abclinuxu.cz AbcLinuxu.cz itbiz.cz ITBiz.cz HDmag.cz HDmag.cz abcprace.cz AbcPráce.cz
AbcLinuxu hledá autory!
Inzerujte na AbcPráce.cz od 950 Kč
Rozšířené hledání
Přihlášení | Registrace
×
napište » Zprávičky
inzerujte » Pracovní nabídky
    O2 má opět problémy
    dnes 13:22 | IT novinky

    Operátor O2 má opět problémy. Jako omluvu za pondělní zhoršenou dostupnost služeb dal všem zákazníkům poukaz v hodnotě 300 Kč na nákup telefonu nebo příslušenství.

    Ladislav Hagara | Komentářů: 3
    Společnost OpenAI představila GPT-5
    dnes 05:55 | IT novinky

    Společnost OpenAI představila GPT-5 (YouTube).

    Ladislav Hagara | Komentářů: 0
    Visual Studio Code a VSCodium 1.103
    dnes 05:00 | Nová verze

    Byla vydána (𝕏) červencová aktualizace aneb nová verze 1.103 editoru zdrojových kódů Visual Studio Code (Wikipedie). Přehled novinek i s náhledy a videi v poznámkách k vydání. Ve verzi 1.103 vyjde také VSCodium, tj. komunitní sestavení Visual Studia Code bez telemetrie a licenčních podmínek Microsoftu.

    Ladislav Hagara | Komentářů: 0
    Trump vyzval nového šéfa Intelu, aby odstoupil
    včera 17:33 | IT novinky

    Americký prezident Donald Trump vyzval nového generálního ředitele firmy na výrobu čipů Intel, aby odstoupil. Prezident to zdůvodnil vazbami nového šéfa Lip-Bu Tana na čínské firmy.

    Ladislav Hagara | Komentářů: 7
    Ubuntu 24.04.3 LTS
    včera 16:55 | Nová verze

    Bylo vydáno Ubuntu 24.04.3 LTS, tj. třetí opravné vydání Ubuntu 24.04 LTS s kódovým názvem Noble Numbat. Přehled novinek a oprav na Discourse.

    Ladislav Hagara | Komentářů: 0
    Rust 1.89.0
    včera 16:44 | Nová verze

    Byla vydána verze 1.89.0 programovacího jazyka Rust (Wikipedie). Podrobnosti v poznámkách k vydání. Vyzkoušet Rust lze například na stránce Rust by Example.

    Ladislav Hagara | Komentářů: 0
    Apple investuje sto miliard dolarů v USA, Trump chce cla na polovodiče z dovozu
    včera 12:22 | IT novinky

    Americká technologická společnost Apple uskuteční v USA další investice ve výši sta miliard dolarů (2,1 bilionu korun). Oznámil to ve středu šéf firmy Tim Cook při setkání v Bílém domě s americkým prezidentem Donaldem Trumpem. Trump zároveň oznámil záměr zavést stoprocentní clo na polovodiče z dovozu.

    Ladislav Hagara | Komentářů: 4
    Proxmox Backup Server 4.0
    včera 04:55 | Nová verze

    Zálohovací server Proxmox Backup Server byl vydán v nové stabilní verzi 4.0. Založen je na Debianu 13 Trixie.

    Ladislav Hagara | Komentářů: 0
    NetworkManager 1.54.0
    6.8. 16:33 | Nová verze

    Byla vydána nová verze 1.54.0 sady nástrojů pro správu síťových připojení NetworkManager. Novinkám se v příspěvku na blogu NetworkManageru věnuje Jan Václav.

    Ladislav Hagara | Komentářů: 0
    Programovací jazyk GO, nová kniha z Edice CZ.NIC
    6.8. 14:11 | IT novinky

    Knižní edice správce české národní domény přináší novou knihu zkušeného programátora Pavla Tišnovského s názvem Programovací jazyk Go. Publikace nabízí srozumitelný a prakticky zaměřený pohled na programování v tomto moderním jazyce. Nejedná se však o klasickou učebnici, ale spíše o průvodce pro vývojáře, kteří s Go začínají, nebo pro ty, kdo hledají odpovědi na konkrétní otázky či inspiraci k dalšímu objevování. Tištěná i digitální verze knihy je již nyní k dispozici u většiny knihkupců.

    Ladislav Hagara | Komentářů: 2
    Centrum | Napsat | Starší
    navrhněte » Anketa
    Kolik tabů máte standardně otevřeno ve web prohlížeči?
     (44%)
     (22%)
     (4%)
     (6%)
     (3%)
     (1%)
     (1%)
     (19%)
    Celkem 295 hlasů
     Komentářů: 23, poslední 4.8. 13:01
    Rozcestník
    AbcLinuxu
    HDmag.cz
    AbcLinuxu:/ Poradna / Linuxová poradna / Nelze získat oprávnění k sharu SAMBA
    Štítky: ACL, ATD, bez, Content Management System, DNS, error, For, groups, ins, Internet, Kerberos, LAN, log, MFA, passwd, rights, root, Samba, server, service, share, signed, sítě, system, token, úložiště, Unix, uživatel, VFS, wiki, Windows

    Dotaz: Nelze získat oprávnění k sharu SAMBA

    28.3.2021 11:37 pepa006
    Nelze získat oprávnění k sharu SAMBA
    Přečteno: 2115×
    Zdravím,

    mám dva samba servery, jeden jako doménu a jeden jako úložiště dat. Nějakou dobu to fungovalo celkem obstojně. Poté jeden jeden z userů ztratil oprávnění vstupu na ten datový server, a to bez nějaké zjevné příčiny. Ostatní uživatelé ze stejné skupiny fungovali naprosto bez problému.

    Teď jsem to zkoušel nahodit ze zálohy a dopadlo to ještě hůř. Teď jsem v situaci, kdy všechny počítače vidí share, ale přístup k němu má pouze administrátor, nikdo jiný. Pokud oprávnění zkouším nastavovat dle wiki.samba ve Windows, tak mi to napíše, že se nelze spojit s virtuální diskovou službou.

