General discussion on installation and configuration of SOGo

Text archives Help


Re: [SOGo] Failed logins with DCERPC calls in 'smb.conf'


Chronological Thread 
  • From: Steve Ankeny < >
  • To:
  • Subject: Re: [SOGo] Failed logins with DCERPC calls in 'smb.conf'
  • Date: Sat, 15 Aug 2015 08:37:36 -0400

On 08/14/2015 09:32 AM, Rowland Penny wrote:
On 14/08/15 14:17, Steve Ankeny wrote:
On 08/01/2015 03:28 PM, Steve Ankeny wrote:
On 07/31/2015 10:23 AM, Steve Ankeny wrote:
[ redacted text ]

This is the instance where "dcerpc" calls from 'smb.conf' --

 ### Configuration required by OpenChange server ###
 dsb:schema update allowed = true
 dcerpc endpoint servers = +mapiproxy
 dcerpc_mapiproxy:server = true
 dcerpc_mapiproxy:interfaces = exchange_emsmdb, exchange_nsp, exchange_ds_rfr
 ### Configuration required by OpenChange server ###

When I uncomment those "dcerpc" calls, Samba AD allows the first few users to login then gives "Access denied" to the next users.  Curiously enough, even in that instance, Samba services are STILL running.

Looking further in '/var/log/samba/log.samba' --

[ redacted text ]
  ===============================================================
[2015/07/27 10:17:19.849708,  0] mapiproxy/servers/default/emsmdb/dcesrv_exchange_emsmdb.c:2012(dcesrv_exchange_emsmdb_init)
  OPENCHANGE INTERNAL ERROR: pid 1486
[2015/07/27 10:17:19.850012,  0] mapiproxy/servers/default/emsmdb/dcesrv_exchange_emsmdb.c:2012(dcesrv_exchange_emsmdb_init)
  [exchange_emsmdb] Unable to initialize openchangedb
[2015/07/27 10:17:19.955017,  0] mapiproxy/libmapiproxy/fault_util.c:53(debug_print_backtrace)
  BACKTRACE: 14 stack frames:
   #00 /usr/lib/x86_64-linux-gnu/libmapiproxy.so.0(debug_print_backtrace+0x96) [0x7f6634c36368]
   #01 /usr/lib/x86_64-linux-gnu/libmapiproxy.so.0(openchange_abort+0x75) [0x7f6634c364d6]
   #02 /usr/lib/x86_64-linux-gnu/openchange/dcerpc_mapiproxy_server/exchange_emsmdb.so(+0x1087f) [0x7f66333fe87f]
   #03 /usr/lib/x86_64-linux-gnu/libmapiproxy.so.0(+0x9aca) [0x7f6634c1caca]
   #04 /usr/lib/x86_64-linux-gnu/libmapiproxy.so.0(mapiproxy_server_init+0x89) [0x7f6634c1cb7c]
   #05 /usr/lib/x86_64-linux-gnu/samba/dcerpc_server/dcesrv_mapiproxy.so(+0x162ce) [0x7f6634e6c2ce]
   #06 /usr/lib/x86_64-linux-gnu/libdcerpc-server.so.0(dcesrv_init_context+0x79) [0x7f6640052069]
   #07 /usr/lib/x86_64-linux-gnu/samba/service/dcerpc.so(+0xc99) [0x7f66402c7c99]
   #08 /usr/lib/x86_64-linux-gnu/samba/process_model/standard.so(+0x1656) [0x7f6645046656]
   #09 /usr/lib/x86_64-linux-gnu/samba/libservice.so.0(task_server_startup+0x4a) [0x7f6652c28eda]
   #10 /usr/lib/x86_64-linux-gnu/samba/libservice.so.0(server_service_startup+0x93) [0x7f6652c27b83]
   #11 samba(+0x9a35) [0x7f6653f31a35]
   #12 /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f664fa82ec5]
   #13 samba(+0x5e4e) [0x7f6653f2de4e]
[2015/07/27 10:17:19.957226,  0] ../source4/rpc_server/dcerpc_server.c:1194(dcesrv_init_context)
  dcesrv_init_context: failed to init endpoint server = 'mapiproxy': NT_STATUS_INTERNAL_ERROR
[2015/07/27 10:17:19.957543,  0] ../source4/smbd/service_task.c:35(task_server_terminate)
  task_server_terminate: [Failed to startup dcerpc server task]
  STATUS=daemon 'samba' finished starting up and ready to serve connectionssamba_terminate: Failed to startup dcerpc server task

