Samba AD - KDC listening only on IPv6 localhost [::1]:464
by pavel.lisy@gmail.com
Hello
I want to configure Samba AD on Fedora 39.
I have 2 DC replicating correctly. When I try to connect another
computer as samba member with:
sudo realm join OFFICE.COMPANY.COM
it fails with this error
* Trying to set computer password with Kerberos
kvě 03 14:15:14 smbmem41.office.company.com realmd[315828]: ! Couldn't set password for computer account: SMBMEM41$: Cannot contact any KDC for requested realm
kvě 03 14:15:14 smbmem41.office.company.com realmd[315828]: adcli: joining domain office.company.com failed: Couldn't set password for computer account: SMBMEM41$: Cannot contact any KDC for requested realm
kvě 03 14:15:14 smbmem41.office.company.com realmd[315828]: process exited: 315924
kvě 03 14:15:14 smbmem41.office.company.com realmd[315828]: ! Failed to join the domain
after investigation I've found there is problem with krb5kdc not
listening on public IP on port 464
https://forums.opensuse.org/t/access-denied-between-windows-member-samba-...
listening on IPv6 localhost [::1]:464 only
sudo ss -tupln | grep 464
udp UNCONN 0 0 [::1]:464 [::]:* users:(("kdc[master]",pid=209134,fd=38))
tcp LISTEN 0 10 [::1]:464 [::]:* users:(("kdc[master]",pid=209134,fd=37))
I've tried to change configuration in file:
/var/lib/samba/private/kdc.conf
[kdcdefaults]
kdc_listen = 0.0.0.0
kdc_tcp_listen = 0.0.0.0
kpasswd_listen = 127.0.0.1:464 192.168.95.111:464
kadmind_listen = 127.0.0.1 192.168.95.111
kdc_ports = 88
kdc_tcp_ports = 88
#kadmind_port = 464
restrict_anonymous_to_tgt = true
when I change "kdc_tcp_listen" or "kadmind_listen" listening IPs are
changing
but change of "kpasswd_listen" directive make no difference.
Is it bug in fedora samba package or I'm doing something wrong?
Pavel
3 weeks, 2 days
OT: live spins for RHEL and/or CentOS?
by ToddAndMargo
Hi All,
Please forgive a bit off topic.
AnyDesk is having issue with light DM under Fedora 38 - 40.
The keyboard becomes inactive (probably sent somewhere else).
AnyDesk works fine if the user is already logged into to
his GUI.
AnyDesk support won't help as they do not support Fedora.
They only support RHEL and CentOS. (Telling them RHEL
is based on prior versions fall on deaf ears.)
SO I am having trouble finding an XFCE or MATE spin
of either RHEL or CentOS to install in a Virtual Machine
to get them to support me and take the issue.
But I can't find such a spin.
Any ideas?
-T
--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Computers are like air conditioners.
They malfunction when you open windows
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
3 weeks, 2 days
Who moved my journald.conf?
by Tom Horsley
I have a bunch of journal setting I normally change in
/etc/systemd/journald.conf.
In fedora40 there doesn't appear to be such a file.
Where are journal settings configured these days?
3 weeks, 3 days
Cleanup after Failed dnf Upgrade
by Tim Evans
Command-line dnf upgrade (F39->F40) failed yesterday, barfing on a
missing GPG key for Fedora 40, leaving 2.5GB of rpms sitting in
/var/lib/dnf/system-upgrade. 'dnt clean' does not remove these.
Is it safe to manually clear out this subdirectory?
(FWIW, I tried the now-recommended GUI software app's "upgrade" and it
ran the upgrade without error, but all this cruft is still sitting there.)
Thanks.
3 weeks, 3 days
virt-viewer vs virt-manager for sound
by Ranbir
Hi,
I'm successfully using virt-viewer to display a Fedora 40 KVM running
on my Fedora 40 host. The one problem I have is that sound from the KVM
only works in virt-manager and not in virt-viewer.
If I passthrough my headset to the KVM, sound works fine in virt-
viewer. Otherwise, I don't hear anything from my speakers, unless I use
virt-manager.
Is there a plugin or some configuration parameter I'm missing that
would make sound work in virt-viewer without having to passthrough my
headset?
--
Ranbir
3 weeks, 3 days
Fedora 40 and nouveau
by John Pilkington
Both my old HP boxes have F40 up-to-date. Both are connected to an HDMI
tv and vga monitor, but the one dual-booted with Windows has a fixed
800x600 screen size that appears only on the HDMI screen but lacks HDMI
audio. I reinstalled the (Fedora provided) nouveau driver on both boxes
before these reboots. The boot lines shown give rrunning systems. Most
variants that I have tried freeze sooner or later.
I still have no idea of how to pre-specify the devices that I want to use.
John P
{{{
The same packages are on both boxes:
[john@HPFed ~]$
[john@HPFed ~]$ rpm -qa | grep -i nouveau
nouveau-firmware-340.32-12.fc40.noarch
xorg-x11-drv-nouveau-1.0.17-7.fc40.x86_64
[john@HPFed ~]$
[john@HPFed ~]$
[john@HPFed ~]$
[john@HPFed ~]$ rpm -qa | grep -i nvidia
nvidia-gpu-firmware-20240410-1.fc40.noarch
[john@HPFed ~]$
===============
This box works acceptably for me, but may not provide hardware
acceleration or deinterlace.