    Dokonce jsem zkoušel i vytvořit nový dataserver, ale ten se k doméně vůbec nepřipojí, kvůli problému s DNS. Toto pak vypisuje doménový server: 
    ; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _ldap._tcp.ddf8ac2a-db19-4da7-a9d7-0a72106343f6.domains._m                                                                                                                                                             sdcs.mojedomena.lan DC01.mojedomena.lan 389
Calling nsupdate for SRV _ldap._tcp.ddf8ac2a-db19-4da7-a9d7-0a72106343f6.domains                                                                                                                                                             ._msdcs.mojedomena.lan DC01.mojedomena.lan 389 (add)
Successfully obtained Kerberos ticket to DNS/DC01.mojedomena.lan as DC01$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.ddf8ac2a-db19-4da7-a9d7-0a72106343f6.domains._msdcs.mojedomena.lan. 9                                                                                                                                                             00 IN SRV 0 100 389 DC01.mojedomena.lan.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _kerberos._tcp.mojedomena.lan DC01.mojedomena.lan 88
Calling nsupdate for SRV _kerberos._tcp.mojedomena.lan DC01.mojedomena.lan 88 (a                                                                                                                                                             dd)
Successfully obtained Kerberos ticket to DNS/DC01.mojedomena.lan as DC01$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_kerberos._tcp.mojedomena.lan. 900 IN   SRV     0 100 88 DC01.mojedomena.lan.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _kerberos._udp.mojedomena.lan DC01.mojedomena.lan 88
Calling nsupdate for SRV _kerberos._udp.mojedomena.lan DC01.mojedomena.lan 88 (a                                                                                                                                                             dd)
Successfully obtained Kerberos ticket to DNS/DC01.mojedomena.lan as DC01$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_kerberos._udp.mojedomena.lan. 900 IN   SRV     0 100 88 DC01.mojedomena.lan.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _kerberos._tcp.dc._msdcs.mojedomena.lan DC01.mojedomena.la                                                                                                                                                             n 88
Calling nsupdate for SRV _kerberos._tcp.dc._msdcs.mojedomena.lan DC01.mojedomena                                                                                                                                                             .lan 88 (add)
Successfully obtained Kerberos ticket to DNS/DC01.mojedomena.lan as DC01$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_kerberos._tcp.dc._msdcs.mojedomena.lan. 900 IN SRV 0 100 88 DC01.mojedomena.lan                                                                                                                                                             .

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _kpasswd._tcp.mojedomena.lan DC01.mojedomena.lan 464
Calling nsupdate for SRV _kpasswd._tcp.mojedomena.lan DC01.mojedomena.lan 464 (a                                                                                                                                                             dd)
Successfully obtained Kerberos ticket to DNS/DC01.mojedomena.lan as DC01$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_kpasswd._tcp.mojedomena.lan. 900 IN    SRV     0 100 464 DC01.mojedomena.lan.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _kpasswd._udp.mojedomena.lan DC01.mojedomena.lan 464
Calling nsupdate for SRV _kpasswd._udp.mojedomena.lan DC01.mojedomena.lan 464 (a                                                                                                                                                             dd)
Successfully obtained Kerberos ticket to DNS/DC01.mojedomena.lan as DC01$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_kpasswd._udp.mojedomena.lan. 900 IN    SRV     0 100 464 DC01.mojedomena.lan.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): CNAME cd6f16a5-c8b2-4491-8279-446f4cb2def7._msdcs.mojedomena.l                                                                                                                                                             an DC01.mojedomena.lan
Calling nsupdate for CNAME cd6f16a5-c8b2-4491-8279-446f4cb2def7._msdcs.mojedomena.lan DC01.mojedomena.lan (add)
Successfully obtained Kerberos ticket to DNS/DC01.mojedomena.lan as DC01$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
cd6f16a5-c8b2-4491-8279-446f4cb2def7._msdcs.mojedomena.lan. 900 IN CNAME DC01.mojedomena.lan.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.mojedomena.lan D                                                                                                                                                             C01.mojedomena.lan 389
Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.mojedomena.la                                                                                                                                                             n DC01.mojedomena.lan 389 (add)
Successfully obtained Kerberos ticket to DNS/DC01.mojedomena.lan as DC01$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.Default-First-Site-Name._sites.mojedomena.lan. 900 IN SRV 0 100 389 D                                                                                                                                                             C01.mojedomena.lan.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.mfadvo                                                                                                                                                             kati.lan DC01.mojedomena.lan 389
Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.mfa                                                                                                                                                             dvokati.lan DC01.mojedomena.lan 389 (add)
Successfully obtained Kerberos ticket to DNS/DC01.mojedomena.lan as DC01$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.mojedomena.lan. 900 IN SRV 0                                                                                                                                                              100 389 DC01.mojedomena.lan.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _kerberos._tcp.Default-First-Site-Name._sites.mojedomena.l                                                                                                                                                             an DC01.mojedomena.lan 88
Calling nsupdate for SRV _kerberos._tcp.Default-First-Site-Name._sites.mojedomena DC01.mojedomena.lan 88 (add)
Successfully obtained Kerberos ticket to DNS/DC01.mojedomena.lan as DC01$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_kerberos._tcp.Default-First-Site-Name._sites.mojedomena.lan. 900 IN SRV 0 100 8                                                                                                                                                             8 DC01.mojedomena.lan.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.mojedomena DC01.mojedomena.lan 88
Calling nsupdate for SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs                                                                                                                                                             .mojedomena.lan DC01.mojedomena.lan 88 (add)
Successfully obtained Kerberos ticket to DNS/DC01.mojedomena.lan as DC01$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.mojedomena.lan. 900 IN S                                                                                                                                                             RV 0 100 88 DC01.mojedomena.lan.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _ldap._tcp.pdc._msdcs.mojedomena.lan DC01.mojedomena.lan 3                                                                                                                                                             89
Calling nsupdate for SRV _ldap._tcp.pdc._msdcs.mojedomena.lan DC01.mojedomena.la                                                                                                                                                             n 389 (add)
Successfully obtained Kerberos ticket to DNS/DC01.mojedomena.lan as DC01$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.pdc._msdcs.mojedomena.lan. 900 IN SRV 0 100 389 DC01.mojedomena.lan.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): A gc._msdcs.mojedomena.lan 192.168.100.10
Calling nsupdate for A gc._msdcs.mojedomena.lan 192.168.100.10 (add)
Successfully obtained Kerberos ticket to DNS/DC01.mojedomena.lan as DC01$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
gc._msdcs.mojedomena.lan. 900   IN      A       192.168.100.10

