Michael Joy
2009-Dec-30 21:31 UTC
[Samba] Samba4 A11 Provision Fails on 389-DS - Fedora 12
Following the instructions here (
http://wiki.samba.org/index.php/Samba4/LDAP_Backend/Fedora_DS_1.2.3), I got
to the DS provisioning step and encountered an error trying to provision the
389-DS (v1.2.3 B2009.280.1622).
The source was checked out around 12/30/2009 ~16:00 GMT following the
instructions provided in the 'howto'. I have made sure that
system.domain-test.local is listed in the hosts file for 127.0.0.1 so it
responds if you try to ping system.domain-test.local. This is on a
completely fresh install of Fedora 12 x86_64 (latest updates installed) with
just the software development group installed, nothing else besides what's
listed in the howto. I didn't notice any failures in the compile, only
WARNS. Any ideas as to what failed here and how to fix it? I'm setting up a
local test bed in a cluster of ESXi 4u1 servers with a private network for
performance testing. The DS is indeed running after this is run as you get
a:
"File "bin/python/samba/provisionbackend.py", line 183, in init
raise ProvisioningError("Warning: Another slapd Instance seems already
running on this host, listening to " + self.ldapi_uri + ". Please shut
it
down before you continue. ")
"
If you attempt to run the script again. If you stop the DS and try again,
the same error occurs as listed below:
[root at System source4]# setup/provision --host-name=System --root=root
--domain=DOMAIN-TEST --realm=DOMAIN-TEST.LOCAL --server-role="domain
controller" --ldap-backend-type=fedora-ds --slapd-path=/usr/sbin/ns-slapd
--setup-ds-path=/usr/sbin/setup-ds.pl
Administrator password will be set randomly!
Converted 58 records with 0 failures
Warning: using root as the server user id. You are strongly encouraged to
use a non-root user.
Your new DS instance 'samba4' was successfully created.
Exiting . . .
Log file is '/tmp/setupP3h9pd.log'
importing data ...
[30/Dec/2009:15:12:43 -0600] - Information: Non-Secure Port Disabled
[30/Dec/2009:15:12:43 -0600] - Backend Instance: sambaData
[30/Dec/2009:15:12:43 -0600] - dblayer_instance_start: pagesize: 4096,
pages: 2049500, procpages: 47759
[30/Dec/2009:15:12:43 -0600] - cache autosizing: import cache: 204800k
[30/Dec/2009:15:12:43 -0600] - li_import_cache_autosize: 50, import_pages:
51200, pagesize: 4096
[30/Dec/2009:15:12:43 -0600] - WARNING: Import is running with
nsslapd-db-private-import-mem on; No other process is allowed to access the
database
[30/Dec/2009:15:12:43 -0600] - dblayer_instance_start: pagesize: 4096,
pages: 2049500, procpages: 47759
[30/Dec/2009:15:12:43 -0600] - cache autosizing: import cache: 204800k
[30/Dec/2009:15:12:43 -0600] - li_import_cache_autosize: 50, import_pages:
51200, pagesize: 4096
[30/Dec/2009:15:12:43 -0600] - import sambaData: Beginning import job...
[30/Dec/2009:15:12:43 -0600] - import sambaData: Index buffering enabled
with bucket size 100
[30/Dec/2009:15:12:43 -0600] - import sambaData: Processing file
"/usr/local/samba/private/ldap/fedorads-samba.ldif"
[30/Dec/2009:15:12:43 -0600] - import sambaData: Finished scanning file
"/usr/local/samba/private/ldap/fedorads-samba.ldif" (4 entries)
[30/Dec/2009:15:12:44 -0600] - import sambaData: Workers finished; cleaning
up...
[30/Dec/2009:15:12:44 -0600] - import sambaData: Workers cleaned up.
[30/Dec/2009:15:12:44 -0600] - import sambaData: Cleaning up producer
thread...
[30/Dec/2009:15:12:44 -0600] - import sambaData: Indexing complete.
Post-processing...
[30/Dec/2009:15:12:44 -0600] - import sambaData: Flushing caches...
[30/Dec/2009:15:12:44 -0600] - import sambaData: Closing files...
