thr3ads.net - samba - [Samba] samba-tool illegal instruction setting up Kerberos auth for http [Mar 2014]

If this information is useful, please help other people find it:
Share via:

Stuart Longland

2014-Mar-18 08:00 UTC

[Samba] samba-tool illegal instruction setting up Kerberos auth for http

Hi all,

Has anyone noticed this behaviour in samba-tool?  I was trying to do the
Apache Single Sign on authentication:

https://wiki.samba.org/index.php/Authenticating_other_services_against_AD#Apache_Single_Sign-On
> root at bnedevdc0:~# samba-tool domain exportkeytab /root/httpd.keytab
--principal=HTTP/svn.myrealm.mydomain at MYREALM.MYDOMAIN -d10
> INFO: Current debug levels:
>   all: 10
>   tdb: 10
>   printdrivers: 10
>   lanman: 10
>   smb: 10
>   rpc_parse: 10
>   rpc_srv: 10
>   rpc_cli: 10
>   passdb: 10
>   sam: 10
>   auth: 10
>   winbind: 10
>   vfs: 10
>   idmap: 10
>   quota: 10
>   acls: 10
>   locking: 10
>   msdfs: 10
>   dmapi: 10
>   registry: 10
>   scavenger: 10
>   dns: 10
>   ldb: 10
> lpcfg_load: refreshing parameters from /etc/samba/smb.conf
> params.c:pm_process() - Processing configuration file
"/etc/samba/smb.conf"
> Processing section "[global]"
> Processing section "[netlogon]"
> Processing section "[sysvol]"
> pm_process() returned Yes
> GENSEC backend 'gssapi_spnego' registered
> GENSEC backend 'gssapi_krb5' registered
> GENSEC backend 'gssapi_krb5_sasl' registered
> GENSEC backend 'schannel' registered
> GENSEC backend 'spnego' registered
> GENSEC backend 'ntlmssp' registered
> GENSEC backend 'krb5' registered
> GENSEC backend 'fake_gssapi_krb5' registered
> added interface eth0 ip=10.20.30.4 bcast=10.20.30.255 netmask=255.255.255.0
> added interface eth0 ip=10.20.30.4 bcast=10.20.30.255 netmask=255.255.255.0
> Illegal instruction
> root at bnedevdc0:~# dmesg
> [102985.769109] traps: samba-tool[11436] trap invalid opcode
ip:7f3e6df228de sp:7fffdb366718 error:0 in libHDB_SAMBA4.so.0[7f3e6df21000+2000]
> [103313.833497] traps: samba-tool[11780] trap invalid opcode
ip:7f103c9158de sp:7fffd8573db8 error:0 in libHDB_SAMBA4.so.0[7f103c914000+2000]
> [103426.961682] traps: samba-tool[11899] trap invalid opcode
ip:7f6d0c55a8de sp:7fff7fdc02d8 error:0 in libHDB_SAMBA4.so.0[7f6d0c559000+2000]
> root at bnedevdc0:~# samba-tool --version
> 4.1.3-Ubuntu
> root at bnedevdc0:~# dpkg -l samba*
> Desired=Unknown/Install/Remove/Purge/Hold
> |
Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
> |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
> ||/ Name                    Version          Architecture     Description
>
+++-=======================-================-================-===================================================>
ii  samba                   2:4.1.3+dfsg-2ub amd64            SMB/CIFS file,
print, and login server for Unix
> un  samba-ad-dc             <none>           <none>          
(no description available)
> un  samba-client            <none>           <none>          
(no description available)
> ii  samba-common            2:4.1.3+dfsg-2ub all              common files
used by both the Samba server and clien
> ii  samba-common-bin        2:4.1.3+dfsg-2ub amd64            Samba common
files used by both the server and the c
> un  samba-doc               <none>           <none>          
(no description available)
> ii  samba-dsdb-modules      2:4.1.3+dfsg-2ub amd64            Samba
Directory Services Database
> ii  samba-libs:amd64        2:4.1.3+dfsg-2ub amd64            Samba core
libraries
> un  samba-tools             <none>           <none>          
(no description available)
> ii  samba-vfs-modules       2:4.1.3+dfsg-2ub amd64            Samba Virtual
FileSystem plugins
> ii  samba4                  4.0.3+dfsg1-0.1u amd64            dummy
transitional package for samba 4.x series
> un  samba4-clients          <none>           <none>          
(no description available)
> un  samba4-common           <none>           <none>          
(no description available)
> un  samba4-common-bin       <none>           <none>          
(no description available)
Anyone else seen this?