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _gc._tcp.mojedomena.lan DC01.mojedomena.lan 3268
Calling nsupdate for SRV _gc._tcp.mojedomena.lan DC01.mojedomena.lan 3268 (add)
Successfully obtained Kerberos ticket to DNS/DC01.mojedomena.lan as DC01$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_gc._tcp.mojedomena.lan. 900    IN      SRV     0 100 3268 DC01.mojedomena.lan.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _ldap._tcp.gc._msdcs.mojedomena.lan DC01.mojedomena.lan 32                                                                                                                                                             68
Calling nsupdate for SRV _ldap._tcp.gc._msdcs.mojedomena.lan DC01.mojedomena.lan                                                                                                                                                              3268 (add)
Successfully obtained Kerberos ticket to DNS/DC01.mojedomena.lan as DC01$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.gc._msdcs.mojedomena.lan. 900 IN SRV 0 100 3268 DC01.mojedomena.lan.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _gc._tcp.Default-First-Site-Name._sites.mojedomena.lan DC0                                                                                                                                                             1.mojedomena.lan 3268
Calling nsupdate for SRV _gc._tcp.Default-First-Site-Name._sites.mojedomena.lan                                                                                                                                                              DC01.mojedomena.lan 3268 (add)
Successfully obtained Kerberos ticket to DNS/DC01.mojedomena.lan as DC01$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_gc._tcp.Default-First-Site-Name._sites.mojedomena.lan. 900 IN SRV 0 100 3268 DC                                                                                                                                                             01.mojedomena.lan.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.mfadvo                                                                                                                                                             kati.lan DC01.mojedomena.lan 3268
Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.mfa                                                                                                                                                             dvokati.lan DC01.mojedomena.lan 3268 (add)
Successfully obtained Kerberos ticket to DNS/DC01.mojedomena.lan as DC01$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.mojedomena.lan. 900 IN SRV 0                                                                                                                                                              100 3268 DC01.mojedomena.lan.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): A DomainDnsZones.mojedomena.lan 192.168.100.10
Calling nsupdate for A DomainDnsZones.mojedomena.lan 192.168.100.10 (add)
Successfully obtained Kerberos ticket to DNS/DC01.mojedomena.lan as DC01$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
DomainDnsZones.mojedomena.lan. 900 IN   A       192.168.100.10

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _ldap._tcp.DomainDnsZones.mojedomena.lan DC01.mojedomena.l                                                                                                                                                             an 389
Calling nsupdate for SRV _ldap._tcp.DomainDnsZones.mojedomena.lan DC01.mojedomena.lan 389 (add)
Successfully obtained Kerberos ticket to DNS/DC01.mojedomena.lan as DC01$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.DomainDnsZones.mojedomena.lan. 900 IN SRV 0 100 389 DC01.mojedomena.l                                                                                                                                                             an.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.mojedomena.lan DC01.mojedomena.lan 389
Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZone                                                                                                                                                             s.mojedomena.lan DC01.mojedomena.lan 389 (add)
Successfully obtained Kerberos ticket to DNS/DC01.mojedomena.lan as DC01$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.mojedomena.lan. 900 INS                                                                                                                                                             RV 0 100 389 DC01.mojedomena.lan.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): A ForestDnsZones.mojedomena.lan 192.168.100.10
Calling nsupdate for A ForestDnsZones.mojedomena.lan 192.168.100.10 (add)
Successfully obtained Kerberos ticket to DNS/DC01.mojedomena.lan as DC01$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
ForestDnsZones.mojedomena.lan. 900 IN   A       192.168.100.10

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _ldap._tcp.ForestDnsZones.mojedomena.lan DC01.mojedomena.l                                                                                                                                                             an 389
Calling nsupdate for SRV _ldap._tcp.ForestDnsZones.mojedomena.lan DC01.mojedomena.lan 389 (add)
Successfully obtained Kerberos ticket to DNS/DC01.mojedomena.lan as DC01$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.ForestDnsZones.mojedomena.lan. 900 IN SRV 0 100 389 DC01.mojedomena.l                                                                                                                                                             an.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.mojedomena.lan DC01.mojedomena.lan 389
Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZone                                                                                                                                                             s.mojedomena.lan DC01.mojedomena.lan 389 (add)
Successfully obtained Kerberos ticket to DNS/DC01.mojedomena.lan as DC01$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.mojedomena.lan. 900 INS                                                                                                                                                             RV 0 100 389 DC01.mojedomena.lan.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
Failed update of 29 entries
    Pak teda k samotnému problému. Zkoušel jsem to několikrát přenastavit podle návodu na wiki.samba, dělal jsem tam všechy testy, včetně getent passwd, nslookup, _ldap._tcp., atd. a všechno bylo v souladu s tím návodem, takže fakt netuším, kde hledat tu chybu.