[30/Dec/2009:15:12:44 -0600] - All database threads now stopped
[30/Dec/2009:15:12:44 -0600] - import sambaData: Import complete. Processed
4 entries in 1 seconds. (4.00 entries/sec)
Failed to bind - LDAP client internal error:
NT_STATUS_UNEXPECTED_NETWORK_ERROR
Failed to connect to
'ldapi://%2Fusr%2Flocal%2Fsamba%2Fprivate%2Fldap%2Fldapi'
[30/Dec/2009:15:12:44 -0600] - Information: Non-Secure Port Disabled
[30/Dec/2009:15:12:44 -0600] - 389-Directory/1.2.3 B2009.280.1622 starting
up
[30/Dec/2009:15:12:44 -0600] - I'm resizing my cache now...cache was
209715200 and is now 8000000
Failed to bind - LDAP client internal error:
NT_STATUS_UNEXPECTED_NETWORK_ERROR
Failed to connect to
'ldapi://%2Fusr%2Flocal%2Fsamba%2Fprivate%2Fldap%2Fldapi'
[30/Dec/2009:15:12:45 -0600] - Listening on
/usr/local/samba/private/ldap/ldapi for LDAPI requests
Setting up secrets.ldb
Setting up the registry
Setting up the privileges database
Setting up idmap db
Setting up SAM db
Setting up sam.ldb partitions and settings
Setting up sam.ldb rootDSE
Pre-loading the Samba 4 and AD schema
Adding DomainDN: DC=domain-test,DC=local
pdc_fsmo_init: no domain object present: (skip loading of domain details)
Traceback (most recent call last):
File "setup/provision", line 222, in <module>
nosync=opts.nosync,ldap_dryrun_mode=opts.ldap_dryrun_mode)
File "bin/python/samba/provision.py", line 1235, in provision
dom_for_fun_level=dom_for_fun_level)
File "bin/python/samba/provision.py", line 929, in setup_samdb
"SAMBA_VERSION_STRING": version
File "bin/python/samba/provision.py", line 265, in setup_modify_ldif
ldb.modify_ldif(data)
File "bin/python/samba/__init__.py", line 259, in modify_ldif
self.modify(msg, controls)
_ldb.LdbError: (1, 'LDAP client internal error:
NT_STATUS_INTERNAL_ERROR')
A transaction is still active in ldb context [0x3057ee0] on
/usr/local/samba/private/secrets.ldb
-----
I would really like to find out what's blocking this so I can get a bit
further down the road on this test lab. Any ideas? I'm all ears.
Thanks in advanced to the kind soul who lends their input.
Michael Joy
2010-Jan-08 19:16 UTC
[Samba] Samba4 A11 Provision Fails on 389-DS - Fedora 12
Following the instructions here (
http://wiki.samba.org/index.php/Samba4/LDAP_Backend/Fedora_DS_1.2.3), I got
to the DS provisioning step and encountered an error trying to provision the
389-DS (v1.2.3 B2009.280.1622).
The source was checked out around 12/30/2009 ~16:00 GMT following the
instructions provided in the 'howto'. I have made sure that
system.domain-test.local is listed in the hosts file for 127.0.0.1 so it
responds if you try to ping system.domain-test.local. This is on a
completely fresh install of Fedora 12 x86_64 (latest updates installed) with
just the software development group installed, nothing else besides what's
listed in the howto. I didn't notice any failures in the compile, only
WARNS. Any ideas as to what failed here and how to fix it? I'm setting up a
local test bed in a cluster of ESXi 4u1 servers with a private network for
performance testing. The DS is indeed running after this is run as you get
a:
"File "bin/python/samba/provisionbackend.py", line 183, in init
raise ProvisioningError("Warning: Another slapd Instance seems already
running on this host, listening to " + self.ldapi_uri + ". Please shut
it
down before you continue. ")
"
If you attempt to run the script again. If you stop the DS and try again,
the same error occurs as listed below:
[root at System source4]# setup/provision --host-name=System --root=root
--domain=DOMAIN-TEST --realm=DOMAIN-TEST.LOCAL --server-role="domain
controller" --ldap-backend-type=fedora-ds --slapd-path=/usr/sbin/ns-slapd
--setup-ds-path=/usr/sbin/setup-ds.pl
Administrator password will be set randomly!
Converted 58 records with 0 failures
Warning: using root as the server user id. You are strongly encouraged to
use a non-root user.
Your new DS instance 'samba4' was successfully created.
Exiting . . .
Log file is '/tmp/setupP3h9pd.log'
importing data ...