[john@HPFed ~]$
[john@HPFed ~]$
[john@HPFed ~]$ sudo dmesg | grep -i nouveau
[sudo] password for john:
[ 0.000000] Command line:
BOOT_IMAGE=(hd0,msdos1)/vmlinuz-6.8.8-300.fc40.x86_64
root=/dev/mapper/fedora-root ro rd.driver.blacklist=nvidia
modprobe.blacklist=nvidia nouveau-drm.modeset=1 rd.lvm.lv=fedora/swap
rd.lvm.lv=fedora/root rhgb quiet
[ 0.080150] Kernel command line:
BOOT_IMAGE=(hd0,msdos1)/vmlinuz-6.8.8-300.fc40.x86_64
root=/dev/mapper/fedora-root ro rd.driver.blacklist=nvidia
modprobe.blacklist=nvidia nouveau-drm.modeset=1 rd.lvm.lv=fedora/swap
rd.lvm.lv=fedora/root rhgb quiet
[ 6.251690] nouveau 0000:01:00.0: vgaarb: deactivate vga console
[ 6.259071] nouveau 0000:01:00.0: NVIDIA GK208B (b060b0b1)
[ 6.471713] nouveau 0000:01:00.0: bios: version 80.28.a6.00.35
[ 6.478430] nouveau 0000:01:00.0: fb: 1024 MiB DDR3
[ 7.506681] nouveau 0000:01:00.0: DRM: VRAM: 1024 MiB
[ 7.506687] nouveau 0000:01:00.0: DRM: GART: 1048576 MiB
[ 7.506691] nouveau 0000:01:00.0: DRM: TMDS table version 2.0
[ 7.509397] nouveau 0000:01:00.0: DRM: MM: using COPY for buffer copies
[ 7.519874] [drm] Initialized nouveau 1.4.0 20120801 for 0000:01:00.0
on minor 0
[ 7.717489] fbcon: nouveaudrmfb (fb0) is primary device
[ 7.864230] nouveau 0000:01:00.0: [drm] fb0: nouveaudrmfb frame
buffer device
[ 26.289099] snd_hda_intel 0000:01:00.1: bound 0000:01:00.0 (ops
nv50_audio_component_bind_ops [nouveau])
[john@HPFed ~]$
[john@HPFed ~]$
[john@HPFed ~]$
[john@HPFed ~]$
[john@HPFed ~]$ sudo dmesg | grep -i nvidia
[ 0.000000] Command line:
BOOT_IMAGE=(hd0,msdos1)/vmlinuz-6.8.8-300.fc40.x86_64
root=/dev/mapper/fedora-root ro rd.driver.blacklist=nvidia
modprobe.blacklist=nvidia nouveau-drm.modeset=1 rd.lvm.lv=fedora/swap
rd.lvm.lv=fedora/root rhgb quiet
[ 0.080150] Kernel command line:
BOOT_IMAGE=(hd0,msdos1)/vmlinuz-6.8.8-300.fc40.x86_64
root=/dev/mapper/fedora-root ro rd.driver.blacklist=nvidia
modprobe.blacklist=nvidia nouveau-drm.modeset=1 rd.lvm.lv=fedora/swap
rd.lvm.lv=fedora/root rhgb quiet
[ 6.259071] nouveau 0000:01:00.0: NVIDIA GK208B (b060b0b1)
[ 26.293617] input: HDA NVidia HDMI/DP,pcm=3 as
/devices/pci0000:00/0000:00:01.0/0000:01:00.1/sound/card1/input11
[ 26.293770] input: HDA NVidia HDMI/DP,pcm=7 as
/devices/pci0000:00/0000:00:01.0/0000:01:00.1/sound/card1/input12
[ 26.293969] input: HDA NVidia HDMI/DP,pcm=8 as
/devices/pci0000:00/0000:00:01.0/0000:01:00.1/sound/card1/input13
[ 26.294042] input: HDA NVidia HDMI/DP,pcm=9 as
/devices/pci0000:00/0000:00:01.0/0000:01:00.1/sound/card1/input14
[john@HPFed ~]$
===================
Dual-boot giving HDMI 800x600 window only and no HDMI audio.
