Joining AD (Zentyal)

Status
Not open for further replies.
J

jac2703

Cadet
Joined
Mar 22, 2013
Messages
3
Hi all,

I have an installation of Freenas 9.3 which has been running for a while now. It was joined to a 2008 Active Directory Domain Server.

I've recently moved to Zentyal as my authentication server.

When plummbing the Zentyal directory details into Freenas' AD page and hit Save, I get the below output.

A few other notes:
winbind -u returns a list of expected users.
net join -U domain.admin joins the domain - the computer entry is also visible in my authentication servers directory.

Any help would be appreciated.

Code:
Nov 25 20:46:18 nas1 manage.py: [common.pipesubr:71] Popen()ing: klist
Nov 25 20:46:27 nas1 manage.py: [common.pipesubr:71] Popen()ing: klist
Nov 25 20:46:27 nas1 ActiveDirectory: /usr/local/bin/python /usr/local/www/freenasUI/middleware/notifier.py stop cifs
Nov 25 20:46:29 nas1 notifier: Stopping winbindd.
Nov 25 20:46:29 nas1 winbindd[11731]:   STATUS=daemon 'winbindd' finished starting up and ready to serve connectionsGot sig[15] terminate (is_parent=1)
Nov 25 20:46:29 nas1 winbindd[11737]:   STATUS=daemon 'winbindd' finished starting up and ready to serve connectionsGot sig[15] terminate (is_parent=0)
Nov 25 20:46:29 nas1 notifier: Waiting for PIDS: 11731.
Nov 25 20:46:29 nas1 notifier: Stopping smbd.
Nov 25 20:46:30 nas1 notifier: Waiting for PIDS: 11727, 11727.
Nov 25 20:46:30 nas1 notifier: Stopping nmbd.
Nov 25 20:46:30 nas1 nmbd[11723]:   STATUS=daemon 'nmbd' finished starting up and ready to serve connectionsGot SIGTERM: going down...
Nov 25 20:46:30 nas1 notifier: Waiting for PIDS: 11723.
Nov 25 20:46:31 nas1 ActiveDirectory: /usr/sbin/service ix-kerberos quietstop
Nov 25 20:46:31 nas1 ActiveDirectory: /usr/sbin/service ix-nsswitch quietstop
Nov 25 20:46:33 nas1 ActiveDirectory: /usr/sbin/service ix-pam quietstop
Nov 25 20:46:33 nas1 ActiveDirectory: /usr/sbin/service ix-activedirectory forcestop
Nov 25 20:46:39 nas1 adtool: [common.pipesubr:71] Popen()ing: klist
Nov 25 20:46:39 nas1 ActiveDirectory: /usr/sbin/service ix-cache quietstop &
Nov 25 20:46:41 nas1 ActiveDirectory: /usr/sbin/service samba_server forcestop
Nov 25 20:46:41 nas1 ActiveDirectory: /usr/local/bin/python /usr/local/www/freenasUI/middleware/notifier.py start cifs
Nov 25 20:46:45 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: /usr/local/bin/net -d 0 getlocalsid
Nov 25 20:46:46 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: /sbin/sysctl -n 'kern.maxfilesperproc'
Nov 25 20:46:46 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: zfs list -H -o mountpoint
Nov 25 20:46:46 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: zfs list -H -o mountpoint
Nov 25 20:46:46 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: zfs list -H -o mountpoint
Nov 25 20:46:46 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: zfs list -H -o mountpoint
Nov 25 20:46:46 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: zfs list -H -o mountpoint
Nov 25 20:46:46 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: zfs list -H -o mountpoint
Nov 25 20:46:46 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: zfs list -H -o mountpoint
Nov 25 20:46:46 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: zfs list -H -o mountpoint
Nov 25 20:46:46 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: /usr/local/bin/net -d 0 getlocalsid
Nov 25 20:46:46 nas1 notifier: Performing sanity check on Samba configuration: OK
Nov 25 20:46:46 nas1 notifier: Starting nmbd.
Nov 25 20:46:46 nas1 notifier: Starting smbd.
Nov 25 20:46:46 nas1 nmbd[15252]: [2015/11/25 20:46:46.807770,  0] ../lib/util/become_daemon.c:136(daemon_ready)
Nov 25 20:46:46 nas1 notifier: Starting winbindd.
Nov 25 20:46:46 nas1 smbd[15256]: [2015/11/25 20:46:46.857024,  0] ../lib/util/become_daemon.c:136(daemon_ready)
Nov 25 20:46:46 nas1 winbindd[15260]: [2015/11/25 20:46:46.882832,  0] ../source3/winbindd/winbindd_cache.c:3196(initialize_winbindd_cache)
Nov 25 20:46:46 nas1 winbindd[15260]:   initialize_winbindd_cache: clearing cache and re-creating with version number 2
