   #0 /lib64/libsmbconf.so.0(log_stack_trace+0x1a) [0x7f664145aa3a]
   #1 /lib64/libsmbconf.so.0(smb_panic_s3+0x20) [0x7f664145ab10]
   #2 /lib64/libsamba-util.so.0(smb_panic+0x2f) [0x7f6643555eaf]
   #3 /lib64/libsamba-util.so.0(+0x250c6) [0x7f66435560c6]
   #4 /lib64/libpthread.so.0(+0xf5e0) [0x7f66439bd5e0]
   #5 /usr/lib64/samba/libgse-samba4.so(+0x9530) [0x7f663bac5530]
   #6 /usr/lib64/samba/libgse-samba4.so(gse_krb5_get_server_keytab+0x87) [0x7f663bac5f07]
   #7 /usr/lib64/samba/libgse-samba4.so(+0xc1d8) [0x7f663bac81d8]
   #8 /usr/lib64/samba/libgensec-samba4.so(+0x19eba) [0x7f663b8aaeba]
   #9 /usr/lib64/samba/libgensec-samba4.so(gensec_start_mech_by_ops+0xc) [0x7f663b8abcbc]
   #10 /usr/lib64/samba/libgensec-samba4.so(+0xac5c) [0x7f663b89bc5c]
   #11 /usr/lib64/samba/libgensec-samba4.so(+0xc214) [0x7f663b89d214]
   #12 /usr/lib64/samba/libgensec-samba4.so(gensec_update_ev+0x7f) [0x7f663b8aa6cf]
   #13 /usr/lib64/samba/libgensec-samba4.so(gensec_update+0x17) [0x7f663b8aa7c7]
   #14 /usr/lib64/samba/libsmbd-base-samba4.so(negprot_spnego+0xa9) [0x7f66430f5f09]
   #15 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_request_process_negprot+0x2ca) [0x7f664317030a]
   #16 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_request_dispatch+0x1bcc) [0x7f664316d09c]
   #17 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_process_negprot+0x370) [0x7f664316fac0]
   #18 /usr/lib64/samba/libsmbd-base-samba4.so(reply_negprot+0x72e) [0x7f66430f6e7e]
   #19 /usr/lib64/samba/libsmbd-base-samba4.so(+0x19ec90) [0x7f6643157c90]
   #20 /usr/lib64/samba/libsmbd-base-samba4.so(+0x1a0a30) [0x7f6643159a30]
   #21 /usr/lib64/samba/libsmbd-base-samba4.so(+0x1a2111) [0x7f664315b111]
   #22 /lib64/libtevent.so.0(+0xaf6b) [0x7f663fe65f6b]
   #23 /lib64/libtevent.so.0(+0x9337) [0x7f663fe64337]
   #24 /lib64/libtevent.so.0(_tevent_loop_once+0x9d) [0x7f663fe6010d]
   #25 /lib64/libtevent.so.0(tevent_common_loop_wait+0x1b) [0x7f663fe6033b]
   #26 /lib64/libtevent.so.0(+0x92d7) [0x7f663fe642d7]
   #27 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_process+0x6e4) [0x7f664315c444]
   #28 /usr/sbin/smbd(+0xd1d4) [0x55f5e4fc11d4]
   #29 /lib64/libtevent.so.0(+0xaf6b) [0x7f663fe65f6b]
   #30 /lib64/libtevent.so.0(+0x9337) [0x7f663fe64337]
   #31 /lib64/libtevent.so.0(_tevent_loop_once+0x9d) [0x7f663fe6010d]
   #32 /lib64/libtevent.so.0(tevent_common_loop_wait+0x1b) [0x7f663fe6033b]
   #33 /lib64/libtevent.so.0(+0x92d7) [0x7f663fe642d7]
   #34 /usr/sbin/smbd(main+0x1afe) [0x55f5e4fbc25e]
   #35 /lib64/libc.so.6(__libc_start_main+0xf5) [0x7f663fab9c05]
   #36 /usr/sbin/smbd(+0x8571) [0x55f5e4fbc571]
[2018/06/28 16:57:40.579409,  0] ../source3/lib/dumpcore.c:315(dump_core)
  dumping core in /var/log/samba/cores/smbd
[root@SRV-AD-SMB-TEST samba]#
Bonne soirée