    Log samby pak říká toto: 
    [2021/03/27 23:17:04.991655,  4] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2021/03/27 23:17:04.991696,  5] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2021/03/27 23:17:04.991707,  5] ../source3/auth/token_util.c:866(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2021/03/27 23:17:04.991736,  5] ../source3/smbd/uid.c:509(smbd_change_to_root_user)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2021/03/27 23:17:04.991773,  5] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock)
  dbwrap_lock_order_lock: check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb
[2021/03/27 23:17:04.991814,  5] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock)
  dbwrap_lock_order_unlock: release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb
[2021/03/27 23:17:04.991851,  3] ../lib/util/access.c:365(allow_access)
  Allowed connection from 192.168.100.103 (192.168.100.103)
[2021/03/27 23:17:04.991904,  3] ../source3/smbd/service.c:603(make_connection_snum)
  make_connection_snum: Connect path is '/tmp' for service [IPC$]
[2021/03/27 23:17:04.991929,  3] ../source3/smbd/vfs.c:113(vfs_init_default)
  Initialising default vfs hooks
[2021/03/27 23:17:04.991939,  3] ../source3/smbd/vfs.c:139(vfs_init_custom)
  Initialising custom vfs hooks from [/[Default VFS]/]
  Successfully loaded vfs module [/[Default VFS]/] with the new modules system
[2021/03/27 23:17:04.991952,  3] ../source3/smbd/vfs.c:139(vfs_init_custom)
  Initialising custom vfs hooks from [acl_xattr]
  Successfully loaded vfs module [acl_xattr] with the new modules system
[2021/03/27 23:17:04.991981,  2] ../source3/modules/vfs_acl_xattr.c:234(connect_acl_xattr)
  connect_acl_xattr: setting 'inherit acls = true' 'dos filemode = true' and 'force unknown acl user = true' for service IPC$
[2021/03/27 23:17:04.992023,  4] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal)
  setting sec ctx (1001104, 1000513) - sec_ctx_stack_ndx = 0
[2021/03/27 23:17:04.992035,  5] ../libcli/security/security_token.c:63(security_token_debug)
  Security token SIDs (15):
    SID[  0]: S-1-5-21-3350629017-2129866275-2833153760-1104
    SID[  1]: S-1-5-21-3350629017-2129866275-2833153760-513
    SID[  2]: S-1-5-21-3350629017-2129866275-2833153760-1110
    SID[  3]: S-1-1-0
    SID[  4]: S-1-5-2
    SID[  5]: S-1-5-11
    SID[  6]: S-1-5-32-545
    SID[  7]: S-1-22-1-1001104
    SID[  8]: S-1-22-2-1000513
    SID[  9]: S-1-22-2-1001104
    SID[ 10]: S-1-22-2-1001110
    SID[ 11]: S-1-22-2-3003
    SID[ 12]: S-1-22-2-3004
    SID[ 13]: S-1-22-2-3006
    SID[ 14]: S-1-22-2-3001
   Privileges (0x               0):
   Rights (0x               0):
[2021/03/27 23:17:04.992095,  5] ../source3/auth/token_util.c:866(debug_unix_user_token)
  UNIX token of user 1001104
  Primary group is 1000513 and contains 7 supplementary groups
  Group[  0]: 1001104
  Group[  1]: 1000513
  Group[  2]: 1001110
  Group[  3]: 3003
  Group[  4]: 3004
  Group[  5]: 3006
  Group[  6]: 3001
[2021/03/27 23:17:04.992141,  5] ../source3/smbd/uid.c:305(print_impersonation_info)
  print_impersonation_info: Impersonated user: uid=(1001104,1001104), gid=(0,1000513), cwd=[/]
[2021/03/27 23:17:04.992154,  4] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2021/03/27 23:17:04.992162,  5] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2021/03/27 23:17:04.992170,  5] ../source3/auth/token_util.c:866(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2021/03/27 23:17:04.992189,  5] ../source3/smbd/uid.c:509(smbd_change_to_root_user)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2021/03/27 23:17:04.992213,  3] ../source3/smbd/service.c:849(make_connection_snum)
  192.168.100.103 (ipv4:192.168.100.103:51225) connect to service IPC$ initially as user MOJEDOMENA\uživatel (uid=1001104, gid=1000513) (pid 461)
[2021/03/27 23:17:04.992229,  5] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock)
  dbwrap_lock_order_lock: check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb
[2021/03/27 23:17:04.992243,  5] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock)
  dbwrap_lock_order_unlock: release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb
[2021/03/27 23:17:04.992259,  5] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu)
  signed SMB2 message
[2021/03/27 23:17:04.993750,  4] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal)
  setting sec ctx (1001104, 1000513) - sec_ctx_stack_ndx = 0
[2021/03/27 23:17:04.993769,  5] ../libcli/security/security_token.c:63(security_token_debug)
  Security token SIDs (15):
    SID[  0]: S-1-5-21-3350629017-2129866275-2833153760-1104
    SID[  1]: S-1-5-21-3350629017-2129866275-2833153760-513
    SID[  2]: S-1-5-21-3350629017-2129866275-2833153760-1110
    SID[  3]: S-1-1-0
    SID[  4]: S-1-5-2
    SID[  5]: S-1-5-11
    SID[  6]: S-1-5-32-545
    SID[  7]: S-1-22-1-1001104
    SID[  8]: S-1-22-2-1000513
    SID[  9]: S-1-22-2-1001104
    SID[ 10]: S-1-22-2-1001110
    SID[ 11]: S-1-22-2-3003
    SID[ 12]: S-1-22-2-3004