Regards,
-- 
Stuart Longland
Systems Engineer
     _ ___
\  /|_) |                           T: +61 7 3535 9619
 \/ | \ |     38b Douglas Street    F: +61 7 3535 9699
   SYSTEMS    Milton QLD 4064       http://www.vrt.com.au

Rowland Penny

2014-Mar-18 10:06 UTC

head link

[Samba] samba-tool illegal instruction setting up Kerberos auth for http

On 18/03/14 08:00, Stuart Longland wrote:> Hi all,
>
> Has anyone noticed this behaviour in samba-tool?  I was trying to do the
> Apache Single Sign on authentication:
>
>
https://wiki.samba.org/index.php/Authenticating_other_services_against_AD#Apache_Single_Sign-On
>
>> root at bnedevdc0:~# samba-tool domain exportkeytab /root/httpd.keytab
--principal=HTTP/svn.myrealm.mydomain at MYREALM.MYDOMAIN -d10
>> INFO: Current debug levels:
>>    all: 10
>>    tdb: 10
>>    printdrivers: 10
>>    lanman: 10
>>    smb: 10
>>    rpc_parse: 10
>>    rpc_srv: 10
>>    rpc_cli: 10
>>    passdb: 10
>>    sam: 10
>>    auth: 10
>>    winbind: 10
>>    vfs: 10
>>    idmap: 10
>>    quota: 10
>>    acls: 10
>>    locking: 10
>>    msdfs: 10
>>    dmapi: 10
>>    registry: 10
>>    scavenger: 10
>>    dns: 10
>>    ldb: 10
>> lpcfg_load: refreshing parameters from /etc/samba/smb.conf
>> params.c:pm_process() - Processing configuration file
"/etc/samba/smb.conf"
>> Processing section "[global]"
>> Processing section "[netlogon]"
>> Processing section "[sysvol]"
>> pm_process() returned Yes
>> GENSEC backend 'gssapi_spnego' registered
>> GENSEC backend 'gssapi_krb5' registered
>> GENSEC backend 'gssapi_krb5_sasl' registered
>> GENSEC backend 'schannel' registered
>> GENSEC backend 'spnego' registered
>> GENSEC backend 'ntlmssp' registered
>> GENSEC backend 'krb5' registered
>> GENSEC backend 'fake_gssapi_krb5' registered
>> added interface eth0 ip=10.20.30.4 bcast=10.20.30.255
netmask=255.255.255.0
>> added interface eth0 ip=10.20.30.4 bcast=10.20.30.255
netmask=255.255.255.0
>> Illegal instruction
>> root at bnedevdc0:~# dmesg
>> [102985.769109] traps: samba-tool[11436] trap invalid opcode
ip:7f3e6df228de sp:7fffdb366718 error:0 in libHDB_SAMBA4.so.0[7f3e6df21000+2000]
>> [103313.833497] traps: samba-tool[11780] trap invalid opcode
ip:7f103c9158de sp:7fffd8573db8 error:0 in libHDB_SAMBA4.so.0[7f103c914000+2000]
>> [103426.961682] traps: samba-tool[11899] trap invalid opcode
ip:7f6d0c55a8de sp:7fff7fdc02d8 error:0 in libHDB_SAMBA4.so.0[7f6d0c559000+2000]
>> root at bnedevdc0:~# samba-tool --version
>> 4.1.3-Ubuntu
>> root at bnedevdc0:~# dpkg -l samba*
>> Desired=Unknown/Install/Remove/Purge/Hold
>> |
Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
>> |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
>> ||/ Name                    Version          Architecture    
Description
>>
+++-=======================-================-================-===================================================>>
ii  samba                   2:4.1.3+dfsg-2ub amd64            SMB/CIFS file,
print, and login server for Unix
>> un  samba-ad-dc             <none>           <none>        
(no description available)
>> un  samba-client            <none>           <none>        
(no description available)
>> ii  samba-common            2:4.1.3+dfsg-2ub all              common
files used by both the Samba server and clien
>> ii  samba-common-bin        2:4.1.3+dfsg-2ub amd64            Samba
common files used by both the server and the c
>> un  samba-doc               <none>           <none>        
(no description available)
>> ii  samba-dsdb-modules      2:4.1.3+dfsg-2ub amd64            Samba
Directory Services Database
>> ii  samba-libs:amd64        2:4.1.3+dfsg-2ub amd64            Samba
core libraries
>> un  samba-tools             <none>           <none>        
(no description available)
>> ii  samba-vfs-modules       2:4.1.3+dfsg-2ub amd64            Samba
Virtual FileSystem plugins
>> ii  samba4                  4.0.3+dfsg1-0.1u amd64            dummy
transitional package for samba 4.x series
>> un  samba4-clients          <none>           <none>        
(no description available)
>> un  samba4-common           <none>           <none>        
(no description available)
>> un  samba4-common-bin       <none>           <none>        
(no description available)
> Anyone else seen this?
>
> Regards,Hi, is this on Ubuntu 14.04 by any chance? if so, I have an open bug on 
this at Ubuntu (bug 1289318). Debian had problems with samba version 
4.1.3, these had something to do with building against the wrong libs. A 
fix was found and added to version 4.1.4, this made it into Jessie 
before Ubuntu upgraded the samba package in 14.04, but Ubuntu still went 
with 4.1.3 and supposedly backported the fix, only it does not seem to 
have worked :-)

The only fix that I have found (and bear in mind, that I was only 
testing) is to download the latest 'testing' packages and install them.