john@FedWin4c1:~$
john@FedWin4c1:~$
john@FedWin4c1:~$ sudo dmesg | grep -i nouveau
john@FedWin4c1:~$
john@FedWin4c1:~$
john@FedWin4c1:~$
john@FedWin4c1:~$ sudo dmesg | grep -i nvidia
[ 0.000000] Command line:
BOOT_IMAGE=(hd2,gpt2)/vmlinuz-6.8.8-300.fc40.x86_64
root=/dev/mapper/fedora_localhost--live-root ro
rd.driver.blacklist=nvidia modprobe.blacklist=nvidia nomodeset
resume=/dev/mapper/fedora_localhost--live-swap
rd.lvm.lv=fedora_localhost-live/root
rd.lvm.lv=fedora_localhost-live/swap rhgb quiet
rd.driver.blacklist=nvidia modprobe.blacklist=nvidia nomodeset
[ 0.000000] Kernel command line:
BOOT_IMAGE=(hd2,gpt2)/vmlinuz-6.8.8-300.fc40.x86_64
root=/dev/mapper/fedora_localhost--live-root ro
rd.driver.blacklist=nvidia modprobe.blacklist=nvidia nomodeset
resume=/dev/mapper/fedora_localhost--live-swap
rd.lvm.lv=fedora_localhost-live/root
rd.lvm.lv=fedora_localhost-live/swap rhgb quiet
rd.driver.blacklist=nvidia modprobe.blacklist=nvidia nomodeset
[ 20.370975] input: HDA NVidia HDMI/DP,pcm=3 as
/devices/pci0000:00/0000:00:01.0/0000:01:00.1/sound/card1/input9
[ 20.371114] input: HDA NVidia HDMI/DP,pcm=7 as
/devices/pci0000:00/0000:00:01.0/0000:01:00.1/sound/card1/input10
[ 20.371229] input: HDA NVidia HDMI/DP,pcm=8 as
/devices/pci0000:00/0000:00:01.0/0000:01:00.1/sound/card1/input11
[ 20.371315] input: HDA NVidia HDMI/DP,pcm=9 as
/devices/pci0000:00/0000:00:01.0/0000:01:00.1/sound/card1/input12
john@FedWin4c1:~$
}}}
3 weeks, 5 days
libvirt / kvm bridged network question
by Sbob
All;
I am moving from VMWare to KVM / libvirt / vitr machine manager
In VMWare I could tell a VM to use a bridged network and then the IP of
that VM was accessible from other servers
I have seen setup guides on the web and they all seem to suggest that I
need one additional IP interface on my KVM server for each bridged ip I
want.
Is this true? Is there some way to easily replicate the way VMWare does
it so I can just tell a VM to use an IP that is accessible from another
server?
Thanks in advance
3 weeks, 6 days
Any clue what I did to nouveau?
by Tom Horsley
This is just curiosity since I fixed it by installing nvidia drivers
from rpmfusion, but here's what happened:
When I installed fedora 40 workstation, I saw that the nouveau drivers
(for the first time in years) had correctly decided to run at the
native 3840x2160 resolution of the TV I use as a monitor. I figured
I'd give them a chance this time.
I installed a bazillion or so packages (OK 4400 :-) to get the new
f40 to have the same packages as f39.
The next time I rebooted into fedora40, nouveau was now insisting
that 800x600 and 1024x768 were the only two resolutions available.
Any idea what I might have installed to make nouveau forget how
to support the proper screen resolution?
Whatever it was has no effect on nvidia, installing nvidia and
rebooting got me back to 3840x2160 with no other actions required
by me.
3 weeks, 6 days
Strange messages from DNF
by Robert McBroom
The last update had something happen. What is happening with dracut?
Anyone see such?
88x2bu.ko.xz:
Running module version sanity check.
- Original module
- No original module exists within this kernel
- Installation
- Installing to /lib/modules/6.8.8-300.fc40.x86_64/extra/
depmod.....
dkms autoinstall on 6.8.8-300.fc40.x86_64/x86_64 succeeded for 8812au 88x2bu
dkms: autoinstall for kernel 6.8.8-300.fc40.x86_64 Done.
dracut-install: ERROR: installing '/etc/fcoe/cfg-*'
dracut[E]: FAILED: /usr/lib/dracut/dracut-install -D
/var/tmp/dracut.S7Deba/initramfs -a /etc/fcoe/cfg-*
dkms: running auto installation service for kernel 6.8.8-300.fc40.x86_64
dkms: autoinstall for kernel 6.8.8-300.fc40.x86_64 Done.
Running scriptlet: selinux-policy-targeted-40.17-1.fc40.noarch 137/137
Running scriptlet: kernel-modules-6.8.8-300.fc40.x86_64 137/137
Running scriptlet: passt-selinux-0^20240426.gd03c4e2-1.fc40.noarch
137/137
Running scriptlet: swtpm-selinux-0.8.1-7.fc40.noarch 137/137
Running scriptlet: ed-1.20.1-1.fc40.x86_64 137/137
Creating group 'gnome-remote-desktop' with GID 959.
Creating user 'gnome-remote-desktop' (GNOME Remote Desktop) with UID 959
and GID 959.
Creating group 'passim' with GID 958.
Creating user 'passim' (Local Caching Server) with UID 958 and GID 958.
Failed to add existing group "input" to temporary group file: Invalid
argument
/usr/lib/tmpfiles.d/gnome-remote-desktop-tmpfiles.conf:2: Failed to
resolve user 'gnome-remote-desktop': No such process
/usr/lib/tmpfiles.d/gnome-remote-desktop-tmpfiles.conf:3: Failed to
resolve user 'gnome-remote-desktop': No such process
/usr/lib/tmpfiles.d/sphinx.conf:1: Failed to resolve user 'sphinx': No
such process
I don't use gnome
4 weeks