Loose All User Accounts after rebooting

Support
1

NethServer Version: 7.9
Module: active directory

I have installed Nethserver 7.9 on a HP DL380P Gen 8 Server I have active directory setup however when I reboot the server and log back into the server manager and go to users and groups I have lost all of the user accounts. if I click on Local Active Directory Details and change the ip address all the user accounts come back until I restart the server again then all user accounts are gone again until i change the IP again. Anybody have any Ideal whats going on here.

2

This one is about a similar issue:

1 Like
3

I restarted the server and made sure all the users were gone and ran this from terminal. This time I had to change AD IP and restart BR0 lan interface by reconfiguring it and way to fix this?

nmap $(config getprop nsdc IpAddress)

Starting Nmap 6.40 ( http://nmap.org ) at 2022-11-05 09:42 EDT
Stats: 0:00:01 elapsed; 0 hosts completed (1 up), 1 undergoing SYN Stealth Scan
SYN Stealth Scan Timing: About 1.00% done; ETC: 09:44 (0:01:39 remaining)
Nmap scan report for 192.168.0.7
Host is up (0.000038s latency).
All 1000 scanned ports on 192.168.0.7 are closed
MAC Address: F2:06:35:96:A1:7F (Unknown)

Nmap done: 1 IP address (1 host up) scanned in 1.76 seconds

systemctl -l -M nsdc status samba
● samba.service - Samba domain controller daemon
Loaded: loaded (/usr/lib/systemd/system/samba.service; enabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Sat 2022-11-05 09:34:22 EDT; 15min ago
Process: 26 ExecStart=/usr/sbin/samba $SAMBAOPTIONS -i --debug-stderr (code=exited, status=1/FAILURE)
Main PID: 26 (code=exited, status=1/FAILURE)
[root@goliath ~]#

After changing AD IP and restarting BR0

nmap $(config getprop nsdc IpAddress)

Starting Nmap 6.40 ( http://nmap.org ) at 2022-11-05 09:57 EDT
Nmap scan report for 192.168.0.6
Host is up (0.000038s latency).
Not shown: 987 closed ports
PORT STATE SERVICE
53/tcp open domain
88/tcp open kerberos-sec
135/tcp open msrpc
139/tcp open netbios-ssn
389/tcp open ldap
445/tcp open microsoft-ds
464/tcp open kpasswd5
636/tcp open ldapssl
3268/tcp open globalcatLDAP
3269/tcp open globalcatLDAPssl
49152/tcp open unknown
49153/tcp open unknown
49154/tcp open unknown
MAC Address: F2:06:35:96:A1:7F (Unknown)

Nmap done: 1 IP address (1 host up) scanned in 1.73 seconds
systemctl -l -M nsdc status samba
● samba.service - Samba domain controller daemon
Loaded: loaded (/usr/lib/systemd/system/samba.service; enabled; vendor preset: disabled)
Active: active (running) since Sat 2022-11-05 09:54:02 EDT; 6min ago
Main PID: 27 (kworker/3:0H)
CGroup: /machine.slice/nsdc.service/system.slice/samba.service
├─19370 /usr/sbin/samba -i --debug-stderr
├─19560 /usr/sbin/samba -i --debug-stderr
├─19564 /usr/sbin/samba -i --debug-stderr
├─19567 /usr/sbin/samba -i --debug-stderr
├─19568 /usr/sbin/samba -i --debug-stderr
├─19569 /usr/sbin/samba -i --debug-stderr
├─19571 /usr/sbin/samba -i --debug-stderr
├─19579 /usr/sbin/smbd -D --option=server role check:inhibit=yes --foreground
├─19580 /usr/sbin/samba -i --debug-stderr
├─19585 /usr/sbin/samba -i --debug-stderr
├─19587 /usr/sbin/samba -i --debug-stderr
├─19588 /usr/sbin/samba -i --debug-stderr
├─19589 /usr/sbin/samba -i --debug-stderr
├─19591 /usr/sbin/samba -i --debug-stderr
├─19593 /usr/sbin/samba -i --debug-stderr
├─19596 /usr/sbin/samba -i --debug-stderr
├─19597 /usr/sbin/winbindd -D --option=server role check:inhibit=yes --foreground
├─19599 /usr/sbin/samba -i --debug-stderr
├─19712 /usr/sbin/smbd -D --option=server role check:inhibit=yes --foreground
├─19713 /usr/sbin/smbd -D --option=server role check:inhibit=yes --foreground
├─19727 /usr/sbin/smbd -D --option=server role check:inhibit=yes --foreground
├─22203 /usr/sbin/samba -i --debug-stderr
└─23662 /usr/sbin/samba -i --debug-stderr
‣ 27 [kworker/3:0H]

4

Please check the logs /var/log/messages and /var/log/samba/* to hopefully get more information about why nsdc doesn’t start.

