Server :: Samba Domain (PDC) - Could Not Update ICEAuthority
Feb 1, 2011
I'm configuring a classroom based on Linux (just Linux, without Windows) with user mobility. What I want is that any student will use its own 'username/password' on whatever computer getting its own data and without having to define every user on every computer. As far as Samba is very useful, even when I don't need Windows support I decided to base the solution on Samba. Right now I still have some problems and the solution doesn't work in my test environment. I defined a PDC (Samba 3.5 Domain Controller) on a Fedora 13 with 'homes', starting nmb and smb and it seems to work. On a Ubuntu 10.10 Workstation I built a Samba 'Domain Member Server' starting nmb, smb and winbind.
First question: should I define 'homes' on this server or not? I assumed 'not' as the 'homes' you have to use are the ones defined on the PDC, not on the DMS.
Second question: does winbind run just on DMS? Not on the PDC too?
I defined the DMS 'machine' and some domain users on the PDC and I could 'join' the DMS to the PDC without any problem (join rpc ...) From the workstation I can use smbclient seeing a domain with two servers, one of which is the controller. I can connect to the home shares using the domain users which are authorized by the PDC. On the DMS I paid attention on nsswitch.conf and pam file running 'pam-auth-update'. So 'webinfo -u' provides a list of users on the domain, local users and domain users. The problem arrives when I try to connect from the session login screen on the workstation to 'mydomainmyuser'. PDC validates the user, if the password is right, and I get connected but not to my PDC homes.
Instead I get some errors starting with:
'could not update ICEAuthoriy file /home/mydomain/myuser/.ICEAuthority'
It seems I'm in an empty space in an open but useless session which I can close later on.
Hereafter you will see the short smb.conf reported by testparm:
PDC
[global]
workgroup = TESO-DOM
server string = Samba Server Version %v
interfaces = lo, wlan0
bind interfaces only = Yes .....
View 6 Replies
ADVERTISEMENT
May 1, 2011
I recently installed Ubuntu 11.04 with Unity as the default desktop environment, but I wanted Gnome 3 instead. So the installation of Gnome 3 and Gnome Shell went through, and I'm presented with a nice "gnomeish" gdm, but when I type my user password and try to log in all I get is this:
Code: Could not update ICEauthority file /home/pontus/.ICEauthority And all I can click is a button that logs me out.
I've tried from the terminal to change owner and rights and I've even tried to delete the file, but I still get this dialog every time I log in.
View 9 Replies
View Related
Aug 13, 2011
I am setting up a freeipa2 server (both fedora 15), and I was able to get the ipa-client-install to work perfectly (as far as I know) by yum excluding libcurl and curl. If I run kinit brad, I can authenticate and that works aswell.
But when I want to login as me through gdm, I get "Could not update ICEauthority file /home/brad/.ICEauthority" granted the home folders do not exist as this would be my first ever login.
I am currently replacing a windows computer lab to fedora, and have got eveything else ready to go.
View 1 Replies
View Related
Jan 2, 2010
I have installed 9.10 on a Dell laptop internal drive.My problem is that I am getting the error:
Code:
Could not update ICEauthority file /home/holocene/.ICEauthority then after hitting enter I get:
Code:
There is a problem with the configuration server. (/usr/lib/libgconf2-4/gconf-sanity-check-2 exited with status 256)
How do I get this user and files functioning again?
What I did:
1. Installed ubuntu
2. got wireless/mail/other things working and used them for a couple days.
3. Decided my password was too short (insecure) and changed it. I used the GUI tool on the admin screen called Users, I think it is called.
4. restarted my laptop later, and got these messages.
I have googled extensively about this error, and it seems there is no good explanation as to how to get my user "holocene" back as a functioning user account. I have been able to setup another user using the recovery console but this is not a satisfying compromise.
View 9 Replies
View Related
Feb 18, 2010
I've updated my password some days back and when I restarted my machine I got error messages stating...
1. Could not update ICEauthority file /home/username/.ICEauthority it gives me only xClose tab and when I click it I get another error message saying...
2. There is a problem with the configuration server.
(/usr/lib/libgconf2-4/gconf-sanity-check-2 exited with status 256) xClose and the last message which i get says that...
3. Nautilus could not create the required folder "/home/username/Desktop".Before running Nautilus, please create the following folder, or set permissions such that Nautilus can create it.
Now every time when I restart my machine I've to follow this procedure...
