Unscheduled reboot during resilver - AD issues after

[andrewjones216]

Hi all,

Had two issues on our FreeNAS box which both coincided with a resilver of a pool (we've had a similiar issue before https://www.truenas.com/community/threads/unscheduled-reboot.90917/ )

• <freenas> had an unscheduled system reboot. The operating system successfully came back online at Thu Jun 24 03:23:30 2021.
• Attempt to connect to netlogon share failed with error: [EFAULT] could not obtain winbind interface details: Winbind daemon is not available. could not obtain winbind domain name! failed to call wbcPingDc: Winbind daemon is not available.. Thu, 24 Jun 2021 03:51:36 AM (Europe/London)

The pool is stil resilvering ok. There is no dump file at /var/db/system/cores and the /var/log/messages file looks to have rolled over at the same time as the unscheduled reboot

Is there anything I can do to find the root cause of the unscheduled reboot?

I have tried starting the winbindd service but I get the following:

Cheers
Andrew

 

[sretalla]

You might be able to find the last messages.x.bz2 file which could contain information about the goings on before the reboot.

 

[andrewjones216]

No such luck on having a zipped messages file no the system.
Any ideas on the AD side of things? It's not affecting day to day running at the moment, but I'm reluctant to do much on the box as it runs some crucial linux shares

 

[andrewjones216]

A full power off and up has not solved this. We still cannot access the NAS through AD logins

Winbindd wont start:

 

[andrewjones216]

Code:

root@xxxxx[~]# wbinfo -t
could not obtain winbind interface details: WBC_ERR_WINBIND_NOT_AVAILABLE
could not obtain winbind domain name!
checking the trust secret for domain (null) via RPC calls failed
failed to call wbcCheckTrustCredentials: WBC_ERR_WINBIND_NOT_AVAILABLE
Could not check secret


root@xxxxx[~]# wbinfo -m
failed to call wbcListTrusts: WBC_ERR_WINBIND_NOT_AVAILABLEroot@hostname[~]# net -k -d 5 ads testjoin
INFO: Current debug levels:
  all: 5
  tdb: 5
  printdrivers: 5
  lanman: 5
  smb: 5
  rpc_parse: 5
  rpc_srv: 5
  rpc_cli: 5
  passdb: 5
  sam: 5
  auth: 5
  winbind: 5
  vfs: 5
  idmap: 5
  quota: 5
  acls: 5
  locking: 5
  msdfs: 5
  dmapi: 5
  registry: 5
  scavenger: 5
  dns: 5
  ldb: 5
  tevent: 5
  auth_audit: 5
  auth_json_audit: 5
  kerberos: 5
  drs_repl: 5
  smb2: 5
  smb2_credits: 5
  dsdb_audit: 5
  dsdb_json_audit: 5
  dsdb_password_audit: 5
  dsdb_password_json_audit: 5
  dsdb_transaction_audit: 5
  dsdb_transaction_json_audit: 5
  dsdb_group_audit: 5
  dsdb_group_json_audit: 5
lp_load_ex: refreshing parameters
Initialising global parameters
INFO: Current debug levels:
  all: 5
  tdb: 5
  printdrivers: 5
  lanman: 5
  smb: 5
  rpc_parse: 5
  rpc_srv: 5
  rpc_cli: 5
  passdb: 5
  sam: 5
  auth: 5
  winbind: 5
  vfs: 5
  idmap: 5
  quota: 5
  acls: 5
  locking: 5
  msdfs: 5
  dmapi: 5
  registry: 5
  scavenger: 5
  dns: 5
  ldb: 5
  tevent: 5
  auth_audit: 5
  auth_json_audit: 5
  kerberos: 5
  drs_repl: 5
  smb2: 5
  smb2_credits: 5
  dsdb_audit: 5
  dsdb_json_audit: 5
  dsdb_password_audit: 5
  dsdb_password_json_audit: 5
  dsdb_transaction_audit: 5
  dsdb_transaction_json_audit: 5
  dsdb_group_audit: 5
  dsdb_group_json_audit: 5
Processing section "[global]"
doing parameter dns proxy = No
doing parameter aio max threads = 2
doing parameter max log size = 51200
doing parameter allocation roundup size = 0
doing parameter load printers = No
doing parameter printing = bsd
doing parameter disable spoolss = Yes
doing parameter dos filemode = Yes
doing parameter kernel change notify = No
doing parameter directory name cache size = 0
doing parameter nsupdate command = /usr/local/bin/samba-nsupdate -g
doing parameter unix charset = UTF-8
doing parameter log level = 1
doing parameter obey pam restrictions = False
doing parameter enable web service discovery = True
doing parameter logging = file
doing parameter server min protocol = SMB2_02
doing parameter unix extensions = No
doing parameter map to guest = Bad User
doing parameter server string = FreeNAS Server
doing parameter bind interfaces only = Yes
doing parameter netbios name = hostname
doing parameter netbios aliases =
doing parameter server role = member server
doing parameter kerberos method = secrets and keytab
doing parameter workgroup = OUR.DOMAIN
doing parameter realm = OUR.DOMAIN.UCPG.NET
doing parameter security = ADS
doing parameter local master = No
doing parameter domain master = No
doing parameter preferred master = No
doing parameter winbind cache time = 7200
doing parameter winbind max domain connections = 10
doing parameter winbind status fifo = Yes
doing parameter client ldap sasl wrapping = sign
doing parameter template shell = /bin/sh
doing parameter template homedir = /home/%D/%U
doing parameter ads dns update = Yes
doing parameter allow trusted domains = No
doing parameter winbind enum users = Yes
doing parameter winbind enum groups = Yes
doing parameter idmap config *: backend = tdb
doing parameter idmap config *: range = 90000001-100000000
doing parameter idmap config OUR.DOMAIN: backend = rid
doing parameter idmap config OUR.DOMAIN: range = 100000001-200000000
doing parameter include = /usr/local/etc/smb4_share.conf
pm_process() returned Yes
directory_create_or_exist: mkdir failed on directory /var/db/system/samba4/private/msg.sock: No such file or directory
Unable to initialize messaging context!
Could not list trusted domains