Koozali.org: home of the SME Server

latest SAMBA YUM UPDATES gives NT_STATUS_TRUSTED_RELATIONSHIP_FAILURE

Offline bs_bay

  • 14
  • +0/-0
When updating to the latest samba updates:

latest samba updates:

===
=== yum reports available updates:
===

libsmbclient.i386                    3.0.33-3.41.el5_11                  updates
samba3x.i386                         3.6.23-12.el5_11                    updates
samba3x-client.i386                 3.6.23-12.el5_11                    updates
samba3x-common.i386            3.6.23-12.el5_11                    updates
samba3x-winbind.i386             3.6.23-12.el5_11                    updates

ALL prior required updates have been performed prior to these.

This also comes after a Windows update. However, 2 PCs, one Win7 the other Windows 10, joined the domain and were able to login prior to the update. However, after the update neither Windows 7 or Windows 10 clients can log into the sme 8.2 Server as there is a NT_STATUS_TRUSTED_RELATIONSHIP_FAILURE during the attempted login.

I've removed the client by force from the domain and added them back onto the domain and still I get this same error.

Rebooted the server and client PCs and still the same error.

I even performed a yum downgrade to remove these updates and I still see the same trust relationship failure error.

in the Messages file I see the following format for multiple users:
Apr 13 09:49:12 icarus smbd[12805]: [2016/04/13 09:49:12.254867,  0] rpc_server/netlogon/srv_netlog_nt.c:976(_netr_ServerAuthenticate3)
Apr 13 09:49:12 icarus smbd[12805]:   _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client PC3 machine account PC3$

What suggestions or options should I try? What else do you need to see?

Thanks,
Bill

Offline fpausp

  • *
  • 728
  • +0/-0
Re: latest SAMBA YUM UPDATES gives NT_STATUS_TRUSTED_RELATIONSHIP_FAILURE
« Reply #1 on: April 13, 2016, 07:07:40 PM »
Still the same here on sme9 and win7...
Viribus unitis

Offline Stefano

  • *
  • 10,836
  • +2/-0
Re: latest SAMBA YUM UPDATES gives NT_STATUS_TRUSTED_RELATIONSHIP_FAILURE
« Reply #2 on: April 13, 2016, 07:09:07 PM »
please, fill asap a bug, thank you

Offline bs_bay

  • 14
  • +0/-0
Re: latest SAMBA YUM UPDATES gives NT_STATUS_TRUSTED_RELATIONSHIP_FAILURE
« Reply #3 on: April 13, 2016, 07:22:04 PM »
Thanks Stefano,
I'm always a little hesitant to post a bug but -- it is now  submitted!
Bill

Offline Stefano

  • *
  • 10,836
  • +2/-0
Re: latest SAMBA YUM UPDATES gives NT_STATUS_TRUSTED_RELATIONSHIP_FAILURE
« Reply #4 on: April 13, 2016, 07:30:27 PM »
I'm always a little hesitant to post a bug but -- it is now  submitted!

no reason to be afraid :-)

https://bugs.contribs.org/show_bug.cgi?id=9448

Offline bs_bay

  • 14
  • +0/-0
Re: latest SAMBA YUM UPDATES gives NT_STATUS_TRUSTED_RELATIONSHIP_FAILURE
« Reply #5 on: April 13, 2016, 08:25:51 PM »
Update:

Daniel suggested upstream report - I'll go there and submit as well...
B

 Daniel B. 2016-04-13 19:39:34 CEST

This is an upstream issue, and should be reported on bugzilla.redhat.com

Offline bs_bay

  • 14
  • +0/-0
Re: latest SAMBA YUM UPDATES gives NT_STATUS_TRUSTED_RELATIONSHIP_FAILURE
« Reply #6 on: April 13, 2016, 11:58:52 PM »
Ok,
the short and long of it is I need to roll back to the prior version of samba.

My current version is 3.6.23-12.el5_11

Does anyone know the prior version?

