Problem: kerberos is not listening on the primary interface

Knowledge Base Community
, ,
#1

Problem:

Kerberos is not listening on the primary interface

root@ucs:~# netstat -tlpn |grep 88
tcp        0      0 127.0.0.1:88            0.0.0.0:*               LISTEN      6537/samba: task[kd  
tcp6       0      0 ::1:88                  :::*                    LISTEN      6537/samba: task[kd

expected is

tcp        0      0 10.200.43.170:88        0.0.0.0:*               LISTEN      1363/samba: task[kd 
tcp        0      0 127.0.0.1:88            0.0.0.0:*               LISTEN      1363/samba: task[kd 
tcp6       0      0 ::1:88                  :::*                    LISTEN      1363/samba: task[kd

Investigation:

ucr search --brief interface

interfaces/ens3/address: 10.200.43.170
interfaces/ens3/netmask: 24
interfaces/ens3/type: static
interfaces/handler: ifplugd
interfaces/primary: ens3
interfaces/restart/auto: <empty>
mail/postfix/inet/interfaces: 127.0.0.1
samba/interfaces/bindonly: yes
samba/interfaces: lo <interfaces/primary>
samba/register/exclude/interfaces: docker0

ip -c a

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: ens7: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 52:54:00:7e:f8:ab brd ff:ff:ff:ff:ff:ff
    inet 10.200.43.170/24 brd 10.200.43.255 scope global ens3
       valid_lft forever preferred_lft forever
    inet6 fe80::5054:ff:fe7e:f8ab/64 scope link 
       valid_lft forever preferred_lft forever
3: docker0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default 
    link/ether 02:42:4d:10:17:89 brd ff:ff:ff:ff:ff:ff
    inet 172.17.42.1/16 brd 172.17.255.255 scope global docker0
       valid_lft forever preferred_lft forever
    inet6 fe80::42:4dff:fe10:1789/64 scope link 
       valid_lft forever preferred_lft forever

Solution:

The tiny difference is the ens7 vs the via ucr configured ens3 interface definition.
This could happen, if the server was migrated to an other virtual host. After reboot, the interface changed to ens7 but ens3 is still defined via ucr. so these ucr Varaibles

interfaces/ens3/address: 10.200.43.170
interfaces/ens3/netmask: 24
interfaces/ens3/type: static
interfaces/primary: ens3

need to be adjusted

#2
Mastodon