× Welcome to the Centrify Community! We are rolling out product name changes — click here to learn more.

adbindd is dying when using Centrify enabled Samba

Showing results for 
Search instead for 
Do you mean 
Reply
Participant II
Posts: 5
Registered: ‎10-18-2016
#1 of 13 2,875

adbindd is dying when using Centrify enabled Samba

I recently upgraded all of our servers to Ubuntu 16.04 and I'm using the Express version of Centrify Suite 2016 along with Centrify enabled Samba.  I'm noticing that after a few days, adbindd dies on our systems and I must restart centrifydc-samba in order to get Samba shares working again.  I can't find anything obvious in the logs as to why adbindd service stops, but it's happening on all servers with Ubuntu 16.04. 

 

A few days after restarting centrifydc-samba, users report not being able to connect to network shares.  When this happens I observe the following:

 

/etc/init.d/centrifydc-samba status
nmbd (pid 2298) is running...
winbindd (pid 2679 2348 2345 2318 2313) is running...
adbindd is stopped
smbd (pid 18973 18765 2689 2336 2329) is running...

 

Has anyone seen this behavior?

 

 

Here's some basic info:

 

adinfo -V

root@db-accu-1:/etc/init.d# adinfo -V
Options:
-------
task: all
domain: null
output: null
additional paths: null
user: null
using user's credential cache: No
allow password prompt in kerberos get init credential: Yes
user's credential cache: null
server: null
Local host name: db-accu-1
Joined to domain: ad.finrcvgrp.com
Joined as: db-accu-1.ad.finrcvgrp.com
Pre-win2K name: db-accu-1
Current DC: marge-backup.ad.finrcvgrp.com
Preferred site: Default-First-Site-Name
Zone: Auto Zone
Retrieving site information from site=any, server='marge-backup.ad.finrcvgrp.com'
Using machine credentials
Using principal name 'db-accu-1$@AD.FINRCVGRP.COM'
Binding to ad.finrcvgrp.com, cache=MEMORY:0xe86ac0
Searching for (&(samAccountName=db-accu-1$)(objectClass=computer))
in dc=AD,dc=FINRCVGRP,dc=COM
Found computer account: CN=db-accu-1,CN=Computers,DC=ad,DC=finrcvgrp,DC=com
Last password set: 2016-10-18 18:02:33 EDT
CentrifyDC mode: connected
Licensed Features: Disabled

 

adbindd -v
adbindd Version 1.1 (CentrifyDC-adbindproxy 5.3.0-504)

 

smbd -V
Version 4.3.11-Ubuntu

 

 

Centrify Guru I
Posts: 1,784
Registered: ‎07-26-2012
#2 of 13 2,868

Re: adbindd is dying when using Centrify enabled Samba

@user14672,

 

Welcome to the Centrify Express forums.

 

You may have a version mismatch. 

Ubuntu 16.04 support was added with 2016.1  (5.3.1) and you're running version 5.3.0

 

Make sure that both the base agent and adbindproxy are at the latest versions.  (5.3.1.x)

 

FYI on naming, back in the spring, due to the Badblock vulnerability and other complexities we immediately ended the distribution of Centrify-enhanced Samba.  The integration that you're referring to is the Identity Mapper only (adbindproxy). 

 

If after upgrade, the problem persists, please let us know.

 

Want to learn more about practical Centrify examples? Check out my blog at http://centrifying.blogspot.com
Follow Centrify:
Participant II
Posts: 5
Registered: ‎10-18-2016
#3 of 13 2,865

Re: adbindd is dying when using Centrify enabled Samba

Thank you for your reply.  I went to Centrify's web site to make sure I have the latest version.  The download files appear to be identical to what I already have. 

 

centrify-adbindproxy-5.3.0-deb6-x86_64.tgz
centrify-suite-2016.1-deb7-x86_64.tgz

 

 

Upon running the installer, I see this message:

 

With this script, you can perform the following tasks:
- Install, update or remove the Centrify DirectControl packages
- Check OS, network and Active Directory configuration
- Join an Active Directory domain
- Restart the local computer after installation

You can type Q at any prompt to quit the installation and exit
the script without making any changes to your environment.


Currently installed:
centrifydc-5.3.1
centrifydc-adbindproxy-5.3.0


CentrifyDC-5.3.1 is already installed. Do you want to erase it (E),
reinstall (R) 5.3.1 or keep (K) current CentrifyDC package? (Q|E|R|K) [K]:

 

If I am indeed one version back, I am at a loss as to how to upgrade.  I am using the Express version of Centrify and this seems to be the latest from the download section.

Centrify Guru I
Posts: 1,784
Registered: ‎07-26-2012
#4 of 13 2,863

Re: adbindd is dying when using Centrify enabled Samba

Check the rev versions with these commands:

  • adinfo -v
  • /usr/share/centrifydc/bin/adbindproxy -v

Note that you can use the native installer (dpkg) to install packages as well.  A revision to adbindproxy was released with 2016.1.