I've tried the downgrade version to no avail as it indicates these packages are not available. The command I used is:

yum downgrade samba3x-3.5.4-0.70.el5 samba3x-winbind-3.5.4-0.70.el5 samba3x-3.5.4-0.70.el5 samba3x-client-3.5.4-0.70.el5 samba3x-common-3.5.4-0.70.el5 *smb* -y

the result is:
No package samba3x-3.5.4-0.70.el5 available.
No package samba3x-winbind-3.5.4-0.70.el5 available.
No package samba3x-3.5.4-0.70.el5 available.
No package samba3x-client-3.5.4-0.70.el5 available.
No package samba3x-common-3.5.4-0.70.el5 available.
No Match for available package: gnome-vfs2-smb-2.16.2-12.el5_9.i386
Only Upgrade available on package: libsmbclient-3.0.33-3.40.el5_10.i386
No Match for available package: libsmbclient-devel-3.0.33-3.40.el5_10.i386
No Match for available package: pam_smb-1.1.7-7.2.1.i386
Nothing to do


The only page I was able to somehow downgrade is libsmbclient-3.0.33-3.40.el5_10.i386 which I don't want to upgrade

Any suggestions?

Thanks,
B

Offline TerryF

  • grumpy old man
  • *
  • 1,821
  • +6/-0
Re: latest SAMBA YUM UPDATES gives NT_STATUS_TRUSTED_RELATIONSHIP_FAILURE
« Reply #7 on: April 14, 2016, 02:43:46 AM »
Try this procedure from RH: https://access.redhat.com/solutions/64069
--
qui scribit bis legit

Offline TerryF

  • grumpy old man
  • *
  • 1,821
  • +6/-0
Re: latest SAMBA YUM UPDATES gives NT_STATUS_TRUSTED_RELATIONSHIP_FAILURE
« Reply #8 on: April 14, 2016, 02:52:43 AM »
Sorry EL6 and above only
--
qui scribit bis legit

Offline bunkobugsy

  • *
  • 274
  • +4/-0
Re: latest SAMBA YUM UPDATES gives NT_STATUS_TRUSTED_RELATIONSHIP_FAILURE
« Reply #9 on: April 14, 2016, 09:51:15 AM »
Rollback to previsious version works for me:
use search and get these at http://rpm.pbone.net/

libsmbclient-3.0.33-3.40.el5_10.i386
samba3x-winbind-3.6.23-9.el5_11.i386
samba3x-common-3.6.23-9.el5_11.i386
samba3x-client-3.6.23-9.el5_11.i386
samba3x-3.6.23-9.el5_11.i386

rpm -Uvh *.rpm --force    and  stop+start samba from sme8admin

Offline Daniel B.

  • *
  • 1,699
  • +0/-0
    • Firewall Services, la sécurité des réseaux
Re: latest SAMBA YUM UPDATES gives NT_STATUS_TRUSTED_RELATIONSHIP_FAILURE
« Reply #10 on: April 14, 2016, 10:21:04 AM »
I recommend using

Code: [Select]
yum downgrade samba\* libsmbclient

Instead of getting RPMS from untrusted sources
C'est la fin du monde !!! :lol:

Offline bs_bay

  • 14
  • +0/-0
Re: latest SAMBA YUM UPDATES gives NT_STATUS_TRUSTED_RELATIONSHIP_FAILURE
« Reply #11 on: April 14, 2016, 03:00:34 PM »
Good day everyone!

I'm happy to report that Daniel B's solution worked! Simple yet precise. THANKS Daniel!

TerryF - I did find a similar solution I tried from Red Hat but it didn't work. If I could have found the old versions that Bunkobugsy listed then I could have forced the downgrade.

Thanks for the resource bunkobugsy - that seems a great solution too. However, as Daniel said, hard to trust archives of backup RPMs. Maybe you've had some experience with them?

I guess my final question is why did this update roll out? Seems I'm not the only one who has dealt with this? Consequently, I HATE Microsoft - nothing but trouble in every aspect of the design.

I guess my next move is to SME 9 as 8.2 is at EOL in July...
Thanks,
B

Offline turandot

  • *
  • 82
  • +0/-0
Re: latest SAMBA YUM UPDATES gives NT_STATUS_TRUSTED_RELATIONSHIP_FAILURE
« Reply #12 on: April 15, 2016, 06:07:45 PM »
FYI, not surprising at all: this is an issue common to SME 8.2 and 9.1. For 9.1 see also here: https://forums.contribs.org/index.php/topic,52404.0.html

Regards, turandot

Offline pisaacs

  • 15
  • +0/-0
    • http://www.millison.com.au
Re: latest SAMBA YUM UPDATES gives NT_STATUS_TRUSTED_RELATIONSHIP_FAILURE
« Reply #13 on: April 15, 2016, 11:41:29 PM »
I recommend using

Code: [Select]
yum downgrade samba\* libsmbclient

Instead of getting RPMS from untrusted sources

Thanks Daniel B. Worked perfectly for me on SME 9.1

regards
Paul

Offline fpausp

  • *
  • 728
  • +0/-0
Is the problem solved until now, I would like to update my sme 9.1 and some older 8.x server... ?