    SID[ 13]: S-1-22-2-3006
    SID[ 14]: S-1-22-2-3001
   Privileges (0x               0):
   Rights (0x               0):
[2021/03/27 23:17:04.993830,  5] ../source3/auth/token_util.c:866(debug_unix_user_token)
  UNIX token of user 1001104
  Primary group is 1000513 and contains 7 supplementary groups
  Group[  0]: 1001104
  Group[  1]: 1000513
  Group[  2]: 1001110
  Group[  3]: 3003
  Group[  4]: 3004
  Group[  5]: 3006
  Group[  6]: 3001
[2021/03/27 23:17:04.993869,  4] ../source3/smbd/vfs.c:805(vfs_ChDir)
  vfs_ChDir to /tmp
[2021/03/27 23:17:04.993893,  4] ../source3/smbd/vfs.c:859(vfs_ChDir)
  vfs_ChDir got /tmp
[2021/03/27 23:17:04.993904,  5] ../source3/smbd/uid.c:305(print_impersonation_info)
  print_impersonation_info: Impersonated user: uid=(1001104,1001104), gid=(0,1000513), cwd=[/tmp]
[2021/03/27 23:17:04.993916,  5] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock)
  dbwrap_lock_order_lock: check lock order 1 for /var/run/samba/smbXsrv_session_global.tdb
[2021/03/27 23:17:04.993936,  5] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock)
  dbwrap_lock_order_unlock: release lock order 1 for /var/run/samba/smbXsrv_session_global.tdb
[2021/03/27 23:17:04.993947,  5] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock)
  dbwrap_lock_order_lock: check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb
[2021/03/27 23:17:04.993958,  5] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock)
  dbwrap_lock_order_unlock: release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb
[2021/03/27 23:17:04.993983,  3] ../source3/smbd/msdfs.c:1063(get_referred_path)
  get_referred_path: |Agenda Uživatel| in dfs path \data\Agenda Uživatel is not a dfs root.
[2021/03/27 23:17:04.993995,  3] ../source3/smbd/smb2_server.c:3195(smbd_smb2_request_error_ex)
  smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_NOT_FOUND] || at ../source3/smbd/smb2_ioctl.c:312
[2021/03/27 23:17:04.994055,  5] ../source3/smbd/uid.c:331(change_to_user_impersonate)
  change_to_user_impersonate: Skipping user change - already user
[2021/03/27 23:17:04.994070,  5] ../source3/smbd/uid.c:305(print_impersonation_info)
  print_impersonation_info: Impersonated user: uid=(1001104,1001104), gid=(0,1000513), cwd=[/tmp]
[2021/03/27 23:17:04.994098,  3] ../source3/smbd/msdfs.c:1063(get_referred_path)
  get_referred_path: |Agenda Uživatel| in dfs path \data\Agenda Uživatel is not a dfs root.
[2021/03/27 23:17:04.994108,  3] ../source3/smbd/smb2_server.c:3195(smbd_smb2_request_error_ex)
  smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_NOT_FOUND] || at ../source3/smbd/smb2_ioctl.c:312
[2021/03/27 23:17:04.995528,  4] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal)
  setting sec ctx (1001104, 1000513) - sec_ctx_stack_ndx = 0
[2021/03/27 23:17:04.995544,  5] ../libcli/security/security_token.c:63(security_token_debug)
  Security token SIDs (15):
    SID[  0]: S-1-5-21-3350629017-2129866275-2833153760-1104
    SID[  1]: S-1-5-21-3350629017-2129866275-2833153760-513
    SID[  2]: S-1-5-21-3350629017-2129866275-2833153760-1110
    SID[  3]: S-1-1-0
    SID[  4]: S-1-5-2
    SID[  5]: S-1-5-11
    SID[  6]: S-1-5-32-545
    SID[  7]: S-1-22-1-1001104
    SID[  8]: S-1-22-2-1000513
    SID[  9]: S-1-22-2-1001104
    SID[ 10]: S-1-22-2-1001110
    SID[ 11]: S-1-22-2-3003
    SID[ 12]: S-1-22-2-3004
    SID[ 13]: S-1-22-2-3006
    SID[ 14]: S-1-22-2-3001
   Privileges (0x               0):
   Rights (0x               0):
[2021/03/27 23:17:04.995645,  5] ../source3/auth/token_util.c:866(debug_unix_user_token)
  UNIX token of user 1001104
  Primary group is 1000513 and contains 7 supplementary groups
  Group[  0]: 1001104
  Group[  1]: 1000513
  Group[  2]: 1001110
  Group[  3]: 3003
  Group[  4]: 3004
  Group[  5]: 3006
  Group[  6]: 3001
[2021/03/27 23:17:04.995685,  4] ../source3/smbd/vfs.c:805(vfs_ChDir)
  vfs_ChDir to /mnt/DATA/Uživatel
[2021/03/27 23:17:04.995695,  3] ../source3/smbd/service.c:156(chdir_current_service)
  chdir (/mnt/DATA/Uživatel) failed, reason: Operace zamìtnuta
[2021/03/27 23:17:04.995705,  0] ../source3/smbd/uid.c:453(change_to_user_internal)
  change_to_user_internal: chdir_current_service() failed!
[2021/03/27 23:17:04.995738,  3] ../source3/smbd/smb2_server.c:3195(smbd_smb2_request_error_ex)
  smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_server.c:2522
[2021/03/27 23:17:04.995768,  5] ../source3/smbd/uid.c:331(change_to_user_impersonate)
  change_to_user_impersonate: Skipping user change - already user
[2021/03/27 23:17:04.995782,  4] ../source3/smbd/vfs.c:805(vfs_ChDir)
  vfs_ChDir to /mnt/DATA/Uživatel
[2021/03/27 23:17:04.995791,  3] ../source3/smbd/service.c:156(chdir_current_service)
  chdir (/mnt/DATA/Uživatel) failed, reason: Operace zamìtnuta
[2021/03/27 23:17:04.995799,  0] ../source3/smbd/uid.c:453(change_to_user_internal)
  change_to_user_internal: chdir_current_service() failed!
[2021/03/27 23:17:04.995815,  3] ../source3/smbd/smb2_server.c:3195(smbd_smb2_request_error_ex)
  smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_server.c:2522