Nov 25 20:46:46 nas1 winbindd[15260]: [2015/11/25 20:46:46.886333,  0] ../lib/util/become_daemon.c:136(daemon_ready)
Nov 25 20:46:47 nas1 ActiveDirectory: /usr/sbin/service ix-kinit forcestop
Nov 25 20:46:47 nas1 ActiveDirectory: /usr/sbin/service ix-hostname quietstart
Nov 25 20:46:50 nas1 adtool: [common.pipesubr:71] Popen()ing: klist
Nov 25 20:46:50 nas1 adtool: [common.pipesubr:71] Popen()ing: /usr/bin/kinit --renewable --password-file=/tmp/tmpfpBrNs domain.admin@JAMESCOYLE.NET
Nov 25 20:46:52 nas1 ActiveDirectory: /usr/local/bin/python /usr/local/www/freenasUI/middleware/notifier.py stop cifs
Nov 25 20:46:54 nas1 notifier: Stopping winbindd.
Nov 25 20:46:54 nas1 winbindd[15260]:   STATUS=daemon 'winbindd' finished starting up and ready to serve connectionsGot sig[15] terminate (is_parent=1)
Nov 25 20:46:54 nas1 winbindd[15262]:   STATUS=daemon 'winbindd' finished starting up and ready to serve connectionsGot sig[15] terminate (is_parent=0)
Nov 25 20:46:54 nas1 notifier: Waiting for PIDS: 15260.
Nov 25 20:46:54 nas1 notifier: Stopping smbd.
Nov 25 20:46:55 nas1 notifier: Waiting for PIDS: 15256, 15256.
Nov 25 20:46:55 nas1 notifier: Stopping nmbd.
Nov 25 20:46:55 nas1 nmbd[15252]:   STATUS=daemon 'nmbd' finished starting up and ready to serve connectionsGot SIGTERM: going down...
Nov 25 20:46:55 nas1 notifier: Waiting for PIDS: 15252.
Nov 25 20:46:55 nas1 ActiveDirectory: /usr/sbin/service ix-hostname quietstart
Nov 25 20:46:56 nas1 ActiveDirectory: /usr/sbin/service ix-kerberos quietstart default JAMESCOYLE.NET
Nov 25 20:46:58 nas1 generate_krb5_conf.py: [common.pipesubr:71] Popen()ing: klist
Nov 25 20:46:58 nas1 ActiveDirectory: /usr/sbin/service ix-nsswitch quietstart
Nov 25 20:47:00 nas1 ActiveDirectory: /usr/sbin/service ix-ldap quietstart
Nov 25 20:47:00 nas1 ActiveDirectory: /usr/sbin/service ix-kinit quietstart
Nov 25 20:47:03 nas1 ActiveDirectory: /usr/sbin/service ix-kinit status
Nov 25 20:47:05 nas1 ActiveDirectory: /usr/local/bin/python /usr/local/www/freenasUI/middleware/notifier.py start cifs
Nov 25 20:47:09 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: /usr/local/bin/net -d 0 getlocalsid
Nov 25 20:47:09 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: /sbin/sysctl -n 'kern.maxfilesperproc'
Nov 25 20:47:09 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: klist
Nov 25 20:47:09 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: zfs list -H -o mountpoint
Nov 25 20:47:09 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: zfs list -H -o mountpoint
Nov 25 20:47:09 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: zfs list -H -o mountpoint
Nov 25 20:47:09 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: zfs list -H -o mountpoint
Nov 25 20:47:09 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: zfs list -H -o mountpoint
Nov 25 20:47:09 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: zfs list -H -o mountpoint
Nov 25 20:47:09 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: zfs list -H -o mountpoint
Nov 25 20:47:09 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: zfs list -H -o mountpoint
Nov 25 20:47:09 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: /usr/local/bin/net -d 0 getlocalsid
Nov 25 20:47:10 nas1 notifier: Performing sanity check on Samba configuration: OK
Nov 25 20:47:10 nas1 notifier: Starting nmbd.
Nov 25 20:47:10 nas1 notifier: Starting smbd.
Nov 25 20:47:10 nas1 nmbd[17180]: [2015/11/25 20:47:10.355438,  0] ../lib/util/become_daemon.c:136(daemon_ready)
Nov 25 20:47:10 nas1 notifier: Starting winbindd.
Nov 25 20:47:10 nas1 smbd[17184]: [2015/11/25 20:47:10.407310,  0] ../lib/util/become_daemon.c:136(daemon_ready)
Nov 25 20:47:10 nas1 winbindd[17188]: [2015/11/25 20:47:10.444843,  0] ../lib/util/become_daemon.c:136(daemon_ready)
Nov 25 20:47:10 nas1 winbindd[17194]:   STATUS=daemon 'winbindd' finished starting up and ready to serve connectionsKinit failed: Clients credentials have been revoked
Nov 25 20:47:10 nas1 winbindd[17194]: [2015/11/25 20:47:10.554301,  0] ../source3/libads/kerberos_util.c:74(ads_kinit_password)
