Add NethServer 7 member to Active Directory not sync user and group

andettilinux · February 24, 2017, 9:28am

NethServer Version: 7.3.1611 release final
Module:Account Provider

i have installed a new nethserver instance and i need to add at Active directory infrastucture.

i have set ip address static in a green interface
i have set a dns server Primary domain controller
i have create One user for admin of nethserver
i have update the system
i have set the account domain to member ad (setting windows user name with a user create ad hoc)
the join of domain is ok but Still have alert : Account provider connection reset by peer: check if the server supports SSL/TLS connections
and the section user and group is empty:

this is a log of my systems:

Feb 24 10:09:14 dataserver systemd: Starting Realm and Domain Configuration... 
Feb 24 10:09:14 dataserver dbus[629]: [system] Successfully activated service 'org.freedesktop.realmd' 
Feb 24 10:09:14 dataserver dbus-daemon: dbus[629]: [system] Successfully activated service 'org.freedesktop.realmd' 
Feb 24 10:09:14 dataserver systemd: Started Realm and Domain Configuration. 
Feb 24 10:09:14 dataserver systemd: Stopping Realm and Domain Configuration... 
Feb 24 10:09:14 dataserver systemd: Stopped Realm and Domain Configuration. 
Feb 24 10:09:14 dataserver esmith::event[21351]: Action: /etc/e-smith/events/nethserver-sssd-leave/S10nethserver-sssd-leave SUCCESS [0.117394] 
Feb 24 10:09:14 dataserver esmith::event[21351]: [NOTICE] wipe out sssd databases and configuration 
Feb 24 10:09:14 dataserver esmith::event[21351]: Action: /etc/e-smith/events/nethserver-sssd-leave/S20nethserver-sssd-cleanup SUCCESS [0.006986] 
Feb 24 10:09:14 dataserver esmith::event[21351]: Event: nethserver-sssd-leave SUCCESS 
Feb 24 10:09:14 dataserver dbus[629]: [system] Activating via systemd: service name='org.freedesktop.realmd' unit='realmd.service' 
Feb 24 10:09:14 dataserver dbus-daemon: dbus[629]: [system] Activating via systemd: service name='org.freedesktop.realmd' unit='realmd.service' 
Feb 24 10:09:14 dataserver systemd: Cannot add dependency job for unit microcode.service, ignoring: Unit is not loaded properly: Invalid argument. 
Feb 24 10:09:14 dataserver systemd: Starting Realm and Domain Configuration... 
Feb 24 10:09:14 dataserver dbus[629]: [system] Successfully activated service 'org.freedesktop.realmd' 
Feb 24 10:09:14 dataserver dbus-daemon: dbus[629]: [system] Successfully activated service 'org.freedesktop.realmd' 
Feb 24 10:09:14 dataserver systemd: Started Realm and Domain Configuration. 
Feb 24 10:09:14 dataserver realmd: * Resolving: _ldap._tcp.westam.local 
Feb 24 10:09:14 dataserver realmd: * Performing LDAP DSE lookup on: 192.168.2.3 
Feb 24 10:09:14 dataserver realmd: * Performing LDAP DSE lookup on: 192.168.2.2 
Feb 24 10:09:14 dataserver realmd: * Successfully discovered: westam.local 
Feb 24 10:09:14 dataserver realmd: * Required files: /usr/sbin/oddjobd, /usr/libexec/oddjob/mkhomedir, /usr/sbin/sssd, /usr/bin/net 
Feb 24 10:09:14 dataserver realmd: * LANG=C LOGNAME=root /usr/bin/net -s /var/cache/realmd/realmd-smb-conf.PNOQVY -U Administrator ads join westam.local 
Feb 24 10:09:15 dataserver realmd: Enter Administrator's password: 
Feb 24 10:09:15 dataserver realmd: Using short domain name -- WESTAM 
Feb 24 10:09:15 dataserver realmd: Joined 'DATASERVER' to dns domain 'westam.local' 
Feb 24 10:09:15 dataserver realmd: * LANG=C LOGNAME=root /usr/bin/net -s /var/cache/realmd/realmd-smb-conf.PNOQVY -U Administrator ads keytab create 
Feb 24 10:09:15 dataserver realmd: Enter Administrator's password: 
Feb 24 10:09:15 dataserver realmd: * /usr/bin/systemctl enable sssd.service 
Feb 24 10:09:15 dataserver realmd: Created symlink from /etc/systemd/system/multi-user.target.wants/sssd.service to /usr/lib/systemd/system/sssd.service. 
Feb 24 10:09:15 dataserver systemd: Reloading. 
Feb 24 10:09:15 dataserver systemd: [/usr/lib/systemd/system/microcode.service:10] Trailing garbage, ignoring. 
Feb 24 10:09:15 dataserver systemd: microcode.service lacks both ExecStart= and ExecStop= setting. Refusing. 
Feb 24 10:09:15 dataserver realmd: * /usr/bin/systemctl restart sssd.service 
Feb 24 10:09:15 dataserver systemd: Cannot add dependency job for unit microcode.service, ignoring: Unit is not loaded properly: Invalid argument. 
Feb 24 10:09:15 dataserver systemd: Starting System Security Services Daemon... 
Feb 24 10:09:15 dataserver sssd: Starting up 
Feb 24 10:09:15 dataserver sssd[be[westam.local]]: Starting up 
