<div dir="ltr">Yes, you are correct log level was set to 1.<div><br></div><div>I have changed the log level value to 10 and collected the log files again, PFA.</div><div><br></div><div><div>[root@ipaserver samba]# net conf setparm global 'log level' 10</div>
<div>[root@ipaserver samba]# net conf list</div><div>[global]</div><div><span class="" style="white-space:pre"> </span>workgroup = IPADOMAIN</div><div><span class="" style="white-space:pre"> </span>realm = <a href="http://IPADOMAIN.EXAMPLE.COM">IPADOMAIN.EXAMPLE.COM</a></div>
<div><span class="" style="white-space:pre"> </span>kerberos method = dedicated keytab</div><div><span class="" style="white-space:pre"> </span>dedicated keytab file = FILE:/etc/samba/samba.keytab</div><div><span class="" style="white-space:pre"> </span>create krb5 conf = no</div>
<div><span class="" style="white-space:pre"> </span>security = user</div><div><span class="" style="white-space:pre"> </span>domain master = yes</div><div><span class="" style="white-space:pre"> </span>domain logons = yes</div>
<div><span class="" style="white-space:pre"> </span>max log size = 100000</div><div><span class="" style="white-space:pre"> </span>log file = /var/log/samba/log.%m</div><div><span class="" style="white-space:pre"> </span>passdb backend = ipasam:ldapi://%2fvar%2frun%2fslapd-IPADOMAIN-EXAMPLE-COM.socket</div>
<div><span class="" style="white-space:pre"> </span>disable spoolss = yes</div><div><span class="" style="white-space:pre"> </span>ldapsam:trusted = yes</div><div><span class="" style="white-space:pre"> </span>ldap ssl = off</div>
<div><span class="" style="white-space:pre"> </span>ldap suffix = dc=ipadomain,dc=example,dc=com</div><div><span class="" style="white-space:pre"> </span>ldap user suffix = cn=users,cn=accounts</div><div><span class="" style="white-space:pre"> </span>ldap group suffix = cn=groups,cn=accounts</div>
<div><span class="" style="white-space:pre"> </span>ldap machine suffix = cn=computers,cn=accounts</div><div><span class="" style="white-space:pre"> </span>rpc_server:epmapper = external</div><div><span class="" style="white-space:pre"> </span>rpc_server:lsarpc = external</div>
<div><span class="" style="white-space:pre"> </span>rpc_server:lsass = external</div><div><span class="" style="white-space:pre"> </span>rpc_server:lsasd = external</div><div><span class="" style="white-space:pre"> </span>rpc_server:samr = external</div>
<div><span class="" style="white-space:pre"> </span>rpc_server:netlogon = external</div><div><span class="" style="white-space:pre"> </span>rpc_server:tcpip = yes</div><div><span class="" style="white-space:pre"> </span>rpc_daemon:epmd = fork</div>
<div><span class="" style="white-space:pre"> </span>rpc_daemon:lsasd = fork</div><div><span class="" style="white-space:pre"> </span>client min protocol = smb2_02</div><div><span class="" style="white-space:pre"> </span>client max protocol = smb2_02</div>
<div><span class="" style="white-space:pre"> </span>log level = 10</div><div><br></div><div>[share]</div><div><span class="" style="white-space:pre"> </span>comment = Trust test share</div><div><span class="" style="white-space:pre"> </span>read only = no</div>
<div><span class="" style="white-space:pre"> </span>valid users = S-1-5-21-2212595442-2951398754-4232868618</div><div><span class="" style="white-space:pre"> </span>path = /share</div></div><div><br></div><div><br></div>
