General discussion on installation and configuration of SOGo

Text archives Help


Re: [SOGo] Failed logins with DCERPC calls in 'smb.conf'


Chronological Thread 
  • From: Rowland Penny < >
  • To:
  • Subject: Re: [SOGo] Failed logins with DCERPC calls in 'smb.conf'
  • Date: Fri, 14 Aug 2015 14:32:52 +0100

On 14/08/15 14:17, Steve Ankeny wrote:
On 08/01/2015 03:28 PM, Steve Ankeny wrote:
On 07/31/2015 10:23 AM, Steve Ankeny wrote:
In '/var/log/auth.log' there are a series of authentication errors --

Jul 27 08:33:04 sogo auth: pam_unix(dovecot:auth): check pass; user unknown
Jul 27 08:33:04 sogo auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=michael rhost=127.0.0.1
Jul 27 08:33:04 sogo auth: pam_winbind(dovecot:auth): getting password (0x00000388)
Jul 27 08:33:04 sogo auth: pam_winbind(dovecot:auth): pam_get_item returned a password

These were logged during an attempt to login to Samba AD

It appears there's an issue with Dovecot authentication (or "pam") but it may be elsewhere.

This is the instance where "dcerpc" calls from 'smb.conf' --

 ### Configuration required by OpenChange server ###
 dsb:schema update allowed = true
 dcerpc endpoint servers = +mapiproxy
 dcerpc_mapiproxy:server = true
 dcerpc_mapiproxy:interfaces = exchange_emsmdb, exchange_nsp, exchange_ds_rfr
 ### Configuration required by OpenChange server ###

When I uncomment those "dcerpc" calls, Samba AD allows the first few users to login then gives "Access denied" to the next users.  Curiously enough, even in that instance, Samba services are STILL running.