 

Want to learn more about practical Centrify examples? Check out my blog at http://centrifying.blogspot.com
Follow Centrify:
Participant II
Posts: 5
Registered: ‎10-18-2016
#5 of 13 2,859

Re: adbindd is dying when using Centrify enabled Samba

[ Edited ]

Thanks again for your help and patience.  I took your advice and installed the packages via dpkg.  Here is what I get now.

 

# adinfo -v
adinfo (CentrifyDC 5.3.1-398)

 

# ./adbindd -v
adbindd Version 1.1 (CentrifyDC-adbindproxy 5.3.0-504)

 

It doesn't appear that adbindd is any newer than what I had.  I'm not sure if I'm just not finding the updated package or what.  This was a fresh download as of this morning.

Centrify Guru I
Posts: 1,784
Registered: ‎07-26-2012
#6 of 13 2,854

Re: adbindd is dying when using Centrify enabled Samba

We did not add support for the OS version you referenced (Ubu 16.04) until late spring with version  5.3.1 (for the base AD client).

adbindd relies on the base agent.  If there were issues with the older agent and they were corrected with the newer one they may or may not have to do with the problem  you described.

 

We ruled-out  version inconsistency, let's see if the problems happen again, if not, then we'll have to do further troubleshooting.

Want to learn more about practical Centrify examples? Check out my blog at http://centrifying.blogspot.com
Follow Centrify:
Participant II
Posts: 2
Registered: ‎05-07-2015
#7 of 13 2,569

Re: adbindd is dying when using Centrify enabled Samba

Hi,

 

Is there any update on this issue? It also exists on Ubuntu 12.04 . I'm running exact the same version of Centrify DC and the bind proxy.

 

When I reboot the system adbindd starts OK but it fails to restart after a 'service centrifydc-samba restart'.

 

'service centrifydc-samba status' after a reboot:

nmbd (pid 1590) is running...
winbindd (pid 1692 1688 1681 1674 1628) is running...
adbindd (pid 1637) is running...
smbd (pid 1712 1697 1671 1670 1648) is running...

 

'service centrifydc-samba status' after a 'service centrifydc-samba restart':

nmbd (pid 4187) is running...
winbindd (pid 4215 4214 4212 4197 4193) is running...
adbindd is stopped
smbd (pid 4217 4210 4209 4207) is running...

 

Regards,

Sander Peterse

 

 

 

 

Centrify Guru I
Posts: 1,784
Registered: ‎07-26-2012
#8 of 13 2,566

Re: adbindd is dying when using Centrify enabled Samba

Why is Winbindd running?

 

If this is a Centrified environment, the IDMapper should be only adbindproxy.

Want to learn more about practical Centrify examples? Check out my blog at http://centrifying.blogspot.com
Follow Centrify:
Participant II
Posts: 5
Registered: ‎10-18-2016
#9 of 13 2,563

Re: adbindd is dying when using Centrify enabled Samba

winbindd runs on all my systems as well.  I didn't do anything intentional to install/start it.  Could that be interfering with adbindd in some way?

Participant II
Posts: 2
Registered: ‎05-07-2015
#10 of 13 2,518

Re: adbindd is dying when using Centrify enabled Samba

Are you sure that winbindd shouldn't be running?

 

I checked several of our systems and it's running on all of them. The other system run (fine) on older version of Centrify.

 

Output latest version (adbindd is dead):

# ps aux | grep winb
root 1628 0.0 0.2 283452 6396 ? Ss Nov29 0:01 /usr/local/samba/sbin/winbindd -s /etc/centrifydc/smb2.conf
root 1674 0.0 0.2 316784 6836 ? S Nov29 0:00 /usr/local/samba/sbin/winbindd -s /etc/centrifydc/smb2.conf
root 1681 0.0 0.2 315936 6976 ? S Nov29 0:00 /usr/local/samba/sbin/winbindd -s /etc/centrifydc/smb2.conf
root 1688 0.0 0.1 284280 4848 ? S Nov29 0:00 /usr/local/samba/sbin/winbindd -s /etc/centrifydc/smb2.conf
root 1692 0.0 0.1 274940 3392 ? S Nov29 0:00 /usr/local/samba/sbin/winbindd -s /etc/centrifydc/smb2.conf

# ps aux | grep adb

- no process -

 

Output on older system (running fine):

# ps aux | grep winb
root 9827 0.0 0.0 71052 2532 ? Ss Oct24 0:43 /opt/centrify/samba/sbin/winbindd -s /etc/centrifydc/smb2.conf
root 9831 0.0 0.0 75352 6140 ? S Oct24 7:21 /opt/centrify/samba/sbin/winbindd -s /etc/centrifydc/smb2.conf
root 23353 0.0 0.0 70984 1900 ? S Oct24 0:03 /opt/centrify/samba/sbin/winbindd -s /etc/centrifydc/smb2.conf

# ps aux | grep adb
root 9834 0.4 0.0 1803480 2980 ? Ssl Oct24 245:41 /usr/share/centrifydc/sbin/adbindd