Let’s check the nsdc network after a reboot:

ip addr show type veth

5

After rebooting the machine this time the br0 come up however no useres in AD had to change Ip first here are the samba log out puts and what i could find in the /var/log/messages concerning nsdc and samba I appreciate your help.

ip addr show type veth

7: vb-nsdc@if2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br0 state UP group default qlen 1000
link/ether b6:9e:df:71:f0:87 brd ff:ff:ff:ff:ff:ff link-netnsid 0
inet6 fe80::b49e:dfff:fe71:f087/64 scope link
valid_lft forever preferred_lft forever

/var/log/messages
Nov 5 19:08:03 goliath kernel: IPv6: ADDRCONF(NETDEV_UP): vb-nsdc: link is not ready
Nov 5 19:08:03 goliath kernel: br0: port 2(vb-nsdc) entered blocking state
Nov 5 19:08:03 goliath kernel: br0: port 2(vb-nsdc) entered disabled state
Nov 5 19:08:03 goliath kernel: device vb-nsdc entered promiscuous mode
Nov 5 19:08:03 goliath kernel: br0: port 2(vb-nsdc) entered blocking state
Nov 5 19:08:03 goliath kernel: br0: port 2(vb-nsdc) entered forwarding state
Nov 5 19:08:03 goliath kernel: br0: port 2(vb-nsdc) entered disabled state
Nov 5 19:08:03 goliath systemd-machined: New machine nsdc.
Nov 5 19:08:03 goliath systemd: Reached target Network is Online.
Nov 5 19:08:03 goliath systemd-nspawn: Failed to create directory /var/lib/machines/nsdc//sys/fs/selinux: Read-only file system
Nov 5 19:08:03 goliath systemd-nspawn: Failed to create directory /var/lib/machines/nsdc//sys/fs/selinux: Read-only file system

/var/log/samba/log.nmbd

Samba name server GOLIATH is now a local master browser for workgroup STEVEBRACKETT on subnet 192.168.122.1

[2022/11/05 09:34:16.308807, 0] …/…/source3/nmbd/nmbd.c:906(main)
nmbd version 4.10.16 started.
Copyright Andrew Tridgell and the Samba Team 1992-2019
[2022/11/05 09:34:16.356771, 0] …/…/lib/util/become_daemon.c:136(daemon_ready)
daemon_ready: daemon ‘nmbd’ finished starting up and ready to serve connections
[2022/11/05 09:34:39.713184, 0] …/…/source3/nmbd/nmbd_become_lmb.c:397(become_local_master_stage2)

Samba name server GOLIATH is now a local master browser for workgroup STEVEBRACKETT on subnet 192.168.0.1

[2022/11/05 09:39:49.437880, 0] …/…/source3/nmbd/nmbd_become_lmb.c:397(become_local_master_stage2)

Samba name server GOLIATH is now a local master browser for workgroup STEVEBRACKETT on subnet 192.168.122.1

[2022/11/05 10:30:25.782369, 0] …/…/source3/nmbd/nmbd_become_lmb.c:397(become_local_master_stage2)

Samba name server GOLIATH is now a local master browser for workgroup STEVEBRACKETT on subnet 172.28.0.1

[2022/11/05 10:30:25.782686, 0] …/…/source3/nmbd/nmbd_become_lmb.c:397(become_local_master_stage2)

Samba name server GOLIATH is now a local master browser for workgroup STEVEBRACKETT on subnet 172.17.0.1

[2022/11/05 19:01:09.609345, 0] …/…/source3/nmbd/nmbd.c:59(terminate)
Got SIGTERM: going down…
[2022/11/05 19:08:03.465330, 0] …/…/source3/nmbd/nmbd.c:906(main)
nmbd version 4.10.16 started.
Copyright Andrew Tridgell and the Samba Team 1992-2019
[2022/11/05 19:08:03.515155, 0] …/…/lib/util/become_daemon.c:136(daemon_ready)
daemon_ready: daemon ‘nmbd’ finished starting up and ready to serve connections
[2022/11/05 19:08:26.670508, 0] …/…/source3/nmbd/nmbd_become_lmb.c:397(become_local_master_stage2)

