I followed the Howto http://wiki.samba.org/index.php/Samba4/HOWTO Using: -Samba4 alpha15 -Bind9.8.0 When I added an XP PC (192.168.123.244) to my domain I got this in syslog: May 11 12:04:18 samba4 named[10705]: client 192.168.123.244#1061: update 'mydomain.com/IN' denied May 11 12:04:18 samba4 named[10705]: tkey.c:486: ENSURE(result == (((1) << 16) + 28) || result == 0) failed, back trace May 11 12:04:18 samba4 named[10705]: #0 0x805ac45 in assertion_failed()+0x45 May 11 12:04:18 samba4 named[10705]: #1 0x81c62f7 in isc_assertion_failed()+0x27 May 11 12:04:18 samba4 named[10705]: #2 0x81659ba in dns_tkey_processquery()+0x98a May 11 12:04:18 samba4 named[10705]: #3 0x80696ff in ns_query_start()+0x40f May 11 12:04:18 samba4 named[10705]: #4 0x8051d44 in client_request()+0xdc4 May 11 12:04:18 samba4 named[10705]: #5 0x81e270d in isc__taskmgr_dispatch()+0x17d May 11 12:04:18 samba4 named[10705]: #6 0x81e5e34 in evloop()+0x74 May 11 12:04:18 samba4 named[10705]: #7 0x81e60af in isc__app_ctxrun()+0x12f May 11 12:04:18 samba4 named[10705]: #8 0x81e6182 in isc__app_run()+0x12 May 11 12:04:18 samba4 named[10705]: #9 0x805bd56 in main()+0xc96 May 11 12:04:18 samba4 named[10705]: #10 0xb7d04455 in _fini()+0xafb0d6b9 May 11 12:04:18 samba4 named[10705]: #11 0x804bb61 in _start()+0x21 May 11 12:04:18 samba4 named[10705]: exiting (due to assertion failure) Any ideas?? Best regards, Felix.
did you compile bind with gssapi? my compile options with ubuntu are
this..Verify your pointing to the proper path when compiling for gssapi.
./configure --prefix=/usr/local/bind9 --with-gssapi=/usr/include/gssapi
verify that you have the proper environments in bind,,, I have this in
the init script..
KEYTAB_FILE="/usr/local/samba1/private/dns.keytab"
KRB5_KTNAME="/usr/local/samba1/private/dns.keytab"
export KEYTAB_FILE
export KRB5_KTNAME
and verify that the options are in named.conf properly.. CASE matters..
tkey-gssapi-credential "DNS/example.com";
tkey-domain "EXAMPLE.COM";
Verify all this and modify for your environment...
On 05/11/2011 12:15 PM, felix at epepm.cupet.cu wrote:>
> I followed the Howto http://wiki.samba.org/index.php/Samba4/HOWTO
>
> Using:
> -Samba4 alpha15
> -Bind9.8.0
>
> When I added an XP PC (192.168.123.244) to my domain I got this in syslog:
>
> May 11 12:04:18 samba4 named[10705]: client 192.168.123.244#1061: update
> 'mydomain.com/IN' denied
> May 11 12:04:18 samba4 named[10705]: tkey.c:486: ENSURE(result ==
(((1)<<
> 16) + 28) || result == 0) failed, back trace
> May 11 12:04:18 samba4 named[10705]: #0 0x805ac45 in
assertion_failed()+0x45
> May 11 12:04:18 samba4 named[10705]: #1 0x81c62f7 in
> isc_assertion_failed()+0x27
> May 11 12:04:18 samba4 named[10705]: #2 0x81659ba in
> dns_tkey_processquery()+0x98a
> May 11 12:04:18 samba4 named[10705]: #3 0x80696ff in ns_query_start()+0x40f
> May 11 12:04:18 samba4 named[10705]: #4 0x8051d44 in client_request()+0xdc4
> May 11 12:04:18 samba4 named[10705]: #5 0x81e270d in
> isc__taskmgr_dispatch()+0x17d
> May 11 12:04:18 samba4 named[10705]: #6 0x81e5e34 in evloop()+0x74
> May 11 12:04:18 samba4 named[10705]: #7 0x81e60af in
isc__app_ctxrun()+0x12f
> May 11 12:04:18 samba4 named[10705]: #8 0x81e6182 in isc__app_run()+0x12
> May 11 12:04:18 samba4 named[10705]: #9 0x805bd56 in main()+0xc96
> May 11 12:04:18 samba4 named[10705]: #10 0xb7d04455 in _fini()+0xafb0d6b9
> May 11 12:04:18 samba4 named[10705]: #11 0x804bb61 in _start()+0x21
> May 11 12:04:18 samba4 named[10705]: exiting (due to assertion failure)
>
>
> Any ideas??
