I powered down the server friday, and restarted it this evening. smb service was dead. A little digging through the logs and I found:
cat HOMEBASE-smbd
[2013/04/11 08:40:12.196569, 1] param/loadparm.c:7216(service_ok)
NOTE: Service printers is flagged unavailable.
[2013/04/11 08:40:12.196739, 1] param/loadparm.c:7216(service_ok)
NOTE: Service print$ is flagged unavailable.
[2013/04/11 08:40:12.196954, 1] param/loadparm.c:7216(service_ok)
NOTE: Service profiles is flagged unavailable.
[2013/04/11 08:42:11.182293, 1] smbd/process.c:958(smbd_sig_hup_handler)
Reloading services after SIGHUP
[2013/04/13 22:04:35.468645, 1] param/loadparm.c:7216(service_ok)
NOTE: Service printers is flagged unavailable.
[2013/04/13 22:04:35.481856, 1] param/loadparm.c:7216(service_ok)
NOTE: Service print$ is flagged unavailable.
[2013/04/13 22:04:36.392810, 0] auth/auth_util.c:707(get_guest_info3)
SamInfo3_for_guest: Unable to locate guest account [guest]!
[2013/04/13 22:04:36.392935, 0] smbd/server.c:1205(main)
ERROR: failed to setup guest info.
[2013/04/13 22:51:49.173852, 1] param/loadparm.c:7216(service_ok)
NOTE: Service printers is flagged unavailable.
[2013/04/13 22:51:49.173983, 1] param/loadparm.c:7216(service_ok)
NOTE: Service print$ is flagged unavailable.
[2013/04/13 22:51:50.485593, 0] auth/auth_util.c:707(get_guest_info3)
SamInfo3_for_guest: Unable to locate guest account [guest]!
[2013/04/13 22:51:50.485717, 0] smbd/server.c:1205(main)
ERROR: failed to setup guest info.
So just to get things working, I tried to create a user guest, but I was told it already existed (and was not shown in the list of users). So I created a user guest2 and set it up in the domain_guests group and restarted smb. This time it stayed up.
This was the first reboot of the brand new server created with the new 6.4 build.
cat HOMEBASE-smbd
[2013/04/11 08:40:12.196569, 1] param/loadparm.c:7216(service_ok)
NOTE: Service printers is flagged unavailable.
[2013/04/11 08:40:12.196739, 1] param/loadparm.c:7216(service_ok)
NOTE: Service print$ is flagged unavailable.
[2013/04/11 08:40:12.196954, 1] param/loadparm.c:7216(service_ok)
NOTE: Service profiles is flagged unavailable.
[2013/04/11 08:42:11.182293, 1] smbd/process.c:958(smbd_sig_hup_handler)
Reloading services after SIGHUP
[2013/04/13 22:04:35.468645, 1] param/loadparm.c:7216(service_ok)
NOTE: Service printers is flagged unavailable.
[2013/04/13 22:04:35.481856, 1] param/loadparm.c:7216(service_ok)
NOTE: Service print$ is flagged unavailable.
[2013/04/13 22:04:36.392810, 0] auth/auth_util.c:707(get_guest_info3)
SamInfo3_for_guest: Unable to locate guest account [guest]!
[2013/04/13 22:04:36.392935, 0] smbd/server.c:1205(main)
ERROR: failed to setup guest info.
[2013/04/13 22:51:49.173852, 1] param/loadparm.c:7216(service_ok)
NOTE: Service printers is flagged unavailable.
[2013/04/13 22:51:49.173983, 1] param/loadparm.c:7216(service_ok)
NOTE: Service print$ is flagged unavailable.
[2013/04/13 22:51:50.485593, 0] auth/auth_util.c:707(get_guest_info3)
SamInfo3_for_guest: Unable to locate guest account [guest]!
[2013/04/13 22:51:50.485717, 0] smbd/server.c:1205(main)
ERROR: failed to setup guest info.
So just to get things working, I tried to create a user guest, but I was told it already existed (and was not shown in the list of users). So I created a user guest2 and set it up in the domain_guests group and restarted smb. This time it stayed up.
This was the first reboot of the brand new server created with the new 6.4 build.
Share this post:
Responses (9)
-
Accepted Answer
I was about to suggest what you just did. Glad you have it working again.
Done a restore from backup several times...
I have yet to find a completely stable ldap on any version...