Jean

Beta-Pictoris
Messages : 991
Inscription : 07 janvier 2014, 21:48
Localisation : Angers, France

Re: samba share et et auth avec Active Directory

Message par Beta-Pictoris » 28 juin 2018, 21:19

Dans ton fichier smb.conf, est-ce que tu mets le realm en majuscule ?

Regarde aussi les directives utilisées par smb.conf ici : https://help.ubuntu.com/lts/serverguide/sssd-ad.html

As tu essayé en utilisant winbind au lieu de sssd ?

nunux
Messages : 10
Inscription : 29 novembre 2017, 13:59

Re: samba share et et auth avec Active Directory

Message par nunux » 28 juin 2018, 21:43

Bonsoir,

Merci pour la piste,
smb.conf corrigé:

il n'était pas en majuscules, le realm.... :?

Code : Tout sélectionner

[root@SRV-AD-SMB-TEST samba]# cat smb.conf
[global]
        workgroup = ELDORA.LOCAL
        server string = Samba Server Version %v

bind interfaces only = True
#interfaces = ens160 10.60.1.139
interfaces = 10.60.1.141
smb ports = 139

passdb backend = ldapsam
ldapsam:trusted = yes



        # Add the IPs / subnets allowed acces to the server in general.
        # The following allows local and 10.0.*.* access
        hosts allow = 127. 10.60.

        # log files split per-machine:
        log file = /var/log/samba/log.%m
        # enable the following line to debug:
        # log level =3
        # maximum size of 50KB per log file, then rotate:
        max log size = 50

        # Here comes the juicy part!
        security = ads
        encrypt passwords = yes
        passdb backend = tdbsam
        realm = ELDORA.LOCAL

        # Not interested in printers
        load printers = no
        cups options = raw

        # This stops an annoying message from appearing in logs
        printcap name = /dev/null

[myshare]
  comment = My shared folder
  path = /var/myshare
  public = no
  writable = yes
  guest ok = no
  valid users = @"grp_scrt_id_rw@ELDORA.LOCAL"
[root@SRV-AD-SMB-TEST samba]#
Mais toujours pas possible d'ouvrir le share sous windows et toujours les mêmes messages d'erreur dans le log:

