[Freeipa-users] Re: IPA's Samba fails to start?

[lejeczek]

On 12/10/2019 10:39, lejeczek via FreeIPA-users wrote:
>  Hi guys,
>
>  I have 3 replica setup and on one Samba fails this way:
>
>  Starting Samba SMB Daemon...
>  [2019/10/12 09:32:06.490263,  0] ipa_sam.c:4385(bind_callback_cleanup)
>    kerberos error: code=-1765328174, message=Pre-authentication failed:
>  Invalid argument
>  [2019/10/12 09:32:06.490570,  0]
>  ../source3/lib/smbldap.c:1052(smbldap_connect_system)
>    failed to bind to server
>  ldapi://%2fvar%2frun%2fslapd-DOM-DIM-PRIVATE.socket with dn="[Anonymous
>  bind]" Error: Local error
>        (unknown)
>  [2019/10/12 09:32:07.500639,  0] ipa_sam.c:4385(bind_callback_cleanup)
>    kerberos error: code=-1765328174, message=Pre-authentication failed:
>  Invalid argument
>  [2019/10/12 09:32:08.508557,  0] ipa_sam.c:4385(bind_callback_cleanup)
>    kerberos error: code=-1765328174, message=Pre-authentication failed:
>  Invalid argument
>  [2019/10/12 09:32:09.517142,  0] ipa_sam.c:4385(bind_callback_cleanup)
>    kerberos error: code=-1765328174, message=Pre-authentication failed:
>  Invalid argument
>  [2019/10/12 09:32:10.527122,  0] ipa_sam.c:4385(bind_callback_cleanup)
>    kerberos error: code=-1765328174, message=Pre-authentication failed:
>  Invalid argument
>  [2019/10/12 09:32:11.537833,  0] ipa_sam.c:4385(bind_callback_cleanup)
>    kerberos error: code=-1765328174, message=Pre-authentication failed:
>  Invalid argument
>  [2019/10/12 09:32:12.546879,  0] ipa_sam.c:4385(bind_callback_cleanup)
>    kerberos error: code=-1765328174, message=Pre-authentication failed:
>  Invalid argument
>  [2019/10/12 09:32:13.553883,  0] ipa_sam.c:4385(bind_callback_cleanup)
>    kerberos error: code=-1765328174, message=Pre-authentication failed:
>  Invalid argument
>  [2019/10/12 09:32:14.561250,  0] ipa_sam.c:4385(bind_callback_cleanup)
>    kerberos error: code=-1765328174, message=Pre-authentication failed:
>  Invalid argument
>  [2019/10/12 09:32:15.569197,  0] ipa_sam.c:4385(bind_callback_cleanup)
>    kerberos error: code=-1765328174, message=Pre-authentication failed:
>  Invalid argument
>  [2019/10/12 09:32:16.578139,  0] ipa_sam.c:4385(bind_callback_cleanup)
>    kerberos error: code=-1765328174, message=Pre-authentication failed:
>  Invalid argument
>  [2019/10/12 09:32:17.585719,  0] ipa_sam.c:4385(bind_callback_cleanup)
>    kerberos error: code=-1765328174, message=Pre-authentication failed:
>  Invalid argument
>  [2019/10/12 09:32:18.593443,  0] ipa_sam.c:4385(bind_callback_cleanup)
>    kerberos error: code=-1765328174, message=Pre-authentication failed:
>  Invalid argument
>  [2019/10/12 09:32:19.602907,  0] ipa_sam.c:4385(bind_callback_cleanup)
>    kerberos error: code=-1765328174, message=Pre-authentication failed:
>  Invalid argument
>  [2019/10/12 09:32:20.612149,  0] ipa_sam.c:4385(bind_callback_cleanup)
>    kerberos error: code=-1765328174, message=Pre-authentication failed:
>  Invalid argument
>  [2019/10/12 09:32:21.620243,  0] ipa_sam.c:4385(bind_callback_cleanup)
>    kerberos error: code=-1765328174, message=Pre-authentication failed:
>  Invalid argument
>  [2019/10/12 09:32:22.621690,  0] ipa_sam.c:4696(pdb_init_ipasam)
>    Failed to get base DN.
>  [2019/10/12 09:32:22.621818,  0]
>  ../source3/passdb/pdb_interface.c:180(make_pdb_method_name)
>    pdb backend ipasam:ldapi://%2fvar%2frun%2fslapd-DOM-DIM-PRIVATE.socket
>  did not correctly init (error was NT_STATUS_UNSUCCESSFUL)
>  smb.service: main process exited, code=exited, status=1/FAILURE
>  Failed to start Samba SMB Daemon.
>  Unit smb.service entered failed state.
>  smb.service failed.
>
>  Any suggestions on how to troubleshoot & fix are very appreciated.
>
>  many thanks, L.
>
>
>  _______________________________________________
>  FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>  To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
>  Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail]... 
ah, its keytab had gone missing, somehow...?hmm..

thanks,