Edit: Just seen an update for ldap to 2.4.40-9.v7 in clearos-updates-testing
Wonder what this is supposed to fix or do...
Quite busy at http://www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=summary :-) -
Accepted Answer
-
Accepted Answer
some more information:
pdbedit -L -v
Unix username: guest
NT username: guest
Account Flags: [U ]
User SID: S-1-5-21-3806445164-192967678-2816399198-353
Failed to find a Unix account for guest
Primary Group SID: (NULL SID)
Full Name: Guest Account
Home Directory: \\brabserver\guest
HomeDir Drive: U:
Logon Script: logon.cmd
Profile Path:
Domain: BRAB
Account desc:
Workstations:
Munged dial:
Logon time: 0
Logoff time: never
Kickoff time: never
Password last set: Tue, 10 May 2016 22:14:56 CEST
Password can change: Tue, 10 May 2016 22:14:56 CEST
Password must change: never
Last bad password : 0
Bad password count : 0
Logon hours : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Why is this :
Failed to find a Unix account for guest
Primary Group SID: (NULL SID)
net groupmap list
allusers (S-1-5-21-3806445164-192967678-2816399198-63000) -> 63000
Guests (S-1-5-32-546) -> 1000546
smtp_plugin (S-1-5-21-3806445164-192967678-2816399198-60000) -> 60000
web_proxy_plugin (S-1-5-21-3806445164-192967678-2816399198-60001) -> 60001
Domain Admins (S-1-5-21-3806445164-192967678-2816399198-512) -> 1000512
Domain Users (S-1-5-21-3806445164-192967678-2816399198-513) -> 1000513
Domain Guests (S-1-5-21-3806445164-192967678-2816399198-514) -> 1000514
Domain Computers (S-1-5-21-3806445164-192967678-2816399198-515) -> 1000515
Administrators (S-1-5-32-544) -> 1000544
Users (S-1-5-32-545) -> 1000545
Power Users (S-1-5-32-547) -> 1000547
Account Operators (S-1-5-32-548) -> 1000548
Server Operators (S-1-5-32-549) -> 1000549
Print Operators (S-1-5-32-550) -> 1000550
Backup Operators (S-1-5-32-551) -> 1000551
beheerder (S-1-5-21-3806445164-192967678-2816399198-60002) -> 60002
brabander (S-1-5-21-3806445164-192967678-2816399198-60003) -> 60003
No group names !!! but numbers -
Accepted Answer
Hi,
I've the same problem after a restart of the server.
The only thing i've changed is the fstab file by adding ",noatime " to the file system for my SSD disk (Title)
The SMB server is not starting and removing the "guest account = guest" option in SMB.CONF restarts the server, but my shares are unavailable.
when i do : smbpasswd -w PASSWORD
In the samba log file is see this :
[2016/05/10 21:06:43.115720, 0] ../source3/lib/smbldap.c:998(smbldap_connect_system)
failed to bind to server ldap://127.0.0.1 with dn="cn=manager,ou=Internal,dc=pdebrabander,dc=nl" Error: Invalid credentials
(unknown)
[2016/05/10 21:06:43.115885, 1] ../source3/lib/smbldap.c:1206(get_cached_ldap_connect)
Connection to LDAP server failed for the 1 try!
[2016/05/10 21:06:44.116570, 1] ../source3/lib/smbldap.c:1206(get_cached_ldap_connect)
Connection to LDAP server failed for the 2 try!
..........
Connection to LDAP server failed for the 15 try!
[2016/05/10 21:06:58.126550, 1] ../source3/lib/smbldap.c:1206(get_cached_ldap_connect)
Connection to LDAP server failed for the 16 try!
[2016/05/10 21:06:59.126740, 0] ../source3/passdb/pdb_ldap.c:6534(pdb_ldapsam_init_common)
pdb_init_ldapsam: WARNING: Could not get domain info, nor add one to the domain. We cannot work reliably without it.
[2016/05/10 21:06:59.126814, 0] ../source3/passdb/pdb_interface.c:179(make_pdb_method_name)
pdb backend ldapsam:ldap://127.0.0.1 did not correctly init (error was NT_STATUS_CANT_ACCESS_DOMAIN_INFO)
When i change the password in webconfig this error is gone and i see this :
[2016/05/10 21:12:58.692262, 0] ../source3/auth/auth_util.c:742(get_guest_info3)
SamInfo3_for_guest: Unable to locate guest account [guest]!