<div>
<br></div><div><br></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, May 20, 2014 at 1:38 PM, Sumit Bose <span dir="ltr"><<a href="mailto:sbose@redhat.com" target="_blank">sbose@redhat.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On Tue, May 20, 2014 at 01:17:42PM +0530, Supratik Goswami wrote:<br>
> PFA<br>
<br>
somewhat switched the log level back to 1<br>
<br>
doing parameter log level = 1<br>
<br>
<br>
can you check that 'net conf list' shows 'log level 10', if not please<br>
set it with<br>
<br>
net conf setparm 'log level' 10<br>
<br>
bye,<br>
Sumit<br>
<div class="HOEnZb"><div class="h5"><br>
><br>
><br>
><br>
><br>
> On Tue, May 20, 2014 at 12:38 PM, Sumit Bose <<a href="mailto:sbose@redhat.com">sbose@redhat.com</a>> wrote:<br>
><br>
> > On Mon, May 19, 2014 at 05:40:49PM +0530, Supratik Goswami wrote:<br>
> > > Initially after configuring the setup I rebooted once and I was thinking<br>
> > > that it worked before the reboot but unfortunately it didn't work the<br>
> > first<br>
> > > time itself.<br>
> > ><br>
> > > Still failing after running the commands.<br>
> > ><br>
> > > [root@ipaserver ~]# net conf setparm global "client min protocol"<br>
> > smb2_02<br>
> > > [root@ipaserver ~]# net conf setparm global "client max protocol"<br>
> > smb2_02<br>
> > > [root@ipaserver ~]# service winbind restart<br>
> > ><br>
> > > Shutting down Winbind services: [ OK ]<br>
> > > Starting Winbind services: [ OK ]<br>
> > ><br>
> > > [root@ipaserver ~]# wbinfo -n 'ADDOMAIN\Domain Admins'<br>
> > > failed to call wbcLookupName: WBC_ERR_DOMAIN_NOT_FOUND<br>
> > > Could not lookup name ADDOMAIN\Domain Admins<br>
> > ><br>
> > > [root@ipaserver ~]# wbinfo -u<br>
> > > [root@ipaserver ~]#<br>
> > ><br>
> > > The issue is reproducible every time if anyone follows the steps as I<br>
> > have<br>
> > > done.<br>
> > ><br>
> ><br>
> > It would be nice if you can send a second round of log files. Please<br>
> > stop winbind, remove all *winbind* and *wb* log files in /var/log/samba,<br>
> > make sure 'log level' is 10 or higher,<br>
> > start winbind, call 'wbinfo -n 'ADDOMAIN\Domain Admins', stop winbind,<br>
> > put all *winbind* and *wb* log files in a tar/zip archive and send the<br>
> > archive. If you think the archive is too large for a mailing-list fell<br>
> > free to send them to me directly.<br>
> ><br>
> > bye,<br>
> > Sumit<br>
> > ><br>
> > > On Mon, May 19, 2014 at 4:45 PM, Sumit Bose <<a href="mailto:sbose@redhat.com">sbose@redhat.com</a>> wrote:<br>
> > ><br>
> > > > On Mon, May 19, 2014 at 04:29:24PM +0530, Supratik Goswami wrote:<br>
> > > > > Hi<br>
> > > > ><br>
> > > > > Let me start from the beginning once again. Let me explain you what<br>
> > > > steps I<br>
> > > > > followed during the setup.<br>
> > > > ><br>
> > > > > I am setting up the environment in Amazon AWS, both Windows AD<br>
> > server and<br>
> > > > > Linux IPA configured in EC2.<br>
> > > > > For configuring Windows 2008 I selected<br>
> > > > > Windows_Server-2008-R2_SP1-English-64Bit-Base-2014.04.09<br>
> > (ami-df8e93b6)<br>
> > > > > and for configuring IPA server I selected CentOS 6.5 (x86_64) -<br>
> > Release<br>
> > > > > Media (ami-8997afe0).<br>
> > > > ><br>