Feb 24 10:09:15 dataserver sssd[nss]: Starting up 
Feb 24 10:09:15 dataserver sssd[pam]: Starting up 
Feb 24 10:09:15 dataserver systemd: Started System Security Services Daemon. 
Feb 24 10:09:15 dataserver systemd: Reached target User and Group Name Lookups. 
Feb 24 10:09:15 dataserver systemd: Starting User and Group Name Lookups. 
Feb 24 10:09:15 dataserver realmd: * /usr/bin/sh -c /usr/sbin/authconfig --update --enablesssd --enablesssdauth --enablemkhomedir --nostart && /usr/bin/systemctl enable oddjobd.service && /usr/bin/systemctl start oddjobd.service 
Feb 24 10:09:16 dataserver systemd: Reloading. 
Feb 24 10:09:16 dataserver systemd: [/usr/lib/systemd/system/microcode.service:10] Trailing garbage, ignoring. 
Feb 24 10:09:16 dataserver systemd: microcode.service lacks both ExecStart= and ExecStop= setting. Refusing. 
Feb 24 10:09:16 dataserver systemd: Reloading. 
Feb 24 10:09:16 dataserver systemd: [/usr/lib/systemd/system/microcode.service:10] Trailing garbage, ignoring. 
Feb 24 10:09:16 dataserver systemd: microcode.service lacks both ExecStart= and ExecStop= setting. Refusing. 
Feb 24 10:09:16 dataserver systemd: Reloading. 
Feb 24 10:09:16 dataserver systemd: [/usr/lib/systemd/system/microcode.service:10] Trailing garbage, ignoring. 
Feb 24 10:09:16 dataserver systemd: microcode.service lacks both ExecStart= and ExecStop= setting. Refusing. 
Feb 24 10:09:16 dataserver systemd: Cannot add dependency job for unit microcode.service, ignoring: Unit is not loaded properly: Invalid argument. 
Feb 24 10:09:16 dataserver systemd: Started privileged operations for unprivileged applications. 
Feb 24 10:09:16 dataserver systemd: Starting privileged operations for unprivileged applications... 
Feb 24 10:09:16 dataserver realmd: * Successfully enrolled machine in realm 
Feb 24 10:09:16 dataserver httpd: Password for Administrator: 
Feb 24 10:09:16 dataserver /sbin/e-smith/db[21492]: /var/lib/nethserver/db/configuration: OLD sssd=service|AdDns|192.168.2.2|BindDN|admin|BindPassword|Sysneth18!|LdapURI||Provider|ad|status|disabled 
Feb 24 10:09:16 dataserver /sbin/e-smith/db[21492]: /var/lib/nethserver/db/configuration: NEW sssd=service|AdDns|192.168.2.2|BindDN|admin|BindPassword|Sysneth18!|LdapURI||Provider|ad|status|enabled 
Feb 24 10:09:16 dataserver esmith::event[21495]: Event: nethserver-sssd-save 
Feb 24 10:09:16 dataserver systemd: Stopping System Security Services Daemon... 
Feb 24 10:09:16 dataserver sssd[nss]: Shutting down 
Feb 24 10:09:16 dataserver sssd[be[westam.local]]: Shutting down 
Feb 24 10:09:16 dataserver sssd[pam]: Shutting down 
Feb 24 10:09:16 dataserver systemd: Stopped System Security Services Daemon. 
Feb 24 10:09:16 dataserver esmith::event[21495]: [NOTICE] wipe out sssd databases and configuration 
Feb 24 10:09:16 dataserver esmith::event[21495]: Action: /etc/e-smith/events/nethserver-sssd-save/S01nethserver-sssd-cleanup SUCCESS [0.018458] 
Feb 24 10:09:16 dataserver esmith::event[21495]: expanding /etc/backup-config.d/nethserver-sssd.include 
Feb 24 10:09:16 dataserver esmith::event[21495]: expanding /etc/openldap/ldap.conf 
Feb 24 10:09:16 dataserver esmith::event[21495]: expanding /etc/samba/smb.conf 
Feb 24 10:09:16 dataserver esmith::event[21495]: expanding /etc/sssd/sssd.conf 
Feb 24 10:09:16 dataserver esmith::event[21495]: Action: /etc/e-smith/events/actions/generic_template_expand SUCCESS [0.300569] 
Feb 24 10:09:17 dataserver esmith::event[21495]: Action: /etc/e-smith/events/nethserver-sssd-save/S20nethserver-sssd-conf SUCCESS [0.321409] 
Feb 24 10:09:17 dataserver esmith::event[21495]: Action: /etc/e-smith/events/nethserver-sssd-save/S30nethserver-sssd-initkeytabs SUCCESS [0.544171] 
Feb 24 10:09:18 dataserver esmith::event[21522]: Event: nethserver-sssd-update 
Feb 24 10:09:18 dataserver esmith::event[21522]: Migrating existing database configuration 
Feb 24 10:09:18 dataserver esmith::event[21522]: Migrating existing database certificates 
Feb 24 10:09:18 dataserver esmith::event[21522]: Migrating existing database networks 
Feb 24 10:09:18 dataserver esmith::event[21522]: Migrating existing database routes 
Feb 24 10:09:18 dataserver esmith::event[21522]: Migrating existing database accounts 
Feb 24 10:09:18 dataserver esmith::event[21522]: Migrating existing database hosts 
Feb 24 10:09:18 dataserver esmith::event[21522]: Migrating existing database proxypass 
Feb 24 10:09:18 dataserver esmith::event[21522]: Migrating existing database fwrules 
Feb 24 10:09:18 dataserver esmith::event[21522]: Migrating existing database fwservices 