>
> Best regards,
> Felix.
>
On 11/05/2011 20:15, felix at epepm.cupet.cu wrote:> I followed the Howto http://wiki.samba.org/index.php/Samba4/HOWTO > > Using: > -Samba4 alpha15 > -Bind9.8.0 > > When I added an XP PC (192.168.123.244) to my domain I got this in syslog: > > May 11 12:04:18 samba4 named[10705]: client 192.168.123.244#1061: update > 'mydomain.com/IN' denied > May 11 12:04:18 samba4 named[10705]: tkey.c:486: ENSURE(result == (((1)<< > 16) + 28) || result == 0) failed, back trace > May 11 12:04:18 samba4 named[10705]: #0 0x805ac45 in assertion_failed()+0x45 > May 11 12:04:18 samba4 named[10705]: #1 0x81c62f7 in > isc_assertion_failed()+0x27 > May 11 12:04:18 samba4 named[10705]: #2 0x81659ba in > dns_tkey_processquery()+0x98a > May 11 12:04:18 samba4 named[10705]: #3 0x80696ff in ns_query_start()+0x40f > May 11 12:04:18 samba4 named[10705]: #4 0x8051d44 in client_request()+0xdc4 > May 11 12:04:18 samba4 named[10705]: #5 0x81e270d in > isc__taskmgr_dispatch()+0x17d > May 11 12:04:18 samba4 named[10705]: #6 0x81e5e34 in evloop()+0x74 > May 11 12:04:18 samba4 named[10705]: #7 0x81e60af in isc__app_ctxrun()+0x12f > May 11 12:04:18 samba4 named[10705]: #8 0x81e6182 in isc__app_run()+0x12 > May 11 12:04:18 samba4 named[10705]: #9 0x805bd56 in main()+0xc96 > May 11 12:04:18 samba4 named[10705]: #10 0xb7d04455 in _fini()+0xafb0d6b9 > May 11 12:04:18 samba4 named[10705]: #11 0x804bb61 in _start()+0x21 > May 11 12:04:18 samba4 named[10705]: exiting (due to assertion failure) >Can you post your bind configuration ? Did you use the DLZ plugins for bind from samba ? Matthieu. -- Matthieu Patou Samba Team http://samba.org Private repo http://git.samba.org/?p=mat/samba.git;a=summary
Thanks a lot for your hint. I finally made it in Debian Lenny (with Samba4 alpha15 and Bind9.8.0) installing libkrb5-dev. My named.conf just has an include "/usr/local/samba/private/named.conf"; and there I also included the options, related to tkey, suggested in the HowTo. I would like to notice that I followed the recommendation from Bind source and I used the option tkey-gssapi-keytab instead of tkey-gssapi-credential and tkey-domain which I finally commented. Finally, I would like to know if I'll need a KDC, and if so, which one, MIT or Heimdal??? Best regards, Felix.> It looks like kerberos support installs the proper files, Check for the > packages listed below. This is Ubuntu Lucid, not sure how the names have > changed for your distribution. > > root at FILESRV1:/usr/include/mit-krb5# dpkg -S gssapi.h > libkrb5-dev: /usr/include/gssrpc/auth_gssapi.h > krb5-multidev: /usr/include/mit-krb5/gssapi/gssapi.h > libkrb5-dev: /usr/include/gssapi.h > libkrb5-dev: /usr/include/gssapi/gssapi.h > krb5-multidev: /usr/include/mit-krb5/gssapi.h > krb5-multidev: /usr/include/mit-krb5/gssrpc/auth_gssapi.h > > > On 05/11/2011 02:12 PM, felix at epepm.cupet.cu wrote: >> I'm trying to compile using --with-gssapi but I found gssapi.h in >> /usr/loca/include/dst/ and I used this path but the answer is gssapi.h >> not found??? >> I'm using Debian Lenny. >> I think this gssapi.h I have becomes from the previous installation of >> bind9 because I found that file in Bind9 source directory. >> My question is how can I install gssapi??? >> >> Best regards, >> Felix. >> >> >>> did you compile bind with gssapi? my compile options with ubuntu are >>> this..Verify your pointing to the proper path when compiling for >>> gssapi. >>> >>> ./configure --prefix=/usr/local/bind9 --with-gssapi=/usr/include/gssapi >>> >>> verify that you have the proper environments in bind,,, I have this in >>> the init script.. >>> >>> KEYTAB_FILE="/usr/local/samba1/private/dns.keytab" >>> KRB5_KTNAME="/usr/local/samba1/private/dns.keytab" >>> export KEYTAB_FILE >>> export KRB5_KTNAME >>> >>> and verify that the options are in named.conf properly.. CASE matters.. >>> tkey-gssapi-credential "DNS/example.com"; >>> tkey-domain "EXAMPLE.COM"; >>> >>> Verify all this and modify for your environment... >>> >>> On 05/11/2011 12:15 PM, felix at epepm.cupet.cu wrote: >>>> I followed the Howto http://wiki.samba.org/index.php/Samba4/HOWTO >>>> >>>> Using: >>>> -Samba4 alpha15 >>>> -Bind9.8.0 >>>> >>>> When I added an XP PC (192.168.123.244) to my domain I got this in >>>> syslog: >>>> >>>> May 11 12:04:18 samba4 named[10705]: client 192.168.123.244#1061: >>>> update >>>> 'mydomain.com/IN' denied >>>> May 11 12:04:18 samba4 named[10705]: tkey.c:486: ENSURE(result =>>>> (((1)<< >>>> 16) + 28) || result == 0) failed, back trace >>>> May 11 12:04:18 samba4 named[10705]: #0 0x805ac45 in >>>> assertion_failed()+0x45 >>>> May 11 12:04:18 samba4 named[10705]: #1 0x81c62f7 in >>>> isc_assertion_failed()+0x27 >>>> May 11 12:04:18 samba4 named[10705]: #2 0x81659ba in >>>> dns_tkey_processquery()+0x98a >>>> May 11 12:04:18 samba4 named[10705]: #3 0x80696ff in >>>> ns_query_start()+0x40f >>>> May 11 12:04:18 samba4 named[10705]: #4 0x8051d44 in >>>> client_request()+0xdc4 >>>> May 11 12:04:18 samba4 named[10705]: #5 0x81e270d in >>>> isc__taskmgr_dispatch()+0x17d >>>> May 11 12:04:18 samba4 named[10705]: #6 0x81e5e34 in evloop()+0x74 >>>> May 11 12:04:18 samba4 named[10705]: #7 0x81e60af in >>>> isc__app_ctxrun()+0x12f >>>> May 11 12:04:18 samba4 named[10705]: #8 0x81e6182 in >>>> isc__app_run()+0x12 >>>> May 11 12:04:18 samba4 named[10705]: #9 0x805bd56 in main()+0xc96 >>>> May 11 12:04:18 samba4 named[10705]: #10 0xb7d04455 in >>>> _fini()+0xafb0d6b9 >>>> May 11 12:04:18 samba4 named[10705]: #11 0x804bb61 in _start()+0x21 >>>> May 11 12:04:18 samba4 named[10705]: exiting (due to assertion >>>> failure) >>>> >>>> >>>> Any ideas?? >>>> >>>> Best regards, >>>> Felix. >>>> >>> -- >>> To unsubscribe from this list go to the following URL and read the >>> instructions: https://lists.samba.org/mailman/options/samba >>> >> > >