Code : Tout sélectionner

Jun 28 21:36:27 SRV-AD-SMB-TEST smbd[2042]: [2018/06/28 21:36:27.554763,  0] ../lib/util/fault.c:78(fault_report)
Jun 28 21:36:27 SRV-AD-SMB-TEST smbd[2042]:  ===============================================================
Jun 28 21:36:27 SRV-AD-SMB-TEST smbd[2042]: [2018/06/28 21:36:27.554861,  0] ../lib/util/fault.c:79(fault_report)
Jun 28 21:36:27 SRV-AD-SMB-TEST smbd[2042]:  INTERNAL ERROR: Signal 11 in pid 2042 (4.7.1)
Jun 28 21:36:27 SRV-AD-SMB-TEST smbd[2042]:  Please read the Trouble-Shooting section of the Samba HOWTO
Jun 28 21:36:27 SRV-AD-SMB-TEST smbd[2042]: [2018/06/28 21:36:27.554882,  0] ../lib/util/fault.c:81(fault_report)
Jun 28 21:36:27 SRV-AD-SMB-TEST smbd[2042]:  ===============================================================
Jun 28 21:36:27 SRV-AD-SMB-TEST smbd[2042]: [2018/06/28 21:36:27.554895,  0] ../source3/lib/util.c:804(smb_panic_s3)
Jun 28 21:36:27 SRV-AD-SMB-TEST smbd[2042]:  PANIC (pid 2042): internal error
Jun 28 21:36:27 SRV-AD-SMB-TEST smbd[2042]: [2018/06/28 21:36:27.555810,  0] ../source3/lib/util.c:915(log_stack_trace)
Jun 28 21:36:27 SRV-AD-SMB-TEST smbd[2042]:  BACKTRACE: 37 stack frames:
Jun 28 21:36:27 SRV-AD-SMB-TEST smbd[2042]:   #0 /lib64/libsmbconf.so.0(log_stack_trace+0x1a) [0x7f1d44512a3a]
Jun 28 21:36:27 SRV-AD-SMB-TEST smbd[2042]:   #1 /lib64/libsmbconf.so.0(smb_panic_s3+0x20) [0x7f1d44512b10]
Jun 28 21:36:27 SRV-AD-SMB-TEST smbd[2042]:   #2 /lib64/libsamba-util.so.0(smb_panic+0x2f) [0x7f1d4660deaf]
Jun 28 21:36:27 SRV-AD-SMB-TEST smbd[2042]:   #3 /lib64/libsamba-util.so.0(+0x250c6) [0x7f1d4660e0c6]
Jun 28 21:36:27 SRV-AD-SMB-TEST smbd[2042]:   #4 /lib64/libpthread.so.0(+0xf5e0) [0x7f1d46a755e0]
Jun 28 21:36:27 SRV-AD-SMB-TEST smbd[2042]:   #5 /usr/lib64/samba/libgse-samba4.so(+0x9530) [0x7f1d3eb7d530]
Jun 28 21:36:27 SRV-AD-SMB-TEST smbd[2042]:   #6 /usr/lib64/samba/libgse-samba4.so(gse_krb5_get_server_keytab+0x87) [0x7f1d3eb7df07]
Jun 28 21:36:27 SRV-AD-SMB-TEST smbd[2042]:   #7 /usr/lib64/samba/libgse-samba4.so(+0xc1d8) [0x7f1d3eb801d8]
Jun 28 21:36:27 SRV-AD-SMB-TEST smbd[2042]:   #8 /usr/lib64/samba/libgensec-samba4.so(+0x19eba) [0x7f1d3e962eba]
Jun 28 21:36:27 SRV-AD-SMB-TEST smbd[2042]:   #9 /usr/lib64/samba/libgensec-samba4.so(gensec_start_mech_by_ops+0xc) [0x7f1d3e963cbc]
Jun 28 21:36:27 SRV-AD-SMB-TEST smbd[2042]:   #10 /usr/lib64/samba/libgensec-samba4.so(+0xac5c) [0x7f1d3e953c5c]
Jun 28 21:36:27 SRV-AD-SMB-TEST smbd[2042]:   #11 /usr/lib64/samba/libgensec-samba4.so(+0xc214) [0x7f1d3e955214]
Jun 28 21:36:27 SRV-AD-SMB-TEST smbd[2042]:   #12 /usr/lib64/samba/libgensec-samba4.so(gensec_update_ev+0x7f) [0x7f1d3e9626cf]
Jun 28 21:36:27 SRV-AD-SMB-TEST smbd[2042]:   #13 /usr/lib64/samba/libgensec-samba4.so(gensec_update+0x17) [0x7f1d3e9627c7]
Jun 28 21:36:27 SRV-AD-SMB-TEST smbd[2042]:   #14 /usr/lib64/samba/libsmbd-base-samba4.so(negprot_spnego+0xa9) [0x7f1d461adf09]
Jun 28 21:36:27 SRV-AD-SMB-TEST smbd[2042]:   #15 /usr/lib64/samba/libsmbd-base-samba4.so(smbd_smb2_request_process_negprot+0x2ca) [0x7f1d4622830a]
...
Il est peut-être temps d'essayer winbind.

merci encore et bonne soirée

Jean

nunux
Messages : 10
Inscription : 29 novembre 2017, 13:59

Re: samba share et et auth avec Active Directory

Message par nunux » 02 juillet 2018, 12:12

bonjour,
voilà, j'ai switché sur winbind et plus aucune erreur ou core dump signalé dans les logs ...

sssl buggé ?