[2021/03/27 23:17:04.997188,  5] ../source3/smbd/uid.c:331(change_to_user_impersonate)
  change_to_user_impersonate: Skipping user change - already user
[2021/03/27 23:17:04.997203,  4] ../source3/smbd/vfs.c:805(vfs_ChDir)
  vfs_ChDir to /mnt/DATA/Uživatel
[2021/03/27 23:17:04.997213,  3] ../source3/smbd/service.c:156(chdir_current_service)
  chdir (/mnt/DATA/Uživatel) failed, reason: Operace zamìtnuta
[2021/03/27 23:17:04.997222,  0] ../source3/smbd/uid.c:453(change_to_user_internal)
  change_to_user_internal: chdir_current_service() failed!
[2021/03/27 23:17:04.997247,  3] ../source3/smbd/smb2_server.c:3195(smbd_smb2_request_error_ex)
  smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_server.c:2522
[2021/03/27 23:17:04.997276,  5] ../source3/smbd/uid.c:331(change_to_user_impersonate)
  change_to_user_impersonate: Skipping user change - already user
[2021/03/27 23:17:04.997305,  4] ../source3/smbd/vfs.c:805(vfs_ChDir)
  vfs_ChDir to /mnt/DATA/Uživatel
[2021/03/27 23:17:04.997314,  3] ../source3/smbd/service.c:156(chdir_current_service)
  chdir (/mnt/DATA/Uživatel) failed, reason: Operace zamìtnuta
[2021/03/27 23:17:04.997335,  0] ../source3/smbd/uid.c:453(change_to_user_internal)
  change_to_user_internal: chdir_current_service() failed!
[2021/03/27 23:17:04.997351,  3] ../source3/smbd/smb2_server.c:3195(smbd_smb2_request_error_ex)
  smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_server.c:2522
[2021/03/27 23:17:04.998461,  5] ../source3/smbd/uid.c:331(change_to_user_impersonate)
  change_to_user_impersonate: Skipping user change - already user
[2021/03/27 23:17:04.998490,  4] ../source3/smbd/vfs.c:805(vfs_ChDir)
  vfs_ChDir to /mnt/DATA/Uživatel
[2021/03/27 23:17:04.998500,  3] ../source3/smbd/service.c:156(chdir_current_service)
  chdir (/mnt/DATA/Uživatel) failed, reason: Operace zamìtnuta
[2021/03/27 23:17:04.998509,  0] ../source3/smbd/uid.c:453(change_to_user_internal)
  change_to_user_internal: chdir_current_service() failed!
[2021/03/27 23:17:04.998533,  3] ../source3/smbd/smb2_server.c:3195(smbd_smb2_request_error_ex)
  smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_server.c:2522
[2021/03/27 23:17:04.999589,  5] ../source3/smbd/uid.c:331(change_to_user_impersonate)
  change_to_user_impersonate: Skipping user change - already user
[2021/03/27 23:17:04.999604,  4] ../source3/smbd/vfs.c:805(vfs_ChDir)
  vfs_ChDir to /mnt/DATA/Uživatel
[2021/03/27 23:17:04.999614,  3] ../source3/smbd/service.c:156(chdir_current_service)
  chdir (/mnt/DATA/Uživatel) failed, reason: Operace zamìtnuta
[2021/03/27 23:17:04.999622,  0] ../source3/smbd/uid.c:453(change_to_user_internal)
  change_to_user_internal: chdir_current_service() failed!
[2021/03/27 23:17:04.999647,  3] ../source3/smbd/smb2_server.c:3195(smbd_smb2_request_error_ex)
  smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_server.c:2522
[2021/03/27 23:17:05.000989,  5] ../source3/smbd/uid.c:331(change_to_user_impersonate)
  change_to_user_impersonate: Skipping user change - already user
[2021/03/27 23:17:05.001004,  4] ../source3/smbd/vfs.c:805(vfs_ChDir)
  vfs_ChDir to /mnt/DATA/Uživatel
[2021/03/27 23:17:05.001013,  3] ../source3/smbd/service.c:156(chdir_current_service)
  chdir (/mnt/DATA/Uživatel) failed, reason: Operace zamìtnuta
[2021/03/27 23:17:05.001026,  0] ../source3/smbd/uid.c:453(change_to_user_internal)
  change_to_user_internal: chdir_current_service() failed!
[2021/03/27 23:17:05.001051,  3] ../source3/smbd/smb2_server.c:3195(smbd_smb2_request_error_ex)
  smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_server.c:2522
[2021/03/27 23:17:05.002443,  5] ../source3/smbd/uid.c:331(change_to_user_impersonate)
  change_to_user_impersonate: Skipping user change - already user
[2021/03/27 23:17:05.002458,  4] ../source3/smbd/vfs.c:805(vfs_ChDir)
  vfs_ChDir to /mnt/DATA/Uživatel
[2021/03/27 23:17:05.002468,  3] ../source3/smbd/service.c:156(chdir_current_service)
  chdir (/mnt/DATA/Uživatel) failed, reason: Operace zamìtnuta
[2021/03/27 23:17:05.002477,  0] ../source3/smbd/uid.c:453(change_to_user_internal)
  change_to_user_internal: chdir_current_service() failed!
[2021/03/27 23:17:05.002501,  3] ../source3/smbd/smb2_server.c:3195(smbd_smb2_request_error_ex)
  smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_server.c:2522
[2021/03/27 23:17:05.009094,  5] ../source3/smbd/uid.c:331(change_to_user_impersonate)
  change_to_user_impersonate: Skipping user change - already user
[2021/03/27 23:17:05.009110,  4] ../source3/smbd/vfs.c:805(vfs_ChDir)
  vfs_ChDir to /mnt/DATA/Uživatel
[2021/03/27 23:17:05.009119,  3] ../source3/smbd/service.c:156(chdir_current_service)
  chdir (/mnt/DATA/Uživatel) failed, reason: Operace zamìtnuta
[2021/03/27 23:17:05.009128,  0] ../source3/smbd/uid.c:453(change_to_user_internal)
  change_to_user_internal: chdir_current_service() failed!
[2021/03/27 23:17:05.009153,  3] ../source3/smbd/smb2_server.c:3195(smbd_smb2_request_error_ex)
  smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_server.c:2522