[2016/05/10 21:12:58.692308, 0] ../source3/auth/auth_util.c:811(make_new_session_info_guest)
get_guest_info3 failed with NT_STATUS_NO_SUCH_USER
[2016/05/10 21:12:58.692329, 0] ../source3/smbd/server.c:1493(main)
ERROR: failed to setup guest info. -
Accepted Answer
Thanks for the hint. Unglued is exactly what I thought, it does not look for S-1-5-21, instead it looks for S-1-5-11 and others. I found lots of other people with similar errors in samba upgrade scenarios. The thing is, I could not find a single clue in the configs, smb.ldap.conf looks fine to me.
I was planning on replacing the server with a fresh install anyway, since my ldap directories were messed up anyway (see other thread). So only the timing was a bit of an inconvenience.
I hope this does not happen again.
-
Accepted Answer
-
Accepted Answer
Exactly the same problem here!
Somebody shut down the server an hour ago (damn users!) and now they are complaining about not being able to use windows shares. I get the exact same error with regards to the guest account, I can not create a new guest account, since it seems to exist. But additionally, if I create an account called "gast", samba still complains:
ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(gidNumber=6))
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
gid_to_sid: winbind failed to find a sid for gid 10
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
Security token: (NULL)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
smbldap_search_ext: base => [dc=foo,dc=bar], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=10))], scope => [2]
ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(gidNumber=10))
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
Security token: (NULL)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
smbldap_search_ext: base => [dc=foo,dc=bar], filter => [(&(objectclass=sambaGroupMapping)(sambaGroupType=4)(|(sambaSIDList=S-1-22-1-0)(sambaSIDList=S-1-22-2-0)(sambaSIDList=S-1-22-2-1)(sambaSIDList=S-1-22-2-2)(sambaSIDList=S-1-22-2-3)(sambaSIDList=S-1-22-2-4)(sambaSIDList=S-1-22-2-6)(sambaSIDList=S-1-22-2-10)(sambaSIDList=S-1-1-0)(sambaSIDList=S-1-5-2)(sambaSIDList=S-1-5-11)))], scope => [2]
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
get_privileges: No privileges assigned to SID [S-1-22-1-0]
get_privileges: No privileges assigned to SID [S-1-22-2-0]
get_privileges: No privileges assigned to SID [S-1-22-2-1]
get_privileges: No privileges assigned to SID [S-1-22-2-2]
get_privileges: No privileges assigned to SID [S-1-22-2-3]
get_privileges: No privileges assigned to SID [S-1-22-2-4]
get_privileges: No privileges assigned to SID [S-1-22-2-6]
get_privileges: No privileges assigned to SID [S-1-22-2-10]
get_privileges_for_sids: sid = S-1-1-0
Privilege set: 0x0
get_privileges: No privileges assigned to SID [S-1-5-2]
get_privileges: No privileges assigned to SID [S-1-5-11]
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
Security token: (NULL)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
smbldap_search_ext: base => [dc=foo,dc=bar], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-1-0))], scope => [2]
ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-1-0))
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
Security token: (NULL)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
smbldap_search_ext: base => [dc=foo,dc=bar], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-2))], scope => [2]
ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-2))
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
Security token: (NULL)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
smbldap_search_ext: base => [dc=foo,dc=bar], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-11))], scope => [2]
ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-11))
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
Finding user gast
Trying _Get_Pwnam(), username as lowercase is gast
Trying _Get_Pwnam(), username as uppercase is GAST
Checking combinations of 0 uppercase letters in gast
Get_Pwnam_internals didn't find user [gast]!
SamInfo3_for_guest: Unable to locate guest account [gast]!
ERROR: failed to setup guest info.
I guess the error is with some group, not with a user. -
Accepted Answer
I did not knowingly do anything for guest access. Nor can I see it in any config dialog screen. Yet smb.conf has the line:
guest account = guest
And smbusers has:
nobody = guest pcguest smbguest
Finally in flexshare.conf, all the shares have:
guest ok = No
There are no guests here that will be getting any access to the domain server... -
Accepted Answer
Have you modified samba to use the guest accounts at all? judging by your other samba related posts... Normally guest access is not permitted and all share access requires valid user credentials.
The guest account is created by default (with username guest) and exists within the 'domain_guests' group
Please login to post a reply
You will need to be logged in to be able to post a reply. Login using the form on the right or register an account if you are new here.
Register Here »