I've emboldened the lines showing 'openchangedb' is not initiating.

It appears to err on 'exchange_emsmdb'  That's one of the "dcerpc" calls in 'smb.conf'

--------------------------------------------------------------------------------------------------------------------------------------

sorry to be so late updating this issue, it is STILL unresolved

I uncommented the "dcerpc" calls in 'smb.conf' and restarted the server.

Samba services were running --

adam@sogo:~$ sudo initctl list | egrep 'samba|smb|nmb|winbind'
nmbd start/running

Something wrong here, nmbd shouldn't be running on a DC, how are you starting samba ?


'samba-ad-dc'

adam@sogo:~$ sudo ls /etc/init.d/ | egrep 'samba|smb|nmb|winbind|ocsmanager'
nmbd
openchange-ocsmanager
samba
samba-ad-dc
smbd
winbind
adam@sogo:~$
 
winbind stop/waiting
smbd stop/waiting
reload-smbd stop/waiting
samba-ad-dc start/running, process 841
adam@sogo:~$


What does 'ps ax' show ?

adam@sogo:~$ sudo ps ax | egrep 'samba|smb|nmb|winbind|ocsmanager'
  765 ?        Ss     0:05 samba -D
 1334 ?        S      0:00 samba -D
 1344 ?        S      1:37 samba -D
 1382 ?        S      0:10 samba -D
 1420 ?        S      0:03 samba -D
 1448 ?        Ss     2:06 /usr/sbin/smbd -D --option=server role check:inhibit=yes --foreground
 1450 ?        S      4:20 samba -D
 1452 ?        S      0:32 samba -D
 1476 ?        S      0:58 samba -D
 1487 ?        S     13:42 samba -D
 1488 ?        S      0:27 samba -D
 1489 ?        S      0:03 samba -D
 1490 ?        S      9:26 samba -D
 1499 ?        S      2:38 samba -D
 1501 ?        S      3:19 samba -D
 1516 ?        S      0:10 /usr/sbin/smbd -D --option=server role check:inhibit=yes --foreground
 8340 pts/2    S+     0:00 egrep --color=auto samba|smb|nmb|winbind|ocsmanager
adam@sogo:~$

I don't currently have 'ocsmanager' running as the "dcerpc" calls are commented out.


I could find no instance of OpenChange before or after starting 'openchange-oscmanager' --


I don't think it actually gets started as such, it is a samba module I believe.


adam@sogo:~$ sudo ps aux | grep openchange
adam@sogo:~$
adam@sogo:~$ sudo ps -lA | awk '$12 == "?" {print $4, $14}' | grep openchange
adam@sogo:~$
adam@sogo:~$ sudo service openchange-ocsmanager start
 * Starting OCSManager application ocsmanager         Entering daemon mode                      [ OK ]
adam@sogo:~$ sudo ps -lA | awk '$12 == "?" {print $4, $14}' | grep openchange
adam@sogo:~$

How can I know whether OpenChange is running?

It appears 'exchange_emsmdb' is shutting down Samba services.

What is the requirement for encryption in regarding to running OpenChange-OCSManager?

Any suggestions would be helpful.  Is there an OpenChange forum?



No forum, but there is a mailing list.

thx


Rowland




Archive powered by MHonArc 2.6.18.

Top of page