smbclient:连接到本地主机失败(错误NT_STATUS_CONNECTION_REFUSED)

直到昨天,我有一个运行在树莓派上运行的Active Directory主域控制器。 现在看来我无法获得“桑巴舞”的服务。 这是因为执行升级。

root@r2d2:/etc# /etc/init.d/samba start [ ok ] Starting nmbd (via systemctl): nmbd.service. [ ok ] Starting smbd (via systemctl): smbd.service. [ ok ] Starting samba-ad-dc (via systemctl): samba-ad-dc.service. root@r2d2:/etc# 

这看起来不错,我想,但smbclient -L localhost -U%给出了标题中引用的错误消息。

我一直在search这一点,并不确定问题是什么。 我已经导入了(replace)启动脚本,但除此之外,我没有做任何更改。

根本的问题是,我认为,在启动/ init.d程序,但我不知道下一步该怎么做。

 root@r2d2:/etc# netstat -lntp Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 127.0.0.1:5910 0.0.0.0:* LISTEN 804/Xvnc tcp 0 0 127.0.0.1:3350 0.0.0.0:* LISTEN 734/xrdp-sesman tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 547/sshd tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN 543/cupsd tcp 0 0 0.0.0.0:3389 0.0.0.0:* LISTEN 612/xrdp tcp6 0 0 :::80 :::* LISTEN 644/apache2 tcp6 0 0 :::22 :::* LISTEN 547/sshd tcp6 0 0 ::1:631 :::* LISTEN 543/cupsd root@r2d2:/etc# 

我正在使用内部DNS。


我注意到了下面这个问题,这引起了我的困惑 – search这个问题并没有让我们很难确定如何开始桑巴舞

log.smbd

 [2016/05/17 09:56:52.566097, 2] ../source3/lib/interface.c:341(add_interface) added interface eth0 ip=169.254.144.46 bcast=169.254.255.255 netmask=255.255.0.0 [2016/05/17 09:56:52.566286, 2] ../source3/lib/interface.c:341(add_interface) added interface eth0 ip=10.10.10.32 bcast=10.10.10.255 netmask=255.255.255.0 [2016/05/17 09:56:52.566510, 0] ../source3/smbd/server.c:1297(main) server role = 'active directory domain controller' not compatible with running smbd standalone. You should start 'samba' instead, and it will control starting smbd if required 

log.nmbd

 root@r2d2:/var/log/samba# cat log.nmbd [2016/05/17 09:56:19, 0] ../source3/nmbd/nmbd.c:908(main) nmbd version 4.2.10-Debian started. Copyright Andrew Tridgell and the Samba Team 1992-2014 [2016/05/17 09:56:19, 0] ../lib/param/loadparm.c:743(lpcfg_map_parameter) Unknown parameter encountered: "password level" [2016/05/17 09:56:19, 0] ../lib/param/loadparm.c:1626(lpcfg_do_global_parameter) Ignoring unknown parameter "password level" [2016/05/17 09:56:19, 0] ../lib/param/loadparm.c:743(lpcfg_map_parameter) Unknown parameter encountered: "update encrypted" [2016/05/17 09:56:19, 0] ../lib/param/loadparm.c:1626(lpcfg_do_global_parameter) Ignoring unknown parameter "update encrypted" root@r2d2:/var/log/samba# 

我目前正在使用这个启动脚本(这是我在问题开始之后添加的),并且这似乎导致了一个新的(注意时间戳不与前面的2个代码片段重叠) log.samba文件,其中包含:

 samba: setproctitle not initialized, please either call setproctitle_init() or link against libbsd-ctor. samba: setproctitle not initialized, please either call setproctitle_init() or link against libbsd-ctor. samba: setproctitle not initialized, please either call setproctitle_init() or link against libbsd-ctor. samba: setproctitle not initialized, please either call setproctitle_init() or link against libbsd-ctor. [2016/05/17 13:18:22.069201, 0] ../lib/util/util_runcmd.c:324(samba_runcmd_io_handler) /usr/sbin/winbindd: Failed to exec child - No such file or directory [2016/05/17 13:18:22.070100, 0] ../source4/winbind/winbindd.c:49(winbindd_done) winbindd daemon exited normally task_server_terminate: [winbindd child process exited] [2016/05/17 13:18:22.074784, 2] ../source4/dsdb/repl/drepl_partitions.c:116(dreplsrv_load_partitions) dreplsrv_partition[CN=Configuration,DC=longmanrd,DC=infoforum,DC=co,DC=uk] loaded [2016/05/17 13:18:22.075325, 2] ../source4/dsdb/repl/drepl_partitions.c:116(dreplsrv_load_partitions) dreplsrv_partition[CN=Schema,CN=Configuration,DC=longmanrd,DC=infoforum,DC=co,DC=uk] loaded [2016/05/17 13:18:22.075730, 2] ../source4/dsdb/repl/drepl_partitions.c:116(dreplsrv_load_partitions) dreplsrv_partition[DC=longmanrd,DC=infoforum,DC=co,DC=uk] loaded [2016/05/17 13:18:22.076810, 2] ../source4/dsdb/repl/drepl_partitions.c:116(dreplsrv_load_partitions) dreplsrv_partition[DC=DomainDnsZones,DC=longmanrd,DC=infoforum,DC=co,DC=uk] loaded [2016/05/17 13:18:22.077271, 2] ../source4/dsdb/repl/drepl_partitions.c:116(dreplsrv_load_partitions) dreplsrv_partition[DC=ForestDnsZones,DC=longmanrd,DC=infoforum,DC=co,DC=uk] loaded [2016/05/17 13:18:22.084895, 2] ../source4/dsdb/kcc/kcc_service.c:127(kccsrv_load_partitions) kccsrv_partition[DC=longmanrd,DC=infoforum,DC=co,DC=uk] loaded [2016/05/17 13:18:22.085188, 2] ../source4/dsdb/kcc/kcc_service.c:127(kccsrv_load_partitions) kccsrv_partition[CN=Configuration,DC=longmanrd,DC=infoforum,DC=co,DC=uk] loaded [2016/05/17 13:18:22.085368, 2] ../source4/dsdb/kcc/kcc_service.c:127(kccsrv_load_partitions) kccsrv_partition[CN=Schema,CN=Configuration,DC=longmanrd,DC=infoforum,DC=co,DC=uk] loaded [2016/05/17 13:18:22.085508, 2] ../source4/dsdb/kcc/kcc_service.c:127(kccsrv_load_partitions) kccsrv_partition[DC=DomainDnsZones,DC=longmanrd,DC=infoforum,DC=co,DC=uk] loaded [2016/05/17 13:18:22.085635, 2] ../source4/dsdb/kcc/kcc_service.c:127(kccsrv_load_partitions) kccsrv_partition[DC=ForestDnsZones,DC=longmanrd,DC=infoforum,DC=co,DC=uk] loaded [2016/05/17 13:18:22.088057, 0] ../lib/util/become_daemon.c:124(daemon_ready) samba: setproctitle not initialized, please either call setproctitle_init() or link against libbsd-ctor. STATUS=daemon 'samba' finished starting up and ready to serve connections [2016/05/17 13:18:22.094641, 0] ../source4/smbd/server.c:211(samba_terminate) samba: setproctitle not initialized, please either call setproctitle_init() or link against libbsd-ctor. samba_terminate: winbindd child process exited 

 /usr/sbin/winbindd: Failed to exec child - No such file or directory 

她是一个类似的问题http://www.spinics.net/lists/samba/msg133552.html

解决scheme是安装winbind http://www.spinics.net/lists/samba/msg133589.html

你需要一个单独的winbind winh samba 4.2 + http://www.spinics.net/lists/samba/msg133595.html

我想这些问题都与修复Badlock Bug的更新有关。 Samba Security Releases中列出了所有修补程序的列表,每个修补程序集的公告都提供了有关更改内容的有用信息。

在升级旧的CentOS 5系统之后,我遇到了将Winbind连接到AD域控制器的问题,并且修复这些问题的线索在CVE-2016-2115的公告中 – 用于IPCstream量的SMB客户端连接不受完整性保护

这logging了新的smb.conf选项, client ipc signing 。 虽然文档build议明确地将此选项设置为mandatory ,但是我发现auto也解决了这些问题,所以我在smb.conf添加了以下行(在[global]部分下):

 client ipc signing = auto 

我正在运行Samba 3.6.23,所以我不能说这是否会对你有帮助,但是在已经提到的各种公告中应该有相关的信息。 最好的运气(我浪费了3个小时以上)。