Problemas com Samba + Winbind

[Teodoro Elias Yemal]

Bom dia, estou com problemas ao iniciar o SMB e o WINBIND, estou usando CentOS 8, segue abaixo o erro. Agradeço desde já

 

[root@FirewallUsers samba]# systemctl status smb.service
● smb.service - Samba SMB Daemon
   Loaded: loaded (/usr/lib/systemd/system/smb.service; disabled; vendor preset: disabled)
   Active: failed (Result: exit-code) since Fri 2020-12-04 09:43:38 -03; 5s ago
     Docs: man:smbd(8)
           man:samba(7)
           man:smb.conf(5)
  Process: 14598 ExecStart=/usr/sbin/smbd --foreground --no-process-group $SMBDOPTIONS (code=exited, status=255)
 Main PID: 14598 (code=exited, status=255)
   Status: "Starting process..."

dez 04 09:43:38 FirewallUsers smbd[14598]:   Unknown parameter encountered: "auth methods"
dez 04 09:43:38 FirewallUsers smbd[14598]: [2020/12/04 09:43:38.743341,  0] ../../lib/param/loadparm.c:1858(lpcfg_do_global_parameter)
dez 04 09:43:38 FirewallUsers smbd[14598]:   Ignoring unknown parameter "auth methods"
dez 04 09:43:38 FirewallUsers smbd[14598]: [2020/12/04 09:43:38.881072,  0] ../../source3/auth/auth_util.c:1394(make_new_session_info_guest)
dez 04 09:43:38 FirewallUsers smbd[14598]:   create_local_token failed: NT_STATUS_INVALID_PARAMETER_MIX
dez 04 09:43:38 FirewallUsers smbd[14598]: [2020/12/04 09:43:38.881107,  0] ../../source3/smbd/server.c:2034(main)
dez 04 09:43:38 FirewallUsers smbd[14598]:   ERROR: failed to setup guest info.
dez 04 09:43:38 FirewallUsers systemd[1]: smb.service: Main process exited, code=exited, status=255/n/a
dez 04 09:43:38 FirewallUsers systemd[1]: smb.service: Failed with result 'exit-code'.
dez 04 09:43:38 FirewallUsers systemd[1]: Failed to start Samba SMB Daemon.
 

[victor.sartori]

Posta ai o smb.conf

[Teodoro Elias Yemal]

[global]

workgroup = EMPRESA
server string = FirewallUsers
netbios name = FirewallUsers
realm = EMPRESA.LOCAL
log file = /var/log/samba/samba.log.%m
os level = 233
preferred master = no
max log size = 500
debug level = 1
security = ads
encrypt passwords = yes
socket options = SO_KEEPALIVE TCP_NODELAY
password server = 10.25.51.245
allow trusted domains = yes
idmap uid = 10000-20000
idmap gid = 10000-20000
winbind separator = +
winbind enum users = yes
winbind enum groups = yes
winbind cache time = 15
winbind use default domain = yes
client use spnego = yes
domain master = no
 

[victor.sartori]

$ testparm 
WARNING: The "encrypt passwords" option is deprecated
WARNING: The "idmap uid" option is deprecated
WARNING: The "idmap gid" option is deprecated
Load smb config files from /etc/samba/smb.conf
WARNING: The "encrypt passwords" option is deprecated
WARNING: The "idmap uid" option is deprecated
WARNING: The "idmap gid" option is deprecated
Loaded services file OK.
Weak crypto is allowed
WARNING: The setting 'security=ads' should NOT be combined with the 'password server' parameter.
(by default Samba will discover the correct DC to contact automatically).

'winbind separator = +' might cause problems with group membership.

Server role: ROLE_DOMAIN_MEMBER

Press enter to see a dump of your service definitions

# Global parameters
[global]
	domain master = No
	idmap gid = 10000-20000
	idmap uid = 10000-20000
	log file = /var/log/samba/samba.log.%m
	max log size = 500
	netbios name = FIREWALLUSERS
	os level = 233
	password server = 10.25.51.245
	preferred master = No
	realm = EMPRESA.LOCAL
	security = ADS
	server string = FirewallUsers
	socket options = SO_KEEPALIVE TCP_NODELAY
	winbind cache time = 15
	winbind enum groups = Yes
	winbind enum users = Yes
	winbind separator = +
	winbind use default domain = Yes
	workgroup = EMPRESA
	idmap config * : range = 10000-20000
	idmap config * : backend = tdb

 

Rodei o comando testparam para verificar a config do smb.conf, eu removi o erro mais gritante de lá.. e funcionou. Dá uma olhada melhor nas configs (você precisa mesmo do winbind?)

 

O que eu comentei:

security = ads
winbind separator = +