Petite liste des sites consultés:
https://access.redhat.com/documentation ... e/smb-sssd
https://techblog.jeppson.org/2015/03/jo ... ad-domain/
https://wiki.centos.org/TipsAndTricks/WinbindADS
https://community.spiceworks.com/how_to ... d-kerberos
  • Join de la machine sur le domaine Active Directory -- > ok !
    Login avec mon compte Active Directory --> ok !
    Configuration Kerberos --> ok !
Mais le problème reste la configuration Samba. Si je mets une config samba avec tous les accès ouverts, c'est ok mais je n'arrive toujours pas à fixer les droits d'accès sur un utilisateur ou un groupe Active Directory.

Oui, je suis un véritable "burne" en matière Samba ... :oops:

Voici la config mise en place:

Code : Tout sélectionner

[root@SRV-AD-SMB-TEST samba]# authconfig \
>  --update \
>  --kickstart \
>  --enablewinbind \
>  --enablewinbindauth \
>  --smbsecurity=ads \
>  --smbworkgroup=XXXXX \
>  --smbrealm=XXXXX.LOCAL \
>  --smbservers=mon_serveurAD \
>  --winbindjoin=admin.jbe \
>  --winbindtemplatehomedir=/home/%U \
>  --winbindtemplateshell=/bin/bash \
>  --enablewinbindusedefaultdomain \
>  --enablelocauthorize
[/usr/bin/net join -w XXXXX -S myserver -U admin.jbe]
Enter admin.jbe's password:

Code : Tout sélectionner

[root@SRV-AD-SMB-TEST samba]# realm list
eldora.local
  type: kerberos
  realm-name: ELDORA.LOCAL
  domain-name: eldora.local
  configured: kerberos-member
  server-software: active-directory
  client-software: winbind
  required-package: oddjob-mkhomedir
  required-package: oddjob
  required-package: samba-winbind-clients
  required-package: samba-winbind
  required-package: samba-common-tools
  login-formats: %U
  login-policy: allow-any-login
[root@SRV-AD-SMB-TEST samba]#
[root@SRV-AD-SMB-TEST pam.d]# 
Je peux ensuite me logguer avec un compte AD et lister diverses infos, donc la machine est bien entrée dans le domaine:

Code : Tout sélectionner

[root@SRV-AD-SMB-TEST pam.d]# su - jbe
Last login: Mon Jul  2 11:19:16 CEST 2018 on pts/0
[jbe@SRV-AD-SMB-TEST ~]$ id
uid=16777216(jbe) gid=16777216(domain users) groups=16777216(domain users)
...
La configuration Kerberos semble correcte, je peux obtenir un jeton

Code : Tout sélectionner

[root@SRV-AD-SMB-TEST samba]# kinit jbe
Password for jbe@XXXX.LOCAL:
[root@SRV-AD-SMB-TEST samba]# klist
Ticket cache: KEYRING:persistent:0:0
Default principal: jbe@XXX.LOCAL

Valid starting       Expires              Service principal
07/02/2018 12:04:26  07/02/2018 22:04:26  krbtgt/XXXXX.LOCAL@XXXXX.LOCAL
        renew until 07/09/2018 12:04:20
[root@SRV-AD-SMB-TEST samba]# kdestroy

Code : Tout sélectionner

[root@SRV-AD-SMB-TEST samba]# net ads info
LDAP server: 10.60.1.100
LDAP server name: XXXADS01.eldora.local
Realm: XXX.LOCAL
Bind Path: dc=XXX,dc=LOCAL
LDAP port: 389
Server time: Mon, 02 Jul 2018 11:33:13 CEST
KDC server: 10.60.1.100
Server time offset: 0
Last machine account password change: Mon, 02 Jul 2018 11:23:13 CEST
[root@SRV-AD-SMB-TEST samba]#
Ma config Samba, (qui à l'heure actuelle ne marche même plus en sur le share ouvert complètement, machine introuvable, pourtant elle est visible dans Windows).