Nov 25 20:47:10 nas1 winbindd[17194]:   kerberos_kinit_password NAS1$@JAMESCOYLE.NET failed: Clients credentials have been revoked
Nov 25 20:47:10 nas1 winbindd[17188]:   STATUS=daemon 'winbindd' finished starting up and ready to serve connectionsCould not receive trustdoms
Nov 25 20:47:11 nas1 ActiveDirectory: /usr/sbin/service ix-activedirectory quietstart
Nov 25 20:47:15 nas1 generate_ldap_conf.py: [common.pipesubr:71] Popen()ing: klist
Nov 25 20:47:16 nas1 ActiveDirectory: /usr/sbin/service ix-activedirectory status
Nov 25 20:47:23 nas1 ActiveDirectory: /usr/local/bin/python /usr/local/www/freenasUI/middleware/notifier.py stop cifs
Nov 25 20:47:25 nas1 notifier: Stopping winbindd.
Nov 25 20:47:25 nas1 winbindd[17188]: [2015/11/25 20:47:25.804176,  0] ../source3/winbindd/winbindd.c:234(winbindd_sig_term_handler)
Nov 25 20:47:25 nas1 winbindd[17188]:   Got sig[15] terminate (is_parent=1)
Nov 25 20:47:25 nas1 winbindd[17194]: [2015/11/25 20:47:25.806930,  0] ../source3/winbindd/winbindd.c:234(winbindd_sig_term_handler)
Nov 25 20:47:25 nas1 winbindd[17194]:   Got sig[15] terminate (is_parent=0)
Nov 25 20:47:25 nas1 winbindd[17659]: [2015/11/25 20:47:25.807030,  0] ../source3/winbindd/winbindd.c:234(winbindd_sig_term_handler)
Nov 25 20:47:25 nas1 winbindd[17659]:   Got sig[15] terminate (is_parent=0)
Nov 25 20:47:25 nas1 notifier: Waiting for PIDS: 17188.
Nov 25 20:47:25 nas1 notifier: Stopping smbd.
Nov 25 20:47:26 nas1 notifier: Waiting for PIDS: 17184, 17184.
Nov 25 20:47:26 nas1 notifier: Stopping nmbd.
Nov 25 20:47:26 nas1 nmbd[17180]:   STATUS=daemon 'nmbd' finished starting up and ready to serve connectionsGot SIGTERM: going down...
Nov 25 20:47:26 nas1 notifier: Waiting for PIDS: 17180.
Nov 25 20:47:27 nas1 ActiveDirectory: /usr/local/bin/python /usr/local/www/freenasUI/middleware/notifier.py start cifs
Nov 25 20:47:30 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: /usr/local/bin/net -d 0 getlocalsid
Nov 25 20:47:30 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: /sbin/sysctl -n 'kern.maxfilesperproc'
Nov 25 20:47:31 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: klist
Nov 25 20:47:31 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: zfs list -H -o mountpoint
Nov 25 20:47:31 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: zfs list -H -o mountpoint
Nov 25 20:47:31 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: zfs list -H -o mountpoint
Nov 25 20:47:31 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: zfs list -H -o mountpoint
Nov 25 20:47:31 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: zfs list -H -o mountpoint
Nov 25 20:47:31 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: zfs list -H -o mountpoint
Nov 25 20:47:31 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: zfs list -H -o mountpoint
Nov 25 20:47:31 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: zfs list -H -o mountpoint
Nov 25 20:47:31 nas1 generate_smb4_conf.py: [common.pipesubr:71] Popen()ing: /usr/local/bin/net -d 0 getlocalsid
Nov 25 20:47:31 nas1 notifier: Performing sanity check on Samba configuration: OK
Nov 25 20:47:31 nas1 notifier: Starting nmbd.
Nov 25 20:47:31 nas1 notifier: Starting smbd.
Nov 25 20:47:31 nas1 nmbd[18307]: [2015/11/25 20:47:31.822047,  0] ../lib/util/become_daemon.c:136(daemon_ready)
Nov 25 20:47:31 nas1 notifier: Starting winbindd.
Nov 25 20:47:31 nas1 smbd[18311]: [2015/11/25 20:47:31.873884,  0] ../lib/util/become_daemon.c:136(daemon_ready)
Nov 25 20:47:31 nas1 winbindd[18315]: [2015/11/25 20:47:31.911062,  0] ../lib/util/become_daemon.c:136(daemon_ready)
Nov 25 20:47:32 nas1 ActiveDirectory: /usr/sbin/service ix-pam quietstart
Nov 25 20:47:35 nas1 ActiveDirectory: /usr/sbin/service ix-cache quietstart &
Nov 25 20:47:37 nas1 cachetool.py: [common.pipesubr:71] Popen()ing: klist
Nov 25 20:47:37 nas1 cachetool.py: [common.freenasusers:385] Directory Users could not be retrieved: 'nETBIOSName'
Nov 25 20:47:37 nas1 cachetool.py: [common.pipesubr:71] Popen()ing: klist
Nov 25 20:47:37 nas1 cachetool.py: [common.freenasusers:247] Directory Groups could not be retrieved: 'nETBIOSName'
Nov 25 20:47:46 nas1 manage.py: [common.pipesubr:71] Popen()ing: klist