# SME 9.1
Code: [Select]
Löse Abhängigkeiten auf
--> Führe Transaktionsprüfung aus
---> Package kernel.x86_64 0:2.6.32-573.26.1.el6 will be installiert
---> Package kernel-firmware.noarch 0:2.6.32-573.22.1.el6 will be aktualisiert
---> Package kernel-firmware.noarch 0:2.6.32-573.26.1.el6 will be an update
---> Package kernel-headers.x86_64 0:2.6.32-573.22.1.el6 will be aktualisiert
---> Package kernel-headers.x86_64 0:2.6.32-573.26.1.el6 will be an update
---> Package libtalloc.x86_64 0:2.0.7-2.el6 will be aktualisiert
---> Package libtalloc.x86_64 0:2.1.5-1.el6_7 will be an update
---> Package libtdb.x86_64 0:1.2.10-1.el6 will be aktualisiert
---> Package libtdb.x86_64 0:1.3.8-1.el6_7 will be an update
---> Package libtevent.x86_64 0:0.9.18-3.el6 will be aktualisiert
---> Package libtevent.x86_64 0:0.9.26-2.el6_7 will be an update
---> Package samba.x86_64 0:3.6.23-25.el6_7 will be aktualisiert
---> Package samba.x86_64 0:3.6.23-30.el6_7 will be an update
---> Package samba-client.x86_64 0:3.6.23-25.el6_7 will be aktualisiert
---> Package samba-client.x86_64 0:3.6.23-30.el6_7 will be an update
---> Package samba-common.x86_64 0:3.6.23-25.el6_7 will be aktualisiert
---> Package samba-common.x86_64 0:3.6.23-30.el6_7 will be an update
---> Package samba-winbind.x86_64 0:3.6.23-25.el6_7 will be aktualisiert
---> Package samba-winbind.x86_64 0:3.6.23-30.el6_7 will be an update
---> Package samba-winbind-clients.x86_64 0:3.6.23-25.el6_7 will be aktualisiert
---> Package samba-winbind-clients.x86_64 0:3.6.23-30.el6_7 will be an update
---> Package tdb-tools.x86_64 0:1.2.10-1.el6 will be aktualisiert
---> Package tdb-tools.x86_64 0:1.3.8-1.el6_7 will be an update
---> Package tzdata.noarch 0:2016c-1.el6 will be aktualisiert
---> Package tzdata.noarch 0:2016d-1.el6 will be an update
--> Abhängigkeitsauflösung beendet
--> Führe Transaktionsprüfung aus
---> Package kernel.x86_64 0:2.6.32-573.12.1.el6 will be gelöscht
--> Abhängigkeitsauflösung beendet

Abhängigkeiten aufgelöst

==================================================================================================================================================
 Paket                                     Arch                       Version                                  Repository                   Grösse
==================================================================================================================================================
Installieren:
 kernel                                    x86_64                     2.6.32-573.26.1.el6                      updates                       30 M
Aktualisieren:
 kernel-firmware                           noarch                     2.6.32-573.26.1.el6                      updates                       18 M
 kernel-headers                            x86_64                     2.6.32-573.26.1.el6                      updates                      3.9 M
 libtalloc                                 x86_64                     2.1.5-1.el6_7                            updates                       26 k
 libtdb                                    x86_64                     1.3.8-1.el6_7                            updates                       43 k
 libtevent                                 x86_64                     0.9.26-2.el6_7                           updates                       29 k
 samba                                     x86_64                     3.6.23-30.el6_7                          updates                      5.1 M
 samba-client                              x86_64                     3.6.23-30.el6_7                          updates                       11 M
 samba-common                              x86_64                     3.6.23-30.el6_7                          updates                       10 M
 samba-winbind                             x86_64                     3.6.23-30.el6_7                          updates                      2.2 M
 samba-winbind-clients                     x86_64                     3.6.23-30.el6_7                          updates                      2.0 M
 tdb-tools                                 x86_64                     1.3.8-1.el6_7                            updates                       24 k
 tzdata                                    noarch                     2016d-1.el6                              updates                      451 k
Entfernen:
 kernel                                    x86_64                     2.6.32-573.12.1.el6                      @updates                     126 M

Vorgangsübersicht
==================================================================================================================================================
Install       1 Package(s)
Upgrade      12 Package(s)
Remove        1 Package(s)

Gesamte Downloadgrösse: 83 M


Best
Viribus unitis