Feb 24 10:09:18 dataserver esmith::event[21522]: Migrating existing database portforward 
Feb 24 10:09:18 dataserver esmith::event[21522]: Migrating existing database tc 
Feb 24 10:09:18 dataserver esmith::event[21522]: Migrating existing database dhcp 
Feb 24 10:09:18 dataserver esmith::event[21522]: Action: /etc/e-smith/events/nethserver-sssd-update/S00initialize-default-databases SUCCESS [0.353808] 
Feb 24 10:09:18 dataserver esmith::event[21522]: expanding /etc/backup-config.d/nethserver-sssd.include 
Feb 24 10:09:18 dataserver esmith::event[21522]: expanding /etc/openldap/ldap.conf 
Feb 24 10:09:18 dataserver esmith::event[21522]: expanding /etc/samba/smb.conf 
Feb 24 10:09:18 dataserver esmith::event[21522]: expanding /etc/sssd/sssd.conf 
Feb 24 10:09:18 dataserver esmith::event[21522]: Action: /etc/e-smith/events/actions/generic_template_expand SUCCESS [0.296424] 
Feb 24 10:09:18 dataserver systemd: Reloading. 
Feb 24 10:09:18 dataserver systemd: [/usr/lib/systemd/system/microcode.service:10] Trailing garbage, ignoring. 
Feb 24 10:09:18 dataserver systemd: microcode.service lacks both ExecStart= and ExecStop= setting. Refusing. 
Feb 24 10:09:18 dataserver systemd: Cannot add dependency job for unit microcode.service, ignoring: Unit is not loaded properly: Invalid argument. 
Feb 24 10:09:18 dataserver systemd: Starting System Security Services Daemon... 
Feb 24 10:09:18 dataserver sssd: Starting up 
Feb 24 10:09:18 dataserver sssd[be[westam.local]]: Starting up 
Feb 24 10:09:18 dataserver sssd[be[legacy]]: Starting up 
Feb 24 10:09:19 dataserver sssd[nss]: Starting up 
Feb 24 10:09:19 dataserver sssd[pam]: Starting up 
Feb 24 10:09:19 dataserver systemd: Started System Security Services Daemon. 
Feb 24 10:09:19 dataserver esmith::event[21522]: [INFO] sssd has been started 
Feb 24 10:09:19 dataserver esmith::event[21522]: 
Feb 24 10:09:19 dataserver esmith::event[21522]: Action: /etc/e-smith/events/actions/adjust-services SUCCESS [0.445458] 
Feb 24 10:09:19 dataserver esmith::event[21522]: Event: nethserver-sssd-update SUCCESS 
Feb 24 10:09:19 dataserver esmith::event[21495]: Action: /etc/e-smith/events/nethserver-sssd-save/S80nethserver-sssd-notifyclients SUCCESS [1.36721] 
Feb 24 10:09:19 dataserver systemd: Reloading. 
Feb 24 10:09:19 dataserver systemd: [/usr/lib/systemd/system/microcode.service:10] Trailing garbage, ignoring. 
Feb 24 10:09:19 dataserver systemd: microcode.service lacks both ExecStart= and ExecStop= setting. Refusing. 
Feb 24 10:09:19 dataserver esmith::event[21495]: [INFO] service sssd restart 
Feb 24 10:09:19 dataserver systemd: Cannot add dependency job for unit microcode.service, ignoring: Unit is not loaded properly: Invalid argument. 
Feb 24 10:09:19 dataserver systemd: Stopping System Security Services Daemon... 
Feb 24 10:09:19 dataserver sssd[be[westam.local]]: Shutting down 
Feb 24 10:09:19 dataserver sssd[be[legacy]]: Shutting down 
Feb 24 10:09:19 dataserver sssd[nss]: Shutting down 
Feb 24 10:09:19 dataserver sssd[pam]: Shutting down 
Feb 24 10:09:19 dataserver systemd: Starting System Security Services Daemon... 
Feb 24 10:09:19 dataserver sssd: Starting up 
Feb 24 10:09:19 dataserver sssd[be[westam.local]]: Starting up 
Feb 24 10:09:19 dataserver sssd[be[legacy]]: Starting up 
Feb 24 10:09:19 dataserver sssd[nss]: Starting up 
Feb 24 10:09:19 dataserver sssd[pam]: Starting up 
Feb 24 10:09:19 dataserver [sssd[ldap_child[21600]]]: Failed to initialize credentials using keytab [MEMORY:/etc/krb5.keytab]: Preauthentication failed. Unable to create GSSAPI-encrypted LDAP connection. 
Feb 24 10:09:19 dataserver [sssd[ldap_child[21600]]]: Preauthentication failed 
Feb 24 10:09:19 dataserver systemd: Started System Security Services Daemon. 
Feb 24 10:09:19 dataserver esmith::event[21495]: [INFO] sssd restart 
Feb 24 10:09:19 dataserver esmith::event[21495]: Action: /etc/e-smith/events/actions/adjust-services SUCCESS [0.439737] 
Feb 24 10:09:19 dataserver esmith::event[21495]: Event: nethserver-sssd-save SUCCESS 
Feb 24 10:09:20 dataserver httpd: [ERROR] NethServer\Tool\GroupProvider: Account provider connection reset by peer: check if the server supports SSL/TLS connections 
Feb 24 10:09:20 dataserver httpd: [ERROR] Connection reset by peer 
Feb 24 10:09:27 dataserver httpd: [ERROR] NethServer\Tool\UserProvider: Account provider connection reset by peer: check if the server supports SSL/TLS connections 
Feb 24 10:09:27 dataserver httpd: [ERROR] Connection reset by peer