[30/Dec/2009:15:12:43 -0600] - Information: Non-Secure Port Disabled
[30/Dec/2009:15:12:43 -0600] - Backend Instance: sambaData
[30/Dec/2009:15:12:43 -0600] - dblayer_instance_start: pagesize: 4096,
pages: 2049500, procpages: 47759
[30/Dec/2009:15:12:43 -0600] - cache autosizing: import cache: 204800k
[30/Dec/2009:15:12:43 -0600] - li_import_cache_autosize: 50, import_pages:
51200, pagesize: 4096
[30/Dec/2009:15:12:43 -0600] - WARNING: Import is running with
nsslapd-db-private-import-mem on; No other process is allowed to access the
database
[30/Dec/2009:15:12:43 -0600] - dblayer_instance_start: pagesize: 4096,
pages: 2049500, procpages: 47759
[30/Dec/2009:15:12:43 -0600] - cache autosizing: import cache: 204800k
[30/Dec/2009:15:12:43 -0600] - li_import_cache_autosize: 50, import_pages:
51200, pagesize: 4096
[30/Dec/2009:15:12:43 -0600] - import sambaData: Beginning import job...
[30/Dec/2009:15:12:43 -0600] - import sambaData: Index buffering enabled
with bucket size 100
[30/Dec/2009:15:12:43 -0600] - import sambaData: Processing file
"/usr/local/samba/private/ldap/fedorads-samba.ldif"
[30/Dec/2009:15:12:43 -0600] - import sambaData: Finished scanning file
"/usr/local/samba/private/ldap/fedorads-samba.ldif" (4 entries)
[30/Dec/2009:15:12:44 -0600] - import sambaData: Workers finished; cleaning
up...
[30/Dec/2009:15:12:44 -0600] - import sambaData: Workers cleaned up.
[30/Dec/2009:15:12:44 -0600] - import sambaData: Cleaning up producer
thread...
[30/Dec/2009:15:12:44 -0600] - import sambaData: Indexing complete.
Post-processing...
[30/Dec/2009:15:12:44 -0600] - import sambaData: Flushing caches...
[30/Dec/2009:15:12:44 -0600] - import sambaData: Closing files...
[30/Dec/2009:15:12:44 -0600] - All database threads now stopped
[30/Dec/2009:15:12:44 -0600] - import sambaData: Import complete. Processed
4 entries in 1 seconds. (4.00 entries/sec)
Failed to bind - LDAP client internal error:
NT_STATUS_UNEXPECTED_NETWORK_ERROR
Failed to connect to
'ldapi://%2Fusr%2Flocal%2Fsamba%2Fprivate%2Fldap%2Fldapi'
[30/Dec/2009:15:12:44 -0600] - Information: Non-Secure Port Disabled
[30/Dec/2009:15:12:44 -0600] - 389-Directory/1.2.3 B2009.280.1622 starting
up
[30/Dec/2009:15:12:44 -0600] - I'm resizing my cache now...cache was
209715200 and is now 8000000
Failed to bind - LDAP client internal error:
NT_STATUS_UNEXPECTED_NETWORK_ERROR
Failed to connect to
'ldapi://%2Fusr%2Flocal%2Fsamba%2Fprivate%2Fldap%2Fldapi'
[30/Dec/2009:15:12:45 -0600] - Listening on
/usr/local/samba/private/ldap/ldapi for LDAPI requests
Setting up secrets.ldb
Setting up the registry
Setting up the privileges database
Setting up idmap db
Setting up SAM db
Setting up sam.ldb partitions and settings
Setting up sam.ldb rootDSE
Pre-loading the Samba 4 and AD schema
Adding DomainDN: DC=domain-test,DC=local
pdc_fsmo_init: no domain object present: (skip loading of domain details)
Traceback (most recent call last):
File "setup/provision", line 222, in <module>
nosync=opts.nosync,ldap_dryrun_mode=opts.ldap_dryrun_mode)
File "bin/python/samba/provision.py", line 1235, in provision
dom_for_fun_level=dom_for_fun_level)
File "bin/python/samba/provision.py", line 929, in setup_samdb
"SAMBA_VERSION_STRING": version
File "bin/python/samba/provision.py", line 265, in setup_modify_ldif
ldb.modify_ldif(data)
File "bin/python/samba/__init__.py", line 259, in modify_ldif
self.modify(msg, controls)
_ldb.LdbError: (1, 'LDAP client internal error:
NT_STATUS_INTERNAL_ERROR')
A transaction is still active in ldb context [0x3057ee0] on
/usr/local/samba/private/secrets.ldb
-----
I would really like to find out what's blocking this so I can get a bit
further down the road on this test lab. Any ideas? I'm all ears.
Thanks in advanced to the kind soul who lends their input.
Possibly Parallel Threads
- Provision script fails with Samba4 (latest git version)
- Unable to provision with openldap/samba4: pdc_fsmo_init: no domain object present
- INFO Request: Samba PDC, Windows NT4 Style, Failure to Add Trusted Machine
- samba4 + openldap: provisioning isnt working
- Samba4 + existing OpenLDAP possible?