1. I select my username and then login using xterm.
2. I give command ecryptfs-mount-private and give another password to mount it (it's not taking my regular password)
3. After doing this it takes me back to the login screen and allow me to log in normally...
View 9 Replies
View Related
Dec 18, 2010
I've just installed Ubuntu 10.04 onto my system and have been getting an error message right after i enter my password to login "Could not update ICEauthority file /home/jimmy/.ICEauthority" I can close this and everything seems to work fine. I have no idea as to why i get this error and how do i get rid of it. I tried using one of the suggestions and entered the command
Code:
sudo chown jimmy:jimmy .ICEauthority
got an input/output error for this I've checked the permissions using the following command
Code:
ls -l home/jimmy/.ICEauthority
got the following output
-rw------- 1 jimmy jimmy 0 2010-12-18 22:55 /home/jimmy/.ICEauthority
View 1 Replies
View Related
Jun 5, 2011
2.Could not update ICEauthority file /home/superuser/.ICEauthority3.there is a problem with configuration server.(/usr/lib/libgconf2-4/gconf-sanity-check-2 exited with status 256).nautilus could not create the following required folders./home/superuser/desktop,/home/superuser/.nautilus. *before running nautilus, please create these folders, or set permissions such that nautilius can create them*5.GConf error: no database available to save your configuration: Unable to store a value at key '/apps/nautilus/preferences/clutter_Test: As the configuration server has no writable databases. There are some common causes of this problem: then the long list I am on my mobile phone..
First I would like to say I learned my lesson by being high on curosity! I believe I was goofing around with systems-users-advance systems and one of the drop downs I submitted root. Proceeding this path it lead me to a tricky question about transfering old files to a new home or something, but it will also delete the old files on my old home idk maybe two gconf ( read the username)
View 1 Replies
View Related
Oct 27, 2010
I am using fedora11 64 bit.My problem is,today morning i start the computer,then an error raised.
i.e could not update ICEauthority file /var/lib/gdm. ICEauthority
Actually yesterday ,i changed the permissions of /gdm file,with this command:
My system is not working now...how can i solve this problem with out loss of any data.
View 1 Replies
View Related
Mar 23, 2010
1) I get this error message when I boot up :-
2) Then followed by : "There is a problem with the configuration server. (/usr/lib/libgconf2-4/gconf-sanity-check-2 exited with status-256)"
3) Then followed by : "Nautilus could not create the following required folders: /home/ian/Desktop, /home/ian/.nautilus. Before running Nautilus, please create these folders, or set permissions such that Nautilus can create them"
1. I have tried changing the permissions of the /home/ian/.ICEautority folder (as here) :-
Code:
sudo chown ian:ian /home/ian/.ICEauthority
sudo chmod 644 /home/ian/.ICEauthority
No luck. (Even tho this thread states it worked!)
2. As per this thread None of these worked :-
[Code]...
View 9 Replies
View Related
Aug 24, 2010
When Ubuntu boots, I get the following message:"Could not update ICEauthority file /home/jim/.ICEauthority" After I dismiss this message, I get "There is a problem with the configuration server.(usr/lib/libgconf-4/gconf-sanity-check-2 exited with status 256" Then the desktop fails to start.
View 9 Replies
View Related
May 17, 2011
in my terminal : sudo chmod 700 /home now ,i can not enter my os.when i open os : could not update iceauthority file /home/pt/.iceauthority. how can i do?
View 3 Replies
View Related
Nov 20, 2009
When i log out/in takes long time and file is not updated?
View 9 Replies
View Related
Oct 27, 2010
I am using fedora11 64 bit.My problem is,today morning i start the computer,then an error raised.
i.e could not update ICEauthority file /var/lib/gdm. ICEauthority
Actually yesterday ,i changed the permissions of /gdm file,with this command:
Keyboard& mouse are not working...
My system is not working now...how can i solve this problem with out loss of any data.
View 5 Replies
View Related
Jun 27, 2011
i need to allow window domain controller user to use file share of linux.windows DC user can see the share file and directories of linux file server but not able to access.
below is brief--
I have a Linux machine which is on my network but not on my domain. I have configured SAMBA FILESERVER for file sharing purpose. I have a Windows XP PC which is on the domain(windows server) that I am trying to connect to a share on the Linux box. I supply my credentials but regardless of which login I use I always get Logon Failure. I have created an account on the Linux machine with the same user name and password as my domain account but so far no luck. Can I connect from a domain PC to a non-domain Linux box? Is there something else I should be checking?