giacomo · February 24, 2017, 9:32am

This should be the relevant part:

Try to disable SSL connection or enable it in your Windows server,

If something goes wrong, please paste the output of:
account-provider-test dump

andettilinux · February 24, 2017, 10:26am

this is a output of:account-provider-test dump

“startTls” : “”,
“bindUser” : “admin”.
“userDN” : “dc=westam,dc=local”,
“port” : 636,
“isAD” : “1”,
“host” : “westam.local”,
“groupDN” : “dc=westam,dc=local”,
“isLdap” : “”,
“ldapURI” : “ldaps://westam.local”,
“baseDN” : “dc=westam,dc=local”,
“bindPassword” : “XXXX”,
“bindDN” : “admin”

I have find this on microsoft site:

https://technet.microsoft.com/en-us/library/ee411009(WS.10).aspx

" To confirm that LDAP over SSL is configured successfully

1.Open the Ldp snap-in. To open Ldp, click Start. In Start Search, type ldp. Right-click the Ldp icon on the Start menu, and then click Run as administrator. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Yes.

2.Click the Ldp Connection menu, and then click Connect. In Server, type the host name of the server to which you want to connect. Ensure that Port is set to 636, the Connectionless check box is cleared, and the SSL check box is selected, and then click OK. If you receive a message that says “Cannot open connection,” LDAP-over-SSL binding is not configured properly.

3.Click the Connection menu, click Bind, and then click OK.