Rowland

L.P.H. van Belle

2014-Mar-18 10:18 UTC

head link

[Samba] samba-tool illegal instruction setting up Kerberos auth for http

There are mixed packages. 
ii  samba-common            2:4.1.3+dfsg-2ub all             
ii  samba4                  4.0.3+dfsg1-0.1u amd64            dummy transitional
package for samba 4.x series

i advice, remove all of samba, and reinstall it. 
Dont purge, you keep you settings and data. 

im guessing this is a mix of the ubuntu packages, old and new. 

look with "apt-cache policy" for all you policies on your repo's

if you see samba4 remove them, and keep away of it. ( wrong/old packages. ) 

here some examples, if you need help setting up a "correct" apt, just
mail me.


Debian Wheezy 
apt-cache policy samba
samba:
  Installed: 2:3.6.6-6+deb7u2
  Candidate: 2:3.6.6-6+deb7u2
  Version table:
     2:4.1.5+dfsg-1~bpo70+1 0
        100 http://ftp.nl.debian.org/debian/ wheezy-backports/main amd64
Packages
 *** 2:3.6.6-6+deb7u2 0
        500 http://ftp.nl.debian.org/debian/ wheezy/main amd64 Packages
        500 http://security.debian.org/ wheezy/updates/main amd64 Packages
        100 /var/lib/dpkg/status

Ubuntu 12.04 LTS 
apt-cache policy samba
samba:
  Installed: (none)
  Candidate: 99:4.1.6-7
  Version table:
     99:4.1.6-7 0
        500 https://download.sernet.de/packages/samba/4.1/ubuntu/ precise/main
amd64 Packages
     99:4.0.16-8 0
        500 https://download.sernet.de/packages/samba/4.0/ubuntu/ precise/main
amd64 Packages
     2:3.6.3-2ubuntu2.9 0
        500 http://nl.archive.ubuntu.com/ubuntu/ precise-updates/main amd64
Packages
        500 http://security.ubuntu.com/ubuntu/ precise-security/main amd64
Packages
     2:3.6.3-2ubuntu2 0
        500 http://nl.archive.ubuntu.com/ubuntu/ precise/main amd64 Packages


apt-cache policy samba
samba:
  Installed: 2:4.1.6+dfsg-1
  Candidate: 2:4.1.6+dfsg-1
  Version table:
 *** 2:4.1.6+dfsg-1 0
        500 http://mypersonal.apt.repo/debian/wheezy/amd64/  Packages
        100 /var/lib/dpkg/status
     2:4.1.5+dfsg-1~bpo70+1 0
        300 http://ftp.nl.debian.org/debian/ wheezy-backports/main amd64
Packages
     2:3.6.6-6+deb7u2 0
        500 http://ftp.nl.debian.org/debian/ wheezy/main amd64 Packages
        500 http://security.debian.org/ wheezy/updates/main amd64 Packages