> > > > > I followed the steps from<br>
> > > > > <a href="http://www.freeipa.org/page/Howto/IPAv3_AD_trust_setup" target="_blank">http://www.freeipa.org/page/Howto/IPAv3_AD_trust_setup</a> and also<br>
> > kept the<br>
> > > > > domain names<br>
> > > > > similar as in the example.<br>
> > > > ><br>
> > > > > IPA server hostname: ipaserver<br>
> > > > > IPA domain: <a href="http://ipadomain.example.com" target="_blank">ipadomain.example.com</a><br>
> > > > > IPA NetBIOS: IPADOMAIN<br>
> > > > ><br>
> > > > > AD DC hostname: adserver<br>
> > > > > AD domain: <a href="http://addomain.example.com" target="_blank">addomain.example.com</a><br>
> > > > > AD NetBIOS: ADDOMAIN<br>
> > > > ><br>
> > > > ><br>
> > > > > 1. Updated the system and install the packages.<br>
> > > > ><br>
> > > > > # yum update -y<br>
> > > > > # yum install -y "*ipa-server" "*ipa-server-trust-ad"<br>
> > > > > samba4-winbind-clients samba4-winbind samba4-client bind<br>
> > bind-dyndb-ldap<br>
> > > > ><br>
> > > > > List of important packages installed during the update are as<br>
> > follows.<br>
> > > > ><br>
> > > > > bind x86_64 32:9.8.2-0.23.rc1.el6_5.1<br>
> > > > > bind-dyndb-ldap x86_64 2.3-5.el6<br>
> > > > ><br>
> > > > > ipa-server x86_64 3.0.0-37.el6<br>
> > > > > ipa-server-trust-ad x86_64 3.0.0-37.el6<br>
> > > > > ipa-admintools x86_64 3.0.0-37.el6<br>
> > > > > ipa-client x86_64 3.0.0-37.el6<br>
> > > > > ipa-pki-ca-theme noarch 9.0.3-7.el6<br>
> > > > > ipa-pki-common-theme noarch 9.0.3-7.el6<br>
> > > > > ipa-python x86_64 3.0.0-37.el6<br>
> > > > > ipa-server-selinux x86_64 3.0.0-37.el6<br>
> > > > ><br>
> > > > > samba4-client x86_64 4.0.0-61.el6_5.rc4<br>
> > > > > samba4-winbind x86_64 4.0.0-61.el6_5.rc4<br>
> > > > > samba4-winbind-clients x86_64 4.0.0-61.el6_5.rc4<br>
> > > > > samba4 x86_64 4.0.0-61.el6_5.rc4<br>
> > > > > samba4-common x86_64 4.0.0-61.el6_5.rc4<br>
> > > > > samba4-libs x86_64 4.0.0-61.el6_5.rc4<br>
> > > > > samba4-python x86_64 4.0.0-61.el6_5.rc4<br>
> > > ><br>
> > > > ah, sorry, I this might be a known issue, but I got on a wrong track<br>
> > > > because I thought it was working initially and only failed after<br>
> > reboot.<br>
> > > ><br>
> > > > Please try to set "client min protocol" and "client max protocol" in<br>
> > the<br>
> > > > samba configuration:<br>
> > > ><br>
> > > > net conf setparm global "client min protocol" smb2_02<br>
> > > > net conf setparm global "client max protocol" smb2_02<br>
> > > ><br>
> > > > restart winbind and try again.<br>
> > > ><br>
> > > > HTH<br>
> > > ><br>
> > > > bye,<br>
> > > > Sumit<br>
> > > ><br>
> > > > ><br>
> > > > > 389-ds-base x86_64 1.2.11.15-32.el6_5<br>
> > > > > 389-ds-base-libs x86_64 1.2.11.15-32.el6_5<br>
> > > > ><br>
> > > > > certmonger x86_64 0.61-3.el6<br>
> > > > ><br>
> > > > > krb5-server x86_64 1.10.3-15.el6_5.1<br>
> > > > > krb5-workstation x86_64 1.10.3-15.el6_5.1<br>
> > > > ><br>
> > > > > sssd x86_64 1.9.2-129.el6_5.4<br>
> > > > > sssd-client x86_64 1.9.2-129.el6_5.4<br>
> > > > ><br>
> > > > ><br>
> > > > ><br>
> > > ><br>
> > ><br>
> > ><br>
> > ><br>
> > > --<br>
> > > Warm Regards<br>
> > ><br>
> > > Supratik<br>
> ><br>
><br>
><br>
><br>
> --<br>
> Warm Regards<br>
><br>
> Supratik<br>
<br>
<br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br>Warm Regards<br><br>Supratik
</div>