4.The command output should display the user name and domain name that you used for binding, if LDAP over SSL is configured properly. "

if ia try to connect at the port 636 i dont have connection
" Error <0x51>: Fail to connect to Server01.westam.local. "

if ia try at the port 389

ld = ldap_open(“Server01.westam.local”, 389);
Established connection to Server01.westam.local.
Retrieving base DSA information…
Getting 1 entries:
Dn: (RootDSE)
configurationNamingContext: CN=Configuration,DC=westam,DC=local;
currentTime: 24/02/2017 11:18:29 ora solare Europa occidentale;
defaultNamingContext: DC=westam,DC=local;
dnsHostName: Server01.westam.local;
domainControllerFunctionality: 4 = ( WIN2008R2 );
domainFunctionality: 4 = ( WIN2008R2 );
dsServiceName: CN=NTDS Settings,CN=SERVER01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=westam,DC=local;
forestFunctionality: 4 = ( WIN2008R2 );
highestCommittedUSN: 40203;
isGlobalCatalogReady: TRUE;
isSynchronized: TRUE;
ldapServiceName: westam.local:server01$@WESTAM.LOCAL;
namingContexts (5): DC=westam,DC=local; CN=Configuration,DC=westam,DC=local; CN=Schema,CN=Configuration,DC=westam,DC=local; DC=DomainDnsZones,DC=westam,DC=local; DC=ForestDnsZones,DC=westam,DC=local;
rootDomainNamingContext: DC=westam,DC=local;
schemaNamingContext: CN=Schema,CN=Configuration,DC=westam,DC=local;
serverName: CN=SERVER01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=westam,DC=local;
subschemaSubentry: CN=Aggregate,CN=Schema,CN=Configuration,DC=westam,DC=local;
supportedCapabilities (5): 1.2.840.113556.1.4.800 = ( ACTIVE_DIRECTORY ); 1.2.840.113556.1.4.1670 = ( ACTIVE_DIRECTORY_V51 ); 1.2.840.113556.1.4.1791 = ( ACTIVE_DIRECTORY_LDAP_INTEG ); 1.2.840.113556.1.4.1935 = ( ACTIVE_DIRECTORY_V61 ); 1.2.840.113556.1.4.2080;
supportedControl (29): 1.2.840.113556.1.4.319 = ( PAGED_RESULT ); 1.2.840.113556.1.4.801 = ( SD_FLAGS ); 1.2.840.113556.1.4.473 = ( SORT ); 1.2.840.113556.1.4.528 = ( NOTIFICATION ); 1.2.840.113556.1.4.417 = ( SHOW_DELETED ); 1.2.840.113556.1.4.619 = ( LAZY_COMMIT ); 1.2.840.113556.1.4.841 = ( DIRSYNC ); 1.2.840.113556.1.4.529 = ( EXTENDED_DN ); 1.2.840.113556.1.4.805 = ( TREE_DELETE ); 1.2.840.113556.1.4.521 = ( CROSSDOM_MOVE_TARGET ); 1.2.840.113556.1.4.970 = ( GET_STATS ); 1.2.840.113556.1.4.1338 = ( VERIFY_NAME ); 1.2.840.113556.1.4.474 = ( RESP_SORT ); 1.2.840.113556.1.4.1339 = ( DOMAIN_SCOPE ); 1.2.840.113556.1.4.1340 = ( SEARCH_OPTIONS ); 1.2.840.113556.1.4.1413 = ( PERMISSIVE_MODIFY ); 2.16.840.1.113730.3.4.9 = ( VLVREQUEST ); 2.16.840.1.113730.3.4.10 = ( VLVRESPONSE ); 1.2.840.113556.1.4.1504 = ( ASQ ); 1.2.840.113556.1.4.1852 = ( QUOTA_CONTROL ); 1.2.840.113556.1.4.802 = ( RANGE_OPTION ); 1.2.840.113556.1.4.1907 = ( SHUTDOWN_NOTIFY ); 1.2.840.113556.1.4.1948 = ( RANGE_RETRIEVAL_NOERR ); 1.2.840.113556.1.4.1974 = ( FORCE_UPDATE ); 1.2.840.113556.1.4.1341 = ( RODC_DCPROMO ); 1.2.840.113556.1.4.2026 = ( DN_INPUT ); 1.2.840.113556.1.4.2064 = ( SHOW_RECYCLED ); 1.2.840.113556.1.4.2065 = ( SHOW_DEACTIVATED_LINK ); 1.2.840.113556.1.4.2066 = ( POLICY_HINTS );
supportedLDAPPolicies (16): MaxPoolThreads; MaxDatagramRecv; MaxReceiveBuffer; InitRecvTimeout; MaxConnections; MaxConnIdleTime; MaxPageSize; MaxQueryDuration; MaxTempTableSize; MaxResultSetSize; MinResultSets; MaxResultSetsPerConn; MaxNotificationPerConn; MaxValRange; ThreadMemoryLimit; SystemMemoryLimitPercent;
supportedLDAPVersion (2): 3; 2;
supportedSASLMechanisms (4): GSSAPI; GSS-SPNEGO; EXTERNAL; DIGEST-MD5;