Code : Tout sélectionner


[root@SRV-AD-SMB-TEST samba]# cat smb.conf
[global]
#--authconfig--start-line--

# Generated by authconfig on 2018/07/02 11:23:04
# DO NOT EDIT THIS SECTION (delimited by --start-line--/--end-line--)
# Any modification may be deleted or altered by authconfig in future

   workgroup = XXXX
   #password server = xxxxxds01
   realm = XXXX.LOCAL
   security = ads
   idmap config * : range = 16777216-33554431
   template homedir = /home/%U
   template shell = /bin/bash
   kerberos method = secrets only
   winbind use default domain = true
   winbind offline logon = true

#--authconfig--end-line--
;        workgroup = XXXX.LOCAL
        server string = Samba Server Version %v

bind interfaces only = True
#interfaces = ens160 10.60.1.139
interfaces = 10.60.1.141
smb ports = 139

passdb backend = ldapsam
ldapsam:trusted = yes

        # Add the IPs / subnets allowed acces to the server in general.
        # The following allows local and 10.0.*.* access
        #hosts allow = 127. 10.60.0.59
        hosts allow = 127. 10.60.0.59

        # log files split per-machine:
        log file = /var/log/samba/log.%m
        # enable the following line to debug:
        # log level =3
        # maximum size of 50KB per log file, then rotate:
        max log size = 50

        # Here comes the juicy part!
;        security = ads
        encrypt passwords = yes
        passdb backend = tdbsam
;        realm = XXXX.LOCAL

        # Not interested in printers
        load printers = no
        cups options = raw

        # This stops an annoying message from appearing in logs
        printcap name = /dev/null
#idmap backend = tdb

[myshare]
  comment = My shared folder
  path = /var/myshare
  #public = no
  read only = no
  browseable = yes
  writable = yes
  guest ok = no
  valid users = "jbe@XXXX.LOCAL"
  #valid users = @"grp_scrt_id_rw@XXXX.LOCAL"
  #valid users = @"XXXX+grp_scrt_id_rw"

[SMB]
  comment = My shared folder
  path = /data/SMB
  public = no
  writable = yes
  guest ok = no
  valid users = @"grp_scrt_id_rw@XXXX.LOCAL"
[root@SRV-AD-SMB-TEST samba]#


En fait, je ne suis pas forcément intéressé à pouvoir me logguer sur le serveur avec un compte Active Directory,

Ce que je voudrait pouvoir faire, c'est limiter l'accès su un share SAMBA pour un groupe utilisateurs déclaré dans Active Directory ?

Auriez-vous une idée de ce qui ne fonctionne pas dans ma configuration ?
là, je commence à sécher grave ...

Merci d'avance

Jean

Beta-Pictoris
Messages : 991
Inscription : 07 janvier 2014, 21:48
Localisation : Angers, France

Re: samba share et et auth avec Active Directory

Message par Beta-Pictoris » 02 juillet 2018, 13:22

As tu activé les acl ? (entre autres dans fstab et smb.conf)

Vérifie, aussi, dans le dns s'il ne manque pas des enregistrements particuliers.

Regardes ces liens pour plus d'informations:
https://www.howtoforge.com/samba_active_directory
https://doc.ubuntu-fr.org/samba-active-directory

La syntaxe utilisée dans les liens au dessus pour la directive 'valid users' est un peu différente de celle que tu utilises.

Répondre