View 14 Replies
View Related
May 13, 2010
The company I work for, as usual, is Microsoft-centric. I'm attempting to integrate my Ubuntu server into the domain to allow domain users to authenticate to the server and access file shares using Samba. Here's my current configuration:
[Code].....
View 9 Replies
View Related
Jun 12, 2010
I have the following error messages on my computer after I enter my password and boot into gnome: Could not update ICEAuthority file /home/sam/.ICEauthority Then: There is a problem with the configuration server, /usr/lib/libconf2-4/gconf-sanity-check-2 (exited with status 256)
Finally: Nautilus could not create the following required olders: /home/sam/Desktop, /home/sam/.nautilus Before running nautilus, please create these folders or set permissions such that Nautilus can create them. Solutions I've tried: sudo chmod 700 /home/ what to do to repair nautilus and graphically boot into gnome?
View 3 Replies
View Related
Oct 8, 2009
I have to rename a group of machines in my little samba domain (tbd backend) but there is an ugly bug that makes this impossible. have set 'rename user script' variable corectly, also checked all configurations.When i change computer name in my windows box, it shows an error saying something like "Error calling remote procedure"Looking on server side, username for the machine gets correctly changed in /usr/passwd, and also in samba database.But samba log says:
===============================================================
[2009/10/08 11:10:32, 0] lib/fault.c:fault_report(42)
INTERNAL ERROR: Signal 11 in pid 11052 (3.0.33-3.7.el5_3.1)
[code]....
View 3 Replies
View Related
Mar 15, 2010
I've been fighting with the Samba server for a while and I'm a bit frustrated at this point. When I try to add machines to my domain I get the "The username could not be found error" here is my smb.conf...
Code:
[global]
workgroup = INMANONE
netbios name = PDC
server string = Inman Domain Controller
os level = 64
security = user
passdb backend = tdbsam
domain logons = yes
domain master = yes
local master = yes .....
View 3 Replies
View Related
Sep 21, 2010
I want to set a log off script for samba domain users. Actually I am facing a huge temp files related problem. So I want to set a batch file which will run when domain user log off. When user logout then batch file run and delete all temp files.I have already set batch file local group policy and it works for me, but I wants to set it from server side.
View 1 Replies
View Related
Oct 14, 2010
I have a samba server for company file shares but we do not use domain services or active directory service. Each workstation is its own standalone system. (And we want to keep it this way.) I would like to have some centralized authentication though, and it looks like Kerberos will provide that. After a lot of searching though, I can't find any instructions for setting up samba to authenticate users using kerberos without an ADS (active directory service) or domain. Is this possible?
View 1 Replies
View Related
Feb 13, 2010
i have configured samba as file server in fedora 11,it works fine for both windows and linux machines .but i want to configure ldap and samba as domain controller. Googled a lot on internet every thing is confusing me .
View 2 Replies
View Related
May 3, 2010
We're still using an NT Domain Server, and Samba is already configured properly. But the problem is if the shared folder is configured in samba to be accessed by group and not the domain username, authentication fails even if the user is member of the group.
Example#1: (authentication successful)
[sharedfolder]
valid users = domain+username
Example#2:
[sharedfolder] (authentication fails)
valid users = @domaingroup
Samba version is samba-3.0.33
View 2 Replies
View Related
Feb 27, 2011
My Windows 2003 domain has three domain controllers. All of them are configured as global catalog servers, but my krb.conf and krb5.conf only contain a reference to one of them. What if the DC referenced is down? Should my files reference the other DCs? The contents of my files follow...
krb.conf
--------
MYDOMAIN.COM dc01.MYDOMAIN.COM:88
MYDOMAIN.COM dc01.MYDOMAIN.COM:749 admin server[code]...........
View 1 Replies
View Related
May 5, 2011
I upgraded from 10.10 to 11.04 on my Toshiba 32-bit laptop without any problems.Since the upgrade I am starting to have troubles on this machine. Most others are 64-bit and bar an Evolution issue are fine.In this case, 24 hours after the upgrade the machine wanted to do an Update. It would not allow the update until I fixed some broken packages which I did via Synaptics Package Manager. I then Marked All Upgrades and did the update from there.It was fine until I shut down and tried to log in again.I got the Blue Screen of Death!!!!!! I thought only Windows had this!Anyway, I could not log in. The auto login was not working so I used Other which gave me Recovery, entered my UN and PW, and I got the error message:
HTML Code:
Could not update ICEauthority file
I have searched the forum and some other sites, but none of the ideas can I get to work. I can start the machine using a 9.10 CD in the trial mode, but can not download the files suggested or delete the ICEauthority file, etc...