0 = ldap_set_option(ld, LDAP_OPT_ENCRYPT, 1)
res = ldap_bind_s(ld, NULL, &NtAuthIdentity, NEGOTIATE (1158)); // v.3
{NtAuthIdentity: User=‘NULL’; Pwd=; domain = ‘NULL’}
Authenticated as: ‘WESTAM\Administrator’.

other question how to able to use wbinfo -u or -g i dont find a command on nethserver

giacomo · February 24, 2017, 10:32am

You need to install samba-winbind-clients rpm.

davidep · February 24, 2017, 10:39am

Following upstream default configuration, winbind does not run in NethServer and winbind clients cannot work.

davidep · February 24, 2017, 10:43am

@andettilinux does the “admin” account exist in your AD environment? Is it your custom account?

You try port 389, but NethServer is configured with ldaps://, so it connects on port 636.

Go to “Configuration > Accounts provider”, under “Advanced settings” set URI protocol ldap:// and enable STARTTLS.

andettilinux · February 24, 2017, 10:44am

so I can not use it. with getent passwd it’s similar but not view a user and group of domain

davidep · February 24, 2017, 10:46am

This is the issue we can try to solve. As said wbinfo does not work here.

andettilinux · February 24, 2017, 10:54am

so i must waiting updates ?

davidep · February 24, 2017, 11:11am

Please try this procedure:

andettilinux · February 24, 2017, 11:22am

the setting uri protocol field isnt modificable in the form.

i have enable STARTTLS but still have a message:

Account provider connection reset by peer: check if the server supports SSL/TLS connections

and log:

Feb 24 12:13:47 dataserver kernel: vmxnet3 0000:0b:00.0 ens192: intr type 3, mode 0, 3 vectors allocated Feb 24 12:13:47 dataserver kernel: vmxnet3 0000:0b:00.0 ens192: NIC Link is Up 10000 Mbps Feb 24 12:13:48 dataserver httpd: [ERROR] NethServer\Tool\GroupProvider: Account provider connection reset by peer: check if the server supports SSL/TLS connections Feb 24 12:13:48 dataserver httpd: [ERROR] Connection reset by peer Feb 24 12:13:49 dataserver admin-todos: Connection reset by peer Feb 24 12:14:49 dataserver httpd: [ERROR] NethServer\Tool\GroupProvider: Account provider connection reset by peer: check if the server supports SSL/TLS connections Feb 24 12:14:49 dataserver httpd: [ERROR] Connection reset by peer Feb 24 12:15:21 dataserver /sbin/e-smith/db[22096]: /var/lib/nethserver/db/configuration: OLD sssd=service|AdDns|192.168.2.2|BindDN|admin|BindPassword|Sysneth18!|LdapURI||Provider|ad|status|enabled Feb 24 12:15:21 dataserver /sbin/e-smith/db[22096]: /var/lib/nethserver/db/configuration: NEW sssd=service|AdDns|192.168.2.2|BindDN|admin|BindPassword|Sysneth18!|LdapURI||Provider|ad|StartTls|enabled|status|enabled Feb 24 12:15:21 dataserver dbus[629]: [system] Activating via systemd: service name=‘org.freedesktop.timedate1’ unit=‘dbus-org.freedesktop.timedate1.service’ Feb 24 12:15:21 dataserver dbus-daemon: dbus[629]: [system] Activating via systemd: service name=‘org.freedesktop.timedate1’ unit=‘dbus-org.freedesktop.timedate1.service’ Feb 24 12:15:21 dataserver systemd: Cannot add dependency job for unit microcode.service, ignoring: Unit is not loaded properly: Invalid argument. Feb 24 12:15:21 dataserver systemd: Starting Time & Date Service… Feb 24 12:15:21 dataserver dbus[629]: [system] Successfully activated service ‘org.freedesktop.timedate1’ Feb 24 12:15:21 dataserver dbus-daemon: dbus[629]: [system] Successfully activated service ‘org.freedesktop.timedate1’ Feb 24 12:15:21 dataserver systemd: Started Time & Date Service. Feb 24 12:15:22 dataserver httpd: [ERROR] NethServer\Tool\GroupProvider: Account provider connection reset by peer: check if the server supports SSL/TLS connections Feb 24 12:15:22 dataserver httpd: [ERROR] Connection reset by peer Feb 24 12:15:22 dataserver esmith::event[22124]: Event: nethserver-sssd-save Feb 24 12:15:22 dataserver systemd: Stopping System Security Services Daemon… Feb 24 12:15:22 dataserver sssd[be[legacy]]: Shutting down Feb 24 12:15:22 dataserver sssd[be[westam.local]]: Shutting down Feb 24 12:15:22 dataserver sssd[pam]: Shutting down Feb 24 12:15:22 dataserver sssd[nss]: Shutting down Feb 24 12:15:22 dataserver systemd: Stopped System Security Services Daemon. Feb 24 12:15:22 dataserver esmith::event[22124]: [NOTICE] wipe out sssd databases and configuration Feb 24 12:15:22 dataserver esmith::event[22124]: Action: /etc/e-smith/events/nethserver-sssd-save/S01nethserver-sssd-cleanup SUCCESS [0.023824] Feb 24 12:15:22 dataserver esmith::event[22124]: expanding /etc/backup-config.d/nethserver-sssd.include Feb 24 12:15:23 dataserver esmith::event[22124]: expanding /etc/openldap/ldap.conf Feb 24 12:15:23 dataserver esmith::event[22124]: expanding /etc/samba/smb.conf Feb 24 12:15:23 dataserver esmith::event[22124]: expanding /etc/sssd/sssd.conf Feb 24 12:15:23 dataserver esmith::event[22124]: Action: /etc/e-smith/events/actions/generic_template_expand SUCCESS [0.303767] Feb 24 12:15:23 dataserver esmith::event[22124]: Action: /etc/e-smith/events/nethserver-sssd-save/S20nethserver-sssd-conf SUCCESS [0.319975] Feb 24 12:15:23 dataserver esmith::event[22124]: Action: /etc/e-smith/events/nethserver-sssd-save/S30nethserver-sssd-initkeytabs SUCCESS [0.49544] Feb 24 12:15:24 dataserver esmith::event[22151]: Event: nethserver-sssd-update Feb 24 12:15:24 dataserver esmith::event[22151]: Migrating existing database configuration Feb 24 12:15:24 dataserver esmith::event[22151]: Migrating existing database certificates Feb 24 12:15:24 dataserver esmith::event[22151]: Migrating existing database networks Feb 24 12:15:24 dataserver esmith::event[22151]: Migrating existing database routes Feb 24 12:15:24 dataserver esmith::event[22151]: Migrating existing database accounts Feb 24 12:15:24 dataserver esmith::event[22151]: Migrating existing database hosts Feb 24 12:15:24 dataserver esmith::event[22151]: Migrating existing database proxypass Feb 24 12:15:24 dataserver esmith::event[22151]: Migrating existing database fwrules Feb 24 12:15:24 dataserver esmith::event[22151]: Migrating existing database fwservices Feb 24 12:15:24 dataserver esmith::event[22151]: Migrating existing database portforward Feb 24 12:15:24 dataserver esmith::event[22151]: Migrating existing database tc Feb 24 12:15:24 dataserver esmith::event[22151]: Migrating existing database dhcp Feb 24 12:15:24 dataserver esmith::event[22151]: Action: /etc/e-smith/events/nethserver-sssd-update/S00initialize-default-databases SUCCESS [0.353772] Feb 24 12:15:24 dataserver esmith::event[22151]: expanding /etc/backup-config.d/nethserver-sssd.include Feb 24 12:15:24 dataserver esmith::event[22151]: expanding /etc/openldap/ldap.conf Feb 24 12:15:24 dataserver esmith::event[22151]: expanding /etc/samba/smb.conf Feb 24 12:15:24 dataserver esmith::event[22151]: expanding /etc/sssd/sssd.conf Feb 24 12:15:24 dataserver esmith::event[22151]: Action: /etc/e-smith/events/actions/generic_template_expand SUCCESS [0.29997] Feb 24 12:15:24 dataserver systemd: Reloading. Feb 24 12:15:24 dataserver systemd: [/usr/lib/systemd/system/microcode.service:10] Trailing garbage, ignoring. Feb 24 12:15:24 dataserver systemd: microcode.service lacks both ExecStart= and ExecStop= setting. Refusing. Feb 24 12:15:24 dataserver systemd: Cannot add dependency job for unit microcode.service, ignoring: Unit is not loaded properly: Invalid argument. Feb 24 12:15:24 dataserver systemd: Starting System Security Services Daemon… Feb 24 12:15:24 dataserver sssd: Starting up Feb 24 12:15:25 dataserver sssd[be[westam.local]]: Starting up Feb 24 12:15:25 dataserver sssd[be[legacy]]: Starting up Feb 24 12:15:25 dataserver sssd[nss]: Starting up Feb 24 12:15:25 dataserver sssd[pam]: Starting up Feb 24 12:15:25 dataserver systemd: Started System Security Services Daemon. Feb 24 12:15:25 dataserver esmith::event[22151]: [INFO] sssd has been started Feb 24 12:15:25 dataserver esmith::event[22151]: Feb 24 12:15:25 dataserver esmith::event[22151]: Action: /etc/e-smith/events/actions/adjust-services SUCCESS [0.461008] Feb 24 12:15:25 dataserver esmith::event[22151]: Event: nethserver-sssd-update SUCCESS Feb 24 12:15:25 dataserver esmith::event[22124]: Action: /etc/e-smith/events/nethserver-sssd-save/S80nethserver-sssd-notifyclients SUCCESS [1.24767] Feb 24 12:15:25 dataserver systemd: Reloading. Feb 24 12:15:25 dataserver systemd: [/usr/lib/systemd/system/microcode.service:10] Trailing garbage, ignoring. Feb 24 12:15:25 dataserver systemd: microcode.service lacks both ExecStart= and ExecStop= setting. Refusing. Feb 24 12:15:25 dataserver esmith::event[22124]: [INFO] service sssd restart Feb 24 12:15:25 dataserver systemd: Cannot add dependency job for unit microcode.service, ignoring: Unit is not loaded properly: Invalid argument. Feb 24 12:15:25 dataserver systemd: Stopping System Security Services Daemon… Feb 24 12:15:25 dataserver sssd[be[westam.local]]: Shutting down Feb 24 12:15:25 dataserver sssd[be[legacy]]: Shutting down Feb 24 12:15:25 dataserver sssd[pam]: Shutting down Feb 24 12:15:25 dataserver sssd[nss]: Shutting down Feb 24 12:15:25 dataserver systemd: Starting System Security Services Daemon… Feb 24 12:15:25 dataserver sssd: Starting up Feb 24 12:15:25 dataserver sssd[be[westam.local]]: Starting up Feb 24 12:15:25 dataserver sssd[be[legacy]]: Starting up Feb 24 12:15:25 dataserver sssd[pam]: Starting up Feb 24 12:15:25 dataserver sssd[nss]: Starting up Feb 24 12:15:25 dataserver systemd: Started System Security Services Daemon. Feb 24 12:15:25 dataserver esmith::event[22124]: [INFO] sssd restart Feb 24 12:15:25 dataserver esmith::event[22124]: Action: /etc/e-smith/events/actions/adjust-services SUCCESS [0.437807] Feb 24 12:15:25 dataserver esmith::event[22124]: Event: nethserver-sssd-save SUCCESS Feb 24 12:15:29 dataserver httpd: [ERROR] NethServer\Tool\GroupProvider: Account provider connection reset by peer: check if the server supports SSL/TLS connections Feb 24 12:15:29 dataserver httpd: [ERROR] Connection reset by peer