Samba name server GOLIATH is now a local master browser for workgroup STEVEBRACKETT on subnet 192.168.0.1

[2022/11/05 19:13:37.382318, 0] …/…/source3/nmbd/nmbd_become_lmb.c:397(become_local_master_stage2)

Samba name server GOLIATH is now a local master browser for workgroup STEVEBRACKETT on subnet 192.168.122.1

[2022/11/05 19:13:37.382629, 0] …/…/source3/nmbd/nmbd_become_lmb.c:397(become_local_master_stage2)

Samba name server GOLIATH is now a local master browser for workgroup STEVEBRACKETT on subnet 172.28.0.1

[2022/11/05 19:13:37.382890, 0] …/…/source3/nmbd/nmbd_become_lmb.c:397(become_local_master_stage2)

Samba name server GOLIATH is now a local master browser for workgroup STEVEBRACKETT on subnet 172.17.0.1

/var/log/samba/log,smdb

[2022/11/05 09:34:17.658662, 0] …/…/source3/smbd/server.c:1788(main)
smbd version 4.10.16 started.
Copyright Andrew Tridgell and the Samba Team 1992-2019
[2022/11/05 09:35:22.111317, 0] …/…/lib/util/become_daemon.c:136(daemon_ready)
daemon_ready: daemon ‘smbd’ finished starting up and ready to serve connections
[2022/11/05 09:36:12.193160, 0] …/…/source3/printing/nt_printing.c:249(nt_printing_init)
nt_printing_init: error checking published printers: WERR_ACCESS_DENIED
[2022/11/05 19:08:05.145254, 0] …/…/source3/smbd/server.c:1788(main)
smbd version 4.10.16 started.
Copyright Andrew Tridgell and the Samba Team 1992-2019
[2022/11/05 19:08:19.632654, 0] …/…/lib/util/become_daemon.c:136(daemon_ready)
daemon_ready: daemon ‘smbd’ finished starting up and ready to serve connections
[2022/11/05 19:08:19.641861, 0] …/…/source3/printing/nt_printing.c:249(nt_printing_init)
nt_printing_init: error checking published printers: WERR_ACCESS_DENIED

/var/log/samba/log.winbindd

[2022/11/05 09:34:16.878164, 0] …/…/source3/winbindd/winbindd.c:1731(main)
winbindd version 4.10.16 started.
Copyright Andrew Tridgell and the Samba Team 1992-2019
[2022/11/05 09:34:16.997326, 0] …/…/source3/winbindd/winbindd_cache.c:3166(initialize_winbindd_cache)
initialize_winbindd_cache: clearing cache and re-creating with version number 2
[2022/11/05 09:34:17.008353, 0] …/…/lib/util/become_daemon.c:136(daemon_ready)
daemon_ready: daemon ‘winbindd’ finished starting up and ready to serve connections
[2022/11/05 19:01:09.549401, 0] …/…/source3/winbindd/winbindd.c:243(winbindd_sig_term_handler)
Got sig[15] terminate (is_parent=1)
[2022/11/05 19:08:04.404651, 0] …/…/source3/winbindd/winbindd.c:1731(main)
winbindd version 4.10.16 started.
Copyright Andrew Tridgell and the Samba Team 1992-2019
[2022/11/05 19:08:04.525293, 0] …/…/source3/winbindd/winbindd_cache.c:3166(initialize_winbindd_cache)
initialize_winbindd_cache: clearing cache and re-creating with version number 2
[2022/11/05 19:08:04.545192, 0] …/…/lib/util/become_daemon.c:136(daemon_ready)
daemon_ready: daemon ‘winbindd’ finished starting up and ready to serve connections

/var/log/samba/log.winbindd-idmap

[2022/11/05 19:01:09.549482, 0] …/…/source3/winbindd/winbindd.c:243(winbindd_sig_term_handler)
Got sig[15] terminate (is_parent=0)

6

I can drop into the terminal and issue the command systemctl restart nsdc and all the users come back.

7

Thank you for the tip. It worked for me after following your advice.

1 Like