Looking further in '/var/log/samba/log.samba' --

[2015/07/27 10:17:14.598525,  0] ../source4/smbd/server.c:370(binary_smbd_main)
  samba version 4.1.18-Debian started.
  Copyright Andrew Tridgell and the Samba Team 1992-2013
[2015/07/27 10:17:17.689989,  0] ../source4/smbd/server.c:488(binary_smbd_main)
  samba: using 'standard' process model
samba: setproctitle not initialized, please either call setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call setproctitle_init() or link against libbsd-ctor.
[2015/07/27 10:17:18.257922,  0] ../lib/util/become_daemon.c:136(daemon_ready)
[2015/07/27 10:17:19.731517,  0] libmapi/oc_log.c:52(oc_logv)
  MAPIPROXY server mode enabled
[2015/07/27 10:17:19.735772,  0] libmapi/oc_log.c:54(oc_logv)
  Using MySQL backend for openchangedb: mysql://openchange-user:$passwd@localhost/openchange
[2015/07/27 10:17:19.849272,  0] mapiproxy/servers/default/emsmdb/dcesrv_exchange_emsmdb.c:2012(dcesrv_exchange_emsmdb_init)
  ===============================================================
[2015/07/27 10:17:19.849708,  0] mapiproxy/servers/default/emsmdb/dcesrv_exchange_emsmdb.c:2012(dcesrv_exchange_emsmdb_init)
  OPENCHANGE INTERNAL ERROR: pid 1486
[2015/07/27 10:17:19.850012,  0] mapiproxy/servers/default/emsmdb/dcesrv_exchange_emsmdb.c:2012(dcesrv_exchange_emsmdb_init)
  [exchange_emsmdb] Unable to initialize openchangedb
[2015/07/27 10:17:19.955017,  0] mapiproxy/libmapiproxy/fault_util.c:53(debug_print_backtrace)
  BACKTRACE: 14 stack frames:
   #00 /usr/lib/x86_64-linux-gnu/libmapiproxy.so.0(debug_print_backtrace+0x96) [0x7f6634c36368]
   #01 /usr/lib/x86_64-linux-gnu/libmapiproxy.so.0(openchange_abort+0x75) [0x7f6634c364d6]
   #02 /usr/lib/x86_64-linux-gnu/openchange/dcerpc_mapiproxy_server/exchange_emsmdb.so(+0x1087f) [0x7f66333fe87f]
   #03 /usr/lib/x86_64-linux-gnu/libmapiproxy.so.0(+0x9aca) [0x7f6634c1caca]
   #04 /usr/lib/x86_64-linux-gnu/libmapiproxy.so.0(mapiproxy_server_init+0x89) [0x7f6634c1cb7c]
   #05 /usr/lib/x86_64-linux-gnu/samba/dcerpc_server/dcesrv_mapiproxy.so(+0x162ce) [0x7f6634e6c2ce]
   #06 /usr/lib/x86_64-linux-gnu/libdcerpc-server.so.0(dcesrv_init_context+0x79) [0x7f6640052069]
   #07 /usr/lib/x86_64-linux-gnu/samba/service/dcerpc.so(+0xc99) [0x7f66402c7c99]
   #08 /usr/lib/x86_64-linux-gnu/samba/process_model/standard.so(+0x1656) [0x7f6645046656]
   #09 /usr/lib/x86_64-linux-gnu/samba/libservice.so.0(task_server_startup+0x4a) [0x7f6652c28eda]
   #10 /usr/lib/x86_64-linux-gnu/samba/libservice.so.0(server_service_startup+0x93) [0x7f6652c27b83]
   #11 samba(+0x9a35) [0x7f6653f31a35]
   #12 /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f664fa82ec5]
   #13 samba(+0x5e4e) [0x7f6653f2de4e]
[2015/07/27 10:17:19.957226,  0] ../source4/rpc_server/dcerpc_server.c:1194(dcesrv_init_context)
  dcesrv_init_context: failed to init endpoint server = 'mapiproxy': NT_STATUS_INTERNAL_ERROR
[2015/07/27 10:17:19.957543,  0] ../source4/smbd/service_task.c:35(task_server_terminate)
  task_server_terminate: [Failed to startup dcerpc server task]
  STATUS=daemon 'samba' finished starting up and ready to serve connectionssamba_terminate: Failed to startup dcerpc server task

I've emboldened the lines showing 'openchangedb' is not initiating.

It appears to err on 'exchange_emsmdb'  That's one of the "dcerpc" calls in 'smb.conf'

--------------------------------------------------------------------------------------------------------------------------------------

sorry to be so late updating this issue, it is STILL unresolved

I uncommented the "dcerpc" calls in 'smb.conf' and restarted the server.

Samba services were running --

adam@sogo:~$ sudo initctl list | egrep 'samba|smb|nmb|winbind'
nmbd start/running

Something wrong here, nmbd shouldn't be running on a DC, how are you starting samba ?

winbind stop/waiting
smbd stop/waiting
reload-smbd stop/waiting
samba-ad-dc start/running, process 841
adam@sogo:~$


What does 'ps ax' show ?

I could find no instance of OpenChange before or after starting 'openchange-oscmanager' --


I don't think it actually gets started as such, it is a samba module I believe.


adam@sogo:~$ sudo ps aux | grep openchange
adam@sogo:~$
adam@sogo:~$ sudo ps -lA | awk '$12 == "?" {print $4, $14}' | grep openchange
adam@sogo:~$
adam@sogo:~$ sudo service openchange-ocsmanager start
 * Starting OCSManager application ocsmanager         Entering daemon mode                      [ OK ]
adam@sogo:~$ sudo ps -lA | awk '$12 == "?" {print $4, $14}' | grep openchange
adam@sogo:~$

How can I know whether OpenChange is running?

It appears 'exchange_emsmdb' is shutting down Samba services.

What is the requirement for encryption in regarding to running OpenChange-OCSManager?

Any suggestions would be helpful.  Is there an OpenChange forum?



No forum, but there is a mailing list.

Rowland











Archive powered by MHonArc 2.6.18.

Top of page