davidep · February 24, 2017, 11:27am

Could you attach a screenshot?

andettilinux · February 24, 2017, 11:29am

davidep · February 24, 2017, 11:31am

Ok, you can type “ldap://westam.local” in “LDAP connection URI”, then click “Submit”

andettilinux · February 24, 2017, 11:32am

the field is grey not modificable

giacomo · February 24, 2017, 11:36am

Yes, it’s a editable field. It’s only an HTML5 watermark.

You can click and edit it. The only field you can’t edit is the “NetBIOS domain”.

Edit: I will contact you privately.

Add NethServer 7 member to Active Directory not sync user and group

" To confirm that LDAP over SSL is configured successfully

0 = ldap_set_option(ld, LDAP_OPT_ENCRYPT, 1) res = ldap_bind_s(ld, NULL, &NtAuthIdentity, NEGOTIATE (1158)); // v.3 {NtAuthIdentity: User=‘NULL’; Pwd=; domain = ‘NULL’} Authenticated as: ‘WESTAM\Administrator’.

0 = ldap_set_option(ld, LDAP_OPT_ENCRYPT, 1)
res = ldap_bind_s(ld, NULL, &NtAuthIdentity, NEGOTIATE (1158)); // v.3
{NtAuthIdentity: User=‘NULL’; Pwd=; domain = ‘NULL’}
Authenticated as: ‘WESTAM\Administrator’.