[2021/03/27 23:17:07.132855,  5] ../source3/smbd/uid.c:331(change_to_user_impersonate)
  change_to_user_impersonate: Skipping user change - already user
[2021/03/27 23:17:07.132892,  4] ../source3/smbd/vfs.c:805(vfs_ChDir)
  vfs_ChDir to /mnt/DATA/Uživatel
[2021/03/27 23:17:07.132904,  3] ../source3/smbd/service.c:156(chdir_current_service)
  chdir (/mnt/DATA/Uživatel) failed, reason: Operace zamìtnuta
[2021/03/27 23:17:07.132914,  0] ../source3/smbd/uid.c:453(change_to_user_internal)
  change_to_user_internal: chdir_current_service() failed!
[2021/03/27 23:17:07.132949,  3] ../source3/smbd/smb2_server.c:3195(smbd_smb2_request_error_ex)
  smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_server.c:2522
[2021/03/27 23:17:15.720498,  4] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal)
  setting sec ctx (1001104, 1000513) - sec_ctx_stack_ndx = 0
[2021/03/27 23:17:15.720541,  5] ../libcli/security/security_token.c:63(security_token_debug)
  Security token SIDs (15):
    SID[  0]: S-1-5-21-3350629017-2129866275-2833153760-1104
    SID[  1]: S-1-5-21-3350629017-2129866275-2833153760-513
    SID[  2]: S-1-5-21-3350629017-2129866275-2833153760-1110
    SID[  3]: S-1-1-0
    SID[  4]: S-1-5-2
    SID[  5]: S-1-5-11
    SID[  6]: S-1-5-32-545
    SID[  7]: S-1-22-1-1001104
    SID[  8]: S-1-22-2-1000513
    SID[  9]: S-1-22-2-1001104
    SID[ 10]: S-1-22-2-1001110
    SID[ 11]: S-1-22-2-3003
    SID[ 12]: S-1-22-2-3004
    SID[ 13]: S-1-22-2-3006
    SID[ 14]: S-1-22-2-3001
   Privileges (0x               0):
   Rights (0x               0):
[2021/03/27 23:17:15.720648,  5] ../source3/auth/token_util.c:866(debug_unix_user_token)
  UNIX token of user 1001104
  Primary group is 1000513 and contains 7 supplementary groups
  Group[  0]: 1001104
  Group[  1]: 1000513
  Group[  2]: 1001110
  Group[  3]: 3003
  Group[  4]: 3004
  Group[  5]: 3006
  Group[  6]: 3001
[2021/03/27 23:17:15.720706,  5] ../source3/smbd/uid.c:305(print_impersonation_info)
  print_impersonation_info: Impersonated user: uid=(1001104,1001104), gid=(0,1000513), cwd=[/tmp]
[2021/03/27 23:17:15.720729,  4] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2021/03/27 23:17:15.720738,  5] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2021/03/27 23:17:15.720745,  5] ../source3/auth/token_util.c:866(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2021/03/27 23:17:15.720764,  5] ../source3/smbd/uid.c:509(smbd_change_to_root_user)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2021/03/27 23:17:15.720792,  4] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2021/03/27 23:17:15.720801,  5] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2021/03/27 23:17:15.720809,  5] ../source3/auth/token_util.c:866(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2021/03/27 23:17:15.720838,  5] ../source3/smbd/uid.c:509(smbd_change_to_root_user)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2021/03/27 23:17:15.720871,  4] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2021/03/27 23:17:15.720893,  5] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2021/03/27 23:17:15.720900,  5] ../source3/auth/token_util.c:866(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2021/03/27 23:17:15.720915,  5] ../source3/smbd/uid.c:509(smbd_change_to_root_user)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2021/03/27 23:17:15.720924,  3] ../source3/smbd/service.c:1129(close_cnum)
  192.168.100.103 (ipv4:192.168.100.103:51225) closed connection to service IPC$
[2021/03/27 23:17:15.720936,  4] ../source3/smbd/vfs.c:805(vfs_ChDir)
  vfs_ChDir to /
[2021/03/27 23:17:15.720949,  4] ../source3/smbd/vfs.c:859(vfs_ChDir)
  vfs_ChDir got /
[2021/03/27 23:17:15.720959,  4] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2021/03/27 23:17:15.720967,  5] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2021/03/27 23:17:15.720974,  5] ../source3/auth/token_util.c:866(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2021/03/27 23:17:15.720989,  5] ../source3/smbd/uid.c:509(smbd_change_to_root_user)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2021/03/27 23:17:15.721003,  5] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock)
  dbwrap_lock_order_lock: check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb
[2021/03/27 23:17:15.721022,  5] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock)
  dbwrap_lock_order_unlock: release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb
[2021/03/27 23:17:41.626134,  5] ../source3/smbd/process.c:2898(housekeeping_fn)
  housekeeping
[2021/03/27 23:17:41.626183,  4] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2021/03/27 23:17:41.626195,  5] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2021/03/27 23:17:41.626221,  5] ../source3/auth/token_util.c:866(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2021/03/27 23:17:41.626262,  5] ../source3/smbd/uid.c:509(smbd_change_to_root_user)
    Nevěděl by někdo, ja na to?
    Nástroje: Začni sledovat (0) ?Zašle upozornění na váš email při vložení nového komentáře.