>-----Oorspronkelijk bericht-----
>Van: rowlandpenny at googlemail.com 
>[mailto:samba-bounces at lists.samba.org] Namens Rowland Penny
>Verzonden: dinsdag 18 maart 2014 11:07
>Aan: samba at lists.samba.org
>Onderwerp: Re: [Samba] samba-tool illegal instruction setting 
>up Kerberos auth for http
>
>On 18/03/14 08:00, Stuart Longland wrote:
>> Hi all,
>>
>> Has anyone noticed this behaviour in samba-tool?  I was 
>trying to do the
>> Apache Single Sign on authentication:
>>
>> 
>https://wiki.samba.org/index.php/Authenticating_other_services_
>against_AD#Apache_Single_Sign-On
>>
>>> root at bnedevdc0:~# samba-tool domain exportkeytab 
>/root/httpd.keytab 
>--principal=HTTP/svn.myrealm.mydomain at MYREALM.MYDOMAIN -d10
>>> INFO: Current debug levels:
>>>    all: 10
>>>    tdb: 10
>>>    printdrivers: 10
>>>    lanman: 10
>>>    smb: 10
>>>    rpc_parse: 10
>>>    rpc_srv: 10
>>>    rpc_cli: 10
>>>    passdb: 10
>>>    sam: 10
>>>    auth: 10
>>>    winbind: 10
>>>    vfs: 10
>>>    idmap: 10
>>>    quota: 10
>>>    acls: 10
>>>    locking: 10
>>>    msdfs: 10
>>>    dmapi: 10
>>>    registry: 10
>>>    scavenger: 10
>>>    dns: 10
>>>    ldb: 10
>>> lpcfg_load: refreshing parameters from /etc/samba/smb.conf
>>> params.c:pm_process() - Processing configuration file 
>"/etc/samba/smb.conf"
>>> Processing section "[global]"
>>> Processing section "[netlogon]"
>>> Processing section "[sysvol]"
>>> pm_process() returned Yes
>>> GENSEC backend 'gssapi_spnego' registered
>>> GENSEC backend 'gssapi_krb5' registered
>>> GENSEC backend 'gssapi_krb5_sasl' registered
>>> GENSEC backend 'schannel' registered
>>> GENSEC backend 'spnego' registered
>>> GENSEC backend 'ntlmssp' registered
>>> GENSEC backend 'krb5' registered
>>> GENSEC backend 'fake_gssapi_krb5' registered
>>> added interface eth0 ip=10.20.30.4 bcast=10.20.30.255 
>netmask=255.255.255.0
>>> added interface eth0 ip=10.20.30.4 bcast=10.20.30.255 
>netmask=255.255.255.0
>>> Illegal instruction
>>> root at bnedevdc0:~# dmesg
>>> [102985.769109] traps: samba-tool[11436] trap invalid 
>opcode ip:7f3e6df228de sp:7fffdb366718 error:0 in 
>libHDB_SAMBA4.so.0[7f3e6df21000+2000]
>>> [103313.833497] traps: samba-tool[11780] trap invalid 
>opcode ip:7f103c9158de sp:7fffd8573db8 error:0 in 
>libHDB_SAMBA4.so.0[7f103c914000+2000]
>>> [103426.961682] traps: samba-tool[11899] trap invalid 
>opcode ip:7f6d0c55a8de sp:7fff7fdc02d8 error:0 in 
>libHDB_SAMBA4.so.0[7f6d0c559000+2000]
>>> root at bnedevdc0:~# samba-tool --version
>>> 4.1.3-Ubuntu
>>> root at bnedevdc0:~# dpkg -l samba*
>>> Desired=Unknown/Install/Remove/Purge/Hold
>>> | 
>Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aW
>ait/Trig-pend
>>> |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
>>> ||/ Name                    Version          Architecture   
>  Description
>>> 
>+++-=======================-================-================->==================================================>>>
ii  samba                   2:4.1.3+dfsg-2ub amd64
>  SMB/CIFS file, print, and login server for Unix
>>> un  samba-ad-dc             <none>           <none>
>  (no description available)
>>> un  samba-client            <none>           <none>
>  (no description available)
>>> ii  samba-common            2:4.1.3+dfsg-2ub all            
>  common files used by both the Samba server and clien
>>> ii  samba-common-bin        2:4.1.3+dfsg-2ub amd64          
>  Samba common files used by both the server and the c
>>> un  samba-doc               <none>           <none>
>  (no description available)
>>> ii  samba-dsdb-modules      2:4.1.3+dfsg-2ub amd64          
>  Samba Directory Services Database
>>> ii  samba-libs:amd64        2:4.1.3+dfsg-2ub amd64          
>  Samba core libraries
>>> un  samba-tools             <none>           <none>
>  (no description available)
>>> ii  samba-vfs-modules       2:4.1.3+dfsg-2ub amd64          
>  Samba Virtual FileSystem plugins
>>> ii  samba4                  4.0.3+dfsg1-0.1u amd64          
>  dummy transitional package for samba 4.x series
>>> un  samba4-clients          <none>           <none>
>  (no description available)
>>> un  samba4-common           <none>           <none>
>  (no description available)
>>> un  samba4-common-bin       <none>           <none>
>  (no description available)
>> Anyone else seen this?
>>
>> Regards,
>Hi, is this on Ubuntu 14.04 by any chance? if so, I have an 
>open bug on 
>this at Ubuntu (bug 1289318). Debian had problems with samba version 
>4.1.3, these had something to do with building against the 
>wrong libs. A 
>fix was found and added to version 4.1.4, this made it into Jessie 
>before Ubuntu upgraded the samba package in 14.04, but Ubuntu 
>still went 
>with 4.1.3 and supposedly backported the fix, only it does not seem to 
>have worked :-)
>
>The only fix that I have found (and bear in mind, that I was only 
>testing) is to download the latest 'testing' packages and install
them.
>
>Rowland
>
>
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba
>
>

Apparently Analagous Threads

Search for more apparently analagous threads

samba - Mar 2014 - samba-tool illegal instruction setting up Kerberos auth for http

[Samba] samba-tool illegal instruction setting up Kerberos auth for http

[Samba] samba-tool illegal instruction setting up Kerberos auth for http

[Samba] samba-tool illegal instruction setting up Kerberos auth for http

Apparently Analagous Threads