SOLVED AD Config after Update to 9.10

[ObiTobi]

Hi,

I'm not sure if this is the correct forum. If not, please move my question.

After I upgraded my FreeNAS 9.3.X to latest 9.10 I have a Problem with my Ad Configuration.

The first error comes in messages:
"generate_smb4_conf.py: [generate_smb4_conf:135] Failed to setlocalsid with the following error: Can't load /usr/local/etc/smb4.conf - run testparm to debug it"

But testparm -v /usr/local/etc/smb4.conf shows OK I mean

"testparm -v /usr/local/etc/smb4.conf
Load smb config files from /usr/local/etc/smb4.conf
Processing section "[Android]"
Processing section "[Anwendungsdaten]"
Processing section "[Download]"
Processing section "[Fotografie]"
Processing section "[Home]"
Processing section "[ISO]"
Processing section "[Multimedia]"
Processing section "[Online Banking]"
Processing section "[Profile]"
Processing section "[Windows Sicherung]"
Loaded services file OK.
WARNING: You have some share names that are longer than 12 characters.
These may not be accessible to some older clients.
(Eg. Windows9x, WindowsMe, and smbclient prior to Samba 3.0.)
Server role: ROLE_DOMAIN_MEMBER"


The second problem is the "directory services" pane (See screenshot)

Whats wrong here?

 

[ObiTobi]

Next error. I have no more access to my backup directory:
smbd[39327]: create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
smbd[39327]: in openpam_check_error_code(): pam_sm_setcred(): unexpected return value 12
smbd[39327]: [2016/06/21 22:59:20.458037, 1] ../source3/smbd/service.c:552(make_connection_snum)
smbd[39327]: create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
smbd[39327]: in openpam_check_error_code(): pam_sm_setcred(): unexpected return value 12
smbd[39327]: [2016/06/21 22:59:20.468286, 1] ../source3/smbd/service.c:552(make_connection_snum)
smbd[39327]: create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
cnid_dbd[17249]: read: Connection reset by peer
cnid_dbd[17249]: error reading message header: Permission denied


my smb4.conf

[global]
server max protocol = SMB3
encrypt passwords = yes
dns proxy = no
strict locking = no
oplocks = yes
deadtime = 15
max log size = 51200
max open files = 454835
logging = syslog:1
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
getwd cache = yes
guest account = nobody
map to guest = Bad User
obey pam restrictions = yes
directory name cache size = 0
kernel change notify = no
panic action = /usr/local/libexec/samba/samba-backtrace
nsupdate command = /usr/local/bin/samba-nsupdate -g
server string = My NAS
ea support = yes
store dos attributes = yes
lm announce = yes
hostname lookups = yes
acl allow execute always = true
dos filemode = yes
multicast dns register = no
domain logons = no
idmap config *: backend = tdb
idmap config *: range = 90000001-100000000
server role = member server
workgroup = RJAP
realm = RJAP.DE
security = ADS
client use spnego = yes
cache directory = /var/tmp/.cache/.samba
local master = no
domain master = no
preferred master = no
ads dns update = no
winbind cache time = 7200
winbind offline logon = yes
winbind enum users = yes
winbind enum groups = yes
winbind nested groups = yes
winbind use default domain = yes
winbind refresh tickets = yes
winbind nss info = rfc2307
idmap config RJAP: backend = rid
idmap config RJAP: range = 20000-90000000
allow trusted domains = yes
client ldap sasl wrapping = plain
template shell = /bin/sh
template homedir = /mnt/zpool01/home/%U
netbios name = MYNAS001
netbios aliases = MYNAS001
pid directory = /var/run/samba
create mask = 0666
directory mask = 0777
client ntlmv2 auth = yes
dos charset = CP437
unix charset = UTF-8
log level = 1
kernel oplocks = no
oplocks = False
level2 oplocks = False
veto oplock files = /*.doc/*.DOC/*.docx/*.DOCX/*.docm/*.DOCM/*.dotm/*.DOTM/*.xltm/*.XLTM/*.xltx/*.XLTX/*.xlsx/*.XLSX/*.xlsm/*.XLSM/*.xlsb/*.XLSB/*.xls/*.XLS/*.ppt/*.PPT/*.pst/*.PST/*.mdb/*.MDB/*.ldb/*.LDB/*.vsd/*.VSD/*.mpp/*.MPP/*.qbw/*.QBW/*.qbb/*.QBB/*.qbI/*.qbl/*.dxf/*.DXF/*.dwg/*.DWG/*.cdr/*.CDR/*.bak/*.BAK/*.ord/*.xlo/*.igs/*.ipt/*.ipj/*.slp/*.stp/*.opt/*.xli/*.stl/*.cur/*.sjb/*.log/*.LOG/*.sbs/*.iam/*.idv/*.pcbdoc/*.PcbDoc/*.PCBDOC/*.dbf/*.DBF/*.cdx/*.CDX/

 

[Mirfster]

While I am no expert on this it seems like the same issue you had (and was Solved) in this thread: "Ad auth/ connect not working after upgrade 9.2.1 to 9.3.1"

 

[ObiTobi]

It's not the same. Now are all services working but with errors and I don't know why.
I think if nobody has a good idea, I need to wait for next update. Its bad for me, because this firt one time I did not back up :(

 

[ObiTobi]

After update to latest FreeNAS bild FreeNAS-9.10-STABLE-201606270534 (dd17351) works Ad-Config again

 

[Mirfster]

Glad you are working.... Now head over to https://forums.freenas.org/index.ph...d-identification-and-backup-the-config.27365/ and get that config backup automated. ;)