Opsi "unauthorized"

UCS - Univention Corporate Server
#1

Hallo,

on connecting with opsi-configed, it fails with this message:

“Unauthorized - no connection”.

log-file opsiconfd.log:
[4] [2023-04-09 22:56:54.440] [192.168.178.234] Backend authentication error: Backend authentication error: Authentication failed for user ‘Administrator’: Backend authentication $
$
[3] [2023-04-09 22:57:04.656] [192.168.178.234] Backend permission denied error: Access to method ‘getRawData’ denied for user ‘root’ (jsonrpc.py:543)
Traceback (most recent call last):

logfile auth.log:

Apr 10 12:04:00 worblingen unix_chkpwd[27474]: check pass; user unknown
Apr 10 12:04:00 worblingen unix_chkpwd[27474]: password check failed for user (administrator)
Apr 10 12:04:00 worblingen opsiconfd: pam_unix(opsi-auth:auth): authentication failure; logname= uid=2018 euid=2018 tty= ruser= rhost= user=administrator
Apr 10 12:04:00 worblingen opsiconfd: pam_krb5(opsi-auth:auth): authentication failure; logname=administrator uid=2018 euid=2018 tty= ruser= rhost=

Any ideas?

Thanks and Greets
Stefan

#2

Hello Stefan,

your “Administrator” should be member of the Group opsiadmin (and maybe opsifileadmins). Are you able to login via the webinterface https://<your-server-hosting-opsi>:4447 ?

There’s an older discussion (from 2017) in this forum but it may still help to reinitialize the current opsi config an restart the service(s).

Good luck!
Maik

#3

Thanks for your answer.
This is the output :slight_smile:

root@worblingen:/var/log/samba# sudo ucr set --force samba/interfaces="$(ucr get samba/interfaces) lo"
bash: ucr: Kommando nicht gefunden.
Setting samba/interfaces
Multifile: /etc/samba/smb.conf

I was able to login in the admin webinterface of opsi!!!
But i found out, that there is problem with the samba shares.
Connecting in Windows 10 explorer is not possbile. Windows cant find any shares, even not the server itself.
Samba is running.
Here are the logs from samba, - it seems normal for me:

Here the logs from samba (nmbd):

[2023/04/13 00:19:58.217382, 0, pid=1123] …/…/source3/nmbd/nmbd.c:901(main)
nmbd version 4.16.8-Univention started.
Copyright Andrew Tridgell and the Samba Team 1992-2022
[2023/04/13 00:19:58.286165, 0, pid=1147] …/…/source3/nmbd/asyncdns.c:158(start_async_dns)
started asyncdns process 1148
[2023/04/13 00:19:58.287189, 0, pid=1147] …/…/lib/util/become_daemon.c:150(daemon_status)
daemon_status: daemon ‘nmbd’ : No local IPv4 non-loopback interfaces available, waiting for interface …
[2023/04/13 00:19:58.287208, 0, pid=1147] …/…/source3/nmbd/nmbd_subnetdb.c:253(create_subnets)
NOTE: NetBIOS name resolution is not supported for Internet Protocol Version 6 (IPv6).
[2023/04/13 23:33:20.541196, 0, pid=26385] …/…/source3/nmbd/nmbd.c:901(main)
nmbd version 4.16.8-Univention started.
Copyright Andrew Tridgell and the Samba Team 1992-2022
[2023/04/13 23:33:20.544414, 0, pid=26386] …/…/source3/nmbd/asyncdns.c:158(start_async_dns)
started asyncdns process 26387
[2023/04/13 23:33:20.545877, 0, pid=26386] …/…/lib/util/become_daemon.c:150(daemon_status)
daemon_status: daemon ‘nmbd’ : No local IPv4 non-loopback interfaces available, waiting for interface …
[2023/04/13 23:33:20.545917, 0, pid=26386] …/…/source3/nmbd/nmbd_subnetdb.c:253(create_subnets)
NOTE: NetBIOS name resolution is not supported for Internet Protocol Version 6 (IPv6).
[2023/04/13 23:35:49.901580, 0, pid=26754] …/…/source3/nmbd/nmbd.c:901(main)
nmbd version 4.16.8-Univention started.
Copyright Andrew Tridgell and the Samba Team 1992-2022
[2023/04/13 23:35:49.905284, 0, pid=26755] …/…/source3/nmbd/asyncdns.c:158(start_async_dns)
started asyncdns process 26756
[2023/04/13 23:35:49.906591, 0, pid=26755] …/…/lib/util/become_daemon.c:150(daemon_status)
daemon_status: daemon ‘nmbd’ : No local IPv4 non-loopback interfaces available, waiting for interface …
[2023/04/13 23:35:49.906624, 0, pid=26755] …/…/source3/nmbd/nmbd_subnetdb.c:253(create_subnets)
NOTE: NetBIOS name resolution is not supported for Internet Protocol Version 6 (IPv6).

and here log.samba:

[2023/04/13 00:20:02.874735, 0, pid=1163] …/…/source4/samba/server.c:623(binary_smbd_main)
samba version 4.16.8-Univention started.
Copyright Andrew Tridgell and the Samba Team 1992-2022
[2023/04/13 00:20:46.987425, 0, pid=1218] …/…/source4/samba/server.c:897(binary_smbd_main)
binary_smbd_main: samba: using ‘prefork’ process model
[2023/04/13 00:21:02.221578, 1, pid=1646] …/…/source4/dsdb/kcc/garbage_collect_tombstones.c:68(garbage_collect_tombstones_part)
Doing a full scan on DC=ForestDnsZones,DC=ddns-net,DC=intranet and looking for deleted objects
[2023/04/13 00:21:02.877336, 1, pid=1646] …/…/source4/dsdb/kcc/garbage_collect_tombstones.c:68(garbage_collect_tombstones_part)
Doing a full scan on DC=DomainDnsZones,DC=ddns-net,DC=intranet and looking for deleted objects
[2023/04/13 00:21:03.443877, 1, pid=1646] …/…/source4/dsdb/kcc/garbage_collect_tombstones.c:68(garbage_collect_tombstones_part)
Doing a full scan on CN=Configuration,DC=ddns-net,DC=intranet and looking for deleted objects
[2023/04/13 00:21:09.870752, 1, pid=1646] …/…/source4/dsdb/kcc/garbage_collect_tombstones.c:68(garbage_collect_tombstones_part)
Doing a full scan on DC=ddns-net,DC=intranet and looking for deleted objects
[2023/04/13 23:33:21.692271, 0, pid=26413] …/…/source4/samba/server.c:623(binary_smbd_main)
samba version 4.16.8-Univention started.
Copyright Andrew Tridgell and the Samba Team 1992-2022
[2023/04/13 23:33:21.941494, 0, pid=26414] …/…/source4/samba/server.c:897(binary_smbd_main)
binary_smbd_main: samba: using ‘prefork’ process model
[2023/04/13 23:33:37.145084, 1, pid=26455] …/…/source4/dsdb/kcc/garbage_collect_tombstones.c:68(garbage_collect_tombstones_part)
Doing a full scan on DC=ForestDnsZones,DC=ddns-net,DC=intranet and looking for deleted objects
[2023/04/13 23:33:37.147139, 1, pid=26455] …/…/source4/dsdb/kcc/garbage_collect_tombstones.c:68(garbage_collect_tombstones_part)
Doing a full scan on DC=DomainDnsZones,DC=ddns-net,DC=intranet and looking for deleted objects
[2023/04/13 23:33:37.150055, 1, pid=26455] …/…/source4/dsdb/kcc/garbage_collect_tombstones.c:68(garbage_collect_tombstones_part)
Doing a full scan on CN=Configuration,DC=ddns-net,DC=intranet and looking for deleted objects
[2023/04/13 23:33:37.197066, 1, pid=26455] …/…/source4/dsdb/kcc/garbage_collect_tombstones.c:68(garbage_collect_tombstones_part)
Doing a full scan on DC=ddns-net,DC=intranet and looking for deleted objects
[2023/04/13 23:35:51.622441, 0, pid=26791] …/…/source4/samba/server.c:623(binary_smbd_main)
samba version 4.16.8-Univention started.
Copyright Andrew Tridgell and the Samba Team 1992-2022
[2023/04/13 23:35:51.925426, 0, pid=26792] …/…/source4/samba/server.c:897(binary_smbd_main)
binary_smbd_main: samba: using ‘prefork’ process model
[2023/04/13 23:36:07.084314, 1, pid=26832] …/…/source4/dsdb/kcc/garbage_collect_tombstones.c:68(garbage_collect_tombstones_part)
Doing a full scan on DC=ForestDnsZones,DC=ddns-net,DC=intranet and looking for deleted objects
[2023/04/13 23:36:07.086573, 1, pid=26832] …/…/source4/dsdb/kcc/garbage_collect_tombstones.c:68(garbage_collect_tombstones_part)
Doing a full scan on DC=DomainDnsZones,DC=ddns-net,DC=intranet and looking for deleted objects
[2023/04/13 23:36:07.089518, 1, pid=26832] …/…/source4/dsdb/kcc/garbage_collect_tombstones.c:68(garbage_collect_tombstones_part)
Doing a full scan on CN=Configuration,DC=ddns-net,DC=intranet and looking for deleted objects
[2023/04/13 23:36:07.137651, 1, pid=26832] …/…/source4/dsdb/kcc/garbage_collect_tombstones.c:68(garbage_collect_tombstones_part)
Doing a full scan on DC=ddns-net,DC=intranet and looking for deleted objects

I can now login to opsiconfiged, but there is also an error:

2023-04-14 00:02:04.928 – Opsi service error: [JSONDecodeError] Expecting value: line 1 column 2 (char 1)
2023-04-14 00:02:05.014 – JSONReMapper: Exception on reproducing null, java.lang.NullPointerException: Cannot invoke “java.util.List.iterator()” because “” is null

Here is a screenshot:
configed

i dont have any idea :frowning:

Greetings
Stefan

#4

Hello again,
its all solved :slight_smile:
The problem was, that no interface was in the smb.conf.
Under “interfaces” i wrote in my case enp0s25, restartet samba and everything was allright.
Thanks again, but why did the interface dissapear?
Greetings
Stefan

Mastodon