View 3 Replies
View Related
Mar 2, 2011
How do I configure samba such that AD authentication still works when a DC is down? Do I need multiple kdc, admin_server, and kpasswd_server entries in krb5.conf?
View 3 Replies
View Related
Aug 26, 2010
One of our servers crashed due to hard drive problems. We were able restore data from backups; however the only info on the samba PDC portion of the server we have are the local and domain SIDs. Armed with only this info; is there a way to recreate the previous domain so the users and machine accounts could recognize it?
View 1 Replies
View Related
Jul 5, 2010
I'm setting up a PDC Samba server on centos5.4. All tasks are well done but on adding new machine in my domain I have a this error message: Error occurred when attempt to join your machine in domain "invalid user name".
samba.log
Code:
[2010/07/05 12:34:55, 2] smbd/sesssetup.c:setup_new_vc_session(1212)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2010/07/05 12:34:55, 2] smbd/sesssetup.c:setup_new_vc_session(1212)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2010/07/05 12:34:55, 2] auth/auth.c:check_ntlm_password(309)
check_ntlm_password: authentication for user [root] -> [root] -> [root] succeeded
[2010/07/05 12:34:55, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2919)
Returning domain sid for domain RAPHAELLO -> S-1-5-21-3852106609-489253481-401883016
smb.conf .....
I think that the machine account is missed or miss matched.
View 1 Replies
View Related
Oct 21, 2010
CentoS 5.5
[root@osra ~]# rpm -q samba3x
samba3x-3.3.8-0.52.el5_5.2
[root@osra ~]# rpm -q krb5-workstation
krb5-workstation-1.6.1-36.el5_5.5
Domain controller windows 2k3 sp3
I follow those guides: [URL] and [URL]. I join the domain, I can test the user
[root@osra ~]# wbinfo -a mbottalico%
plaintext password authentication succeeded
challenge/response password authentication succeeded
[root@osra ~]# wbinfo -u
administrator
guest
krbtgt
[root@osra ~]# wbinfo -g
utenti wins
dhcp users
dhcp administrators
computer del dominio
controller di dominio
getent passwd and group ok without "DOMAIN+"
kinit e klist ok.
I can browser the samba server, but I can enter on "temp", but not in "test" (access denied)
[root@osra ~]# smbclient \\osra\test -U administrator
Enter administrator's password:
Domain=[DOMAINSHORT] OS=[Unix] Server=[Samba 3.3.8-0.52.el5_5.2]
smb: > ls
NT_STATUS_NETWORK_ACCESS_DENIED listing * (I noticed only writing this message)
[root@osra ~]# smbclient \\osra\tmp -U administrator
Enter administrator's password:
Domain=[DOMAINSHORT] OS=[Unix] Server=[Samba 3.3.8-0.52.el5_5.2]
smb: > dir .....
53488 blocks of size 2097152. 49908 blocks available
smb: > q
0 blocks of size 0. 511 blocks available .....
View 2 Replies
View Related
Aug 26, 2010
I use OpenSuse 11.3 and I successfully built a samba/openldap server. However the raoming profiles were not working so I removed the roaming profile part of the samba and the openldap using ldap account manager. I also rejoined a couple of the computers back to the domain successfully (it was not an instaneous join, it took a good minute or 2 to join each pc). Now I cannot cannot login to any of these computers with the domain credentials. I can share using the UNC path no problem and this was working find about 1 week ago.
On 1 of the computers Iw as able to finally get a log file saying this:
View 2 Replies
View Related
Apr 20, 2010
I've been working for hours with Samba on Ubuntu Server 9.10 (Samba version 3.4.0), trying to get it setup simply as a fileserver that performs authentication to an NT 4 server (yes, I know, old and out of date). After much struggling, I finally realized that my configuration *was* working when the clients connecting (from XP, and Win2k clients, mostly) were actually joined to the domain (where the PDC is the NT 4 Server) and logged into the domain.For various reasons, many of the Windows clients at this location don't actually log into the domain, even though they have login/passwords that are valid users on the domain and they'll typically have some drives mapped to the PDC.
By the way, I have this working on another Linux box running Samba 3.0.28, so I'm sure it's possible, I'm just lost as to how to do it.I can provide plenty more information if it would help diagnose the situation. Does anyone have an idea of how I can get this to work? I'm sure it's possible, since the exact scenario worked in a recent version of Samba.
View 1 Replies
View Related