    Odpovědi

    28.3.2021 13:33 X
    Rozbalit Rozbalit vše Re: Nelze získat oprávnění k sharu SAMBA
    Kdyz zacnes hned tim prvnim: 
    ; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
    Zkontroluj konfiguraci klicu ie. nazev, cesty, prava etc a logy na obou stranach.
    28.3.2021 15:56 pepa006
    Rozbalit Rozbalit vše Re: Nelze získat oprávnění k sharu SAMBA
    Příloha:
    Zkoušel jsem se dívat na ty oprávnění v umístění klíčů. To by podle mě snad mělo být v pořádku, ale jsem laik. Pro jistotu dávám print screeny.

    Pak jsem se díval na ty logy:

    Na DC to hlasí toto:

    log.smbd [2021/03/28 10:40:28.761496, 0] ../source3/smbd/uid.c:453(change_to_user_internal) change_to_user_internal: chdir_current_service() failed!

    log.samba [2021/03/28 11:13:05.615938, 0] ../source4/auth/gensec/gensec_gssapi.c:1344(gensec_gssapi_check_packet) gssapi_check_packet(hdr_signing=0,sig_size=28,data=156,pdu=156) failed: NT_STATUS_ACCESS_DENIED

    Na data serveru to hlásí:

    winbindd.log 
    [2021/03/28 15:25:10.306241,  3] ../source3/winbindd/winbindd_misc.c:419(winbindd_interface_version)
  [ 1588]: request interface version (version = 30)
[2021/03/28 15:25:10.306306,  3] ../source3/winbindd/winbindd_misc.c:452(winbindd_priv_pipe_dir)
  [ 1588]: request location of privileged pipe
[2021/03/28 15:25:10.306407,  3] ../source3/winbindd/winbindd_pam_auth_crap.c:113(winbindd_pam_auth_crap_send)
  [ 1588]: pam auth crap domain: [MOJEDOMENA] user: root
[2021/03/28 15:25:10.312811,  3] ../source3/winbindd/winbindd_getpwnam.c:58(winbindd_getpwnam_send)
  getpwnam janfila
[2021/03/28 15:25:26.153966,  3] ../source3/winbindd/winbindd_misc.c:419(winbindd_interface_version)
  [ 1592]: request interface version (version = 30)
[2021/03/28 15:25:26.154056,  3] ../source3/winbindd/winbindd_misc.c:452(winbindd_priv_pipe_dir)
  [ 1592]: request location of privileged pipe
[2021/03/28 15:25:26.154228,  3] ../source3/winbindd/winbindd_pam_auth_crap.c:113(winbindd_pam_auth_crap_send)
  [ 1592]: pam auth crap domain: [MOJEDOMENA] user: root
[2021/03/28 15:25:26.162647,  3] ../source3/winbindd/winbindd_getpwnam.c:58(winbindd_getpwnam_send)
  getpwnam administrator
    smbd.log 
    [2021/03/28 00:53:43.358722,  1] ../source3/lib/messages.c:910(send_all_fn)
  send_all_fn: messaging_send_buf to 1991 failed: NT_STATUS_OBJECT_NAME_NOT_FOUND
[2021/03/28 00:53:43.358769,  3] ../source3/lib/util_procid.c:54(pid_to_procid)
  pid_to_procid: messaging_dgm_get_unique failed: Adresář nebo soubor neexistuje
[2021/03/28 00:53:43.358788,  1] ../source3/lib/messages.c:910(send_all_fn)
  send_all_fn: messaging_send_buf to 436 failed: NT_STATUS_OBJECT_NAME_NOT_FOUND
    data.log 
    [2021/03/28 15:25:26.166638,  3] ../source3/smbd/smb2_server.c:3195(smbd_smb2_request_error_ex)
  smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_BAD_NETWORK_NAME] || at ../source3/smbd/smb2_tcon.c:138
[2021/03/28 15:25:26.166794,  3] ../source3/smbd/smb2_server.c:3195(smbd_smb2_request_error_ex)
  smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_NETWORK_NAME_DELETED] || at ../source3/smbd/smb2_server.c:2522
[2021/03/28 15:25:26.167891,  4] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2021/03/28 15:25:26.167905,  5] ../libcli/security/security_token.c:53(security_token_debug)
    log stanice: 
    [2021/03/27 21:57:08.168681,  4] ../source3/smbd/vfs.c:805(vfs_ChDir)
  vfs_ChDir to /mnt/DATA/share
[2021/03/27 21:57:08.168694,  3] ../source3/smbd/service.c:156(chdir_current_service)
  chdir (/mnt/DATA/share) failed, reason: Operace zamĂ­tnuta
[2021/03/27 21:57:08.168705,  0] ../source3/smbd/uid.c:453(change_to_user_internal)
  change_to_user_internal: chdir_current_service() failed!
[2021/03/27 21:57:08.168775,  3] ../source3/smbd/smb2_server.c:3195(smbd_smb2_request_error_ex)
  smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_server.c:2522
[2021/03/27 21:57:09.272074,  5] ../source3/smbd/uid.c:331(change_to_user_impersonate)
  change_to_user_impersonate: Skipping user change - already user
[2021/03/27 21:57:09.272114,  4] ../source3/smbd/vfs.c:805(vfs_ChDir)
  vfs_ChDir to /mnt/DATA/share
[2021/03/27 21:57:09.272127,  3] ../source3/smbd/service.c:156(chdir_current_service)
  chdir (/mnt/DATA/share) failed, reason: Operace zamĂ­tnuta
[2021/03/27 21:57:09.272165,  0] ../source3/smbd/uid.c:453(change_to_user_internal)
  change_to_user_internal: chdir_current_service() failed!
    Minule jsem to vyřešil nastavení oprávnění přímo složek na disku přes FTP klienta, ale dneska už to nezabírá, resp. si myslím, že to mám nastavené tak, když to fungovalo.
    28.3.2021 17:59 pavele
    Rozbalit Rozbalit vše Re: Nelze získat oprávnění k sharu SAMBA
    Jaká distribuce?
    28.3.2021 19:28 pepa006
    Rozbalit Rozbalit vše Re: Nelze získat oprávnění k sharu SAMBA
    Oba servery jsou Debian, a oba jednou jako VM na Proxmoxu.

    Založit nové vlákno • Nahoru

    Tiskni Sdílej: Linkuj Jaggni to Vybrali.sme.sk Google Del.icio.us Facebook

    Píšeme jinde
    ISSN 1214-1267   www.czech-server.cz
    Redakce | Inzerce | Podmínky použití | Osobní údaje
    © 1999-2015 Nitemedia s. r. o. Všechna práva vyhrazena.