A few config files that may help:
Code:
cat /usr/local/etc/smb4.conf
[global]
    server max protocol = SMB3
    encrypt passwords = yes
    dns proxy = no
    strict locking = no
    oplocks = yes
    deadtime = 15
    max log size = 51200
    max open files = 232256
    load printers = no
    printing = bsd
    printcap name = /dev/null
    disable spoolss = yes
    getwd cache = yes
    guest account = nobody
    map to guest = Bad User
    obey pam restrictions = yes
    directory name cache size = 0
    kernel change notify = no
    panic action = /usr/local/libexec/samba/samba-backtrace
    nsupdate command = /usr/local/bin/samba-nsupdate -g
    server string = NAS1 Server
    ea support = yes
    store dos attributes = yes
    lm announce = yes
    unix extensions = no
    acl allow execute always = true
    acl check permissions = true
    dos filemode = yes
    multicast dns register = no
    domain logons = no
    idmap config *: backend = tdb
    idmap config *: range = 1000-999999
    server role = member server
    netbios name = NAS1
    workgroup = JAMESCOYLE
    realm = JAMESCOYLE.NET
    security = ADS
    client use spnego = yes
    cache directory = /var/tmp/.cache/.samba
    local master = no
    domain master = no
    preferred master = no
    winbind cache time = 7200
    winbind offline logon = yes
    winbind enum users = yes
    winbind enum groups = yes
    winbind nested groups = yes
    winbind use default domain = yes
    winbind refresh tickets = yes
    idmap config JAMESCOYLE: backend = rid
    idmap config JAMESCOYLE: range = 20000-90000000
    allow trusted domains = yes
    client ldap sasl wrapping = plain
    template shell = /bin/sh
    template homedir = /home/%U
    pid directory = /var/run/samba
    create mask = 0666
    directory mask = 0777
    client ntlmv2 auth = yes
    dos charset = CP437
    unix charset = UTF-8
    log level = 1

[SHARES...]


Code:
cat /etc/krb5.conf
[appdefaults]
            pam = {
                forwardable = true
                ticket_lifetime = 86400
                renew_lifetime = 86400
            }

[libdefaults]
            dns_lookup_realm = true
            dns_lookup_kdc = true
            ticket_lifetime = 24h
            clockskew = 300
            forwardable = yes
            default_realm = JAMESCOYLE.NET

[domain_realm]
            jamescoyle.net = JAMESCOYLE.NET
            .jamescoyle.net = JAMESCOYLE.NET
            JAMESCOYLE.NET = JAMESCOYLE.NET
            .JAMESCOYLE.NET = JAMESCOYLE.NET

[realms]
        JAMESCOYLE.NET = {
            kdc = mail3.jamescoyle.net
            admin_server = mail3.jamescoyle.net
            kpasswd_server = mail3.jamescoyle.net
            default_domain = JAMESCOYLE.NET
        }

[logging]
            default = SYSLOG:INFO:LOCAL7


Code:
/usr/local/www/freenasUI/tools/cachetool.py keys
Traceback (most recent call last):
  File "/usr/local/www/freenasUI/tools/cachetool.py", line 731, in <module>
    main()
  File "/usr/local/www/freenasUI/tools/cachetool.py", line 728, in main
    (cache_funcs[sys.argv[1]])(**kwargs)
  File "/usr/local/www/freenasUI/tools/cachetool.py", line 245, in cache_keys
    _cache_keys_ActiveDirectory(**kwargs)
  File "/usr/local/www/freenasUI/tools/cachetool.py", line 143, in _cache_keys_ActiveDirectory
    workgroup = d['nETBIOSName']
KeyError: 'nETBIOSName'
 
D

dlavigne

Guest
You shouldn't be getting a traceback. Is the system updated to the latest STABLE SU?
 
Status
Not open for further replies.

Similar threads

A
  • Locked
SOLVED Join to Active Directory manually
Replies
4
Views
3K
aklyuk
A
C
  • Locked
Unable to join AD Domain
Replies
3
Views
2K
anodos
anodos
A
  • Locked
Directory Services will not start
Replies
1
Views
1K
dlavigne
D
L
  • Locked
AD with FreeNAS 9.2.1.7 and Zentyal 3.5
Replies
1
Views
2K
dlavigne
D
E
  • Locked
SOLVED Service failed to start
Replies
1
Views
3K
eroji
E
Top