samba - Feb 2017 - samba-tool domain classicupgrade smb_krb5_context_init_basic failed (Invalid argument)

On 07/02/17 17:01, Andrew Bartlett via samba wrote:
> On Tue, 2017-02-07 at 15:58 +1100, Tom Robinson via samba wrote:
>> Hi,
>> \
>> Next rid = 13001
>> krb5_init_context failed (Invalid argument)
>> smb_krb5_context_init_basic failed (Invalid argument)
>> #
>>
>> Is this a CentOS 6/7 difference issue or is the classicupgrade broken
>> for Samba Version
>> 4.2.14-SerNet? Any help is appreciated.
> 
> Remove the include lines from the krb5.conf, our internal Heimdal
> doesn't understand them.
> 
Thanks Andrew. I've taken that line out but now I just get Segmentation
fault. :-/

I also took a more extreme step of moving /etc/krb5.conf and
/etc/krb5.conf.d out of /etc but samba-tool still seg faults.

Is it anything to do with the groups it's complaining about below?

# samba-tool domain classicupgrade --debuglevel=0 --dbdir
/var/lib/samba/bentley/ --use-xattrs=yes --realm=mrc.motec.com.au
--dns-backend=BIND9_DLZ /etc/samba/smb.bentley.conf
Reading smb.conf
Unknown parameter encountered: "share modes"
Ignoring unknown parameter "share modes"
Provisioning
Exporting account policy
Exporting groups
Ignoring group 'Administrators' S-1-5-32-544 listed but then not found:
Unable to enumerate members for alias, (-1073741487,The specified local
group does not exist.)
Ignoring group 'Account Operators' S-1-5-32-548 listed but then not
found: Unable to enumerate members for alias, (-1073741487,The specified
local group does not exist.)
Ignoring group 'Print Operators' S-1-5-32-550 listed but then not found:
Unable to enumerate members for alias, (-1073741487,The specified local
group does not exist.)
Ignoring group 'Backup Operators' S-1-5-32-551 listed but then not
found: Unable to enumerate members for alias, (-1073741487,The specified
local group does not exist.)
Ignoring group 'Replicators' S-1-5-32-552 listed but then not found:
Unable to enumerate members for alias, (-1073741487,The specified local
group does not exist.)
Exporting users
  Skipping wellknown rid=500 (for username=root)
Next rid = 13001
Segmentation fault

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.samba.org/pipermail/samba/attachments/20170207/281c0f0c/signature.sig>

On 07/02/17 21:45, Tom Robinson via samba wrote:
> On 07/02/17 17:01, Andrew Bartlett via samba wrote:
>> On Tue, 2017-02-07 at 15:58 +1100, Tom Robinson via samba wrote:
>>> Hi,
>>> \
>>> Next rid = 13001
>>> krb5_init_context failed (Invalid argument)
>>> smb_krb5_context_init_basic failed (Invalid argument)
>>> #
>>>
>>> Is this a CentOS 6/7 difference issue or is the classicupgrade
broken
>>> for Samba Version
>>> 4.2.14-SerNet? Any help is appreciated.
>> Remove the include lines from the krb5.conf, our internal Heimdal
>> doesn't understand them.
>>
> Thanks Andrew. I've taken that line out but now I just get Segmentation
> fault. :-/
>
> I also took a more extreme step of moving /etc/krb5.conf and
> /etc/krb5.conf.d out of /etc but samba-tool still seg faults.
>
> Is it anything to do with the groups it's complaining about below?
>
> # samba-tool domain classicupgrade --debuglevel=0 --dbdir
> /var/lib/samba/bentley/ --use-xattrs=yes --realm=mrc.motec.com.au
> --dns-backend=BIND9_DLZ /etc/samba/smb.bentley.conf
> Reading smb.conf
> Unknown parameter encountered: "share modes"
> Ignoring unknown parameter "share modes"
> Provisioning
> Exporting account policy
> Exporting groups
> Ignoring group 'Administrators' S-1-5-32-544 listed but then not
found:
> Unable to enumerate members for alias, (-1073741487,The specified local
> group does not exist.)
> Ignoring group 'Account Operators' S-1-5-32-548 listed but then not
> found: Unable to enumerate members for alias, (-1073741487,The specified
> local group does not exist.)
> Ignoring group 'Print Operators' S-1-5-32-550 listed but then not
found:
> Unable to enumerate members for alias, (-1073741487,The specified local
> group does not exist.)
> Ignoring group 'Backup Operators' S-1-5-32-551 listed but then not
> found: Unable to enumerate members for alias, (-1073741487,The specified
> local group does not exist.)
> Ignoring group 'Replicators' S-1-5-32-552 listed but then not
found:
> Unable to enumerate members for alias, (-1073741487,The specified local
> group does not exist.)
> Exporting users
>   Skipping wellknown rid=500 (for username=root)
> Next rid = 13001
> Segmentation fault
Hmm, not sure where to go from here. Seems like this is not going to be fixed.
Does anyone know if
the classiscupgrade in Version 4.2 also fail on CenOS 6?

That's not really what I want, though. What I want is an AD enabled samba
version on CentOS/RHEL 7
using rpm packaging but it seems a difficult path to tread.

My preference is to manage software with RPMs. Perhaps I'm not looking hard
enough or in the wrong
places; it appears that the available binary RPMs for CentOS/RHEL 7 all have AD
disabled. Am I going
to be wasting my time trying to manually build the latest samba stable version
on CentOS 7 with AD
enabled? Has anyone already done this successfully?



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.samba.org/pipermail/samba/attachments/20170209/8bfa5327/signature.sig>

On Thu, 2017-02-09 at 10:53 +1100, Tom Robinson via samba
wrote:
> On 07/02/17 21:45, Tom Robinson via samba wrote:
> > On 07/02/17 17:01, Andrew Bartlett via samba wrote:
> > > On Tue, 2017-02-07 at 15:58 +1100, Tom Robinson via samba wrote:
> > > > Hi,
> > > > \
> > > > Next rid = 13001
> > > > krb5_init_context failed (Invalid argument)
> > > > smb_krb5_context_init_basic failed (Invalid argument)
> > > > #
> > > > 
> > > > Is this a CentOS 6/7 difference issue or is the
classicupgrade
> > > > broken
> > > > for Samba Version
> > > > 4.2.14-SerNet? Any help is appreciated.
> > > 
> > > Remove the include lines from the krb5.conf, our internal Heimdal
> > > doesn't understand them.
> > > 
> > 
> > Thanks Andrew. I've taken that line out but now I just get
> > Segmentation
> > fault. :-/
> > 
> > I also took a more extreme step of moving /etc/krb5.conf and
> > /etc/krb5.conf.d out of /etc but samba-tool still seg faults.
> > 
> > Is it anything to do with the groups it's complaining about below?
> > 
> > # samba-tool domain classicupgrade --debuglevel=0 --dbdir
> > /var/lib/samba/bentley/ --use-xattrs=yes --realm=mrc.motec.com.au
> > --dns-backend=BIND9_DLZ /etc/samba/smb.bentley.conf
> > Reading smb.conf
> > Unknown parameter encountered: "share modes"
> > Ignoring unknown parameter "share modes"
> > Provisioning
> > Exporting account policy
> > Exporting groups
> > Ignoring group 'Administrators' S-1-5-32-544 listed but then
not
> > found:
> > Unable to enumerate members for alias, (-1073741487,The specified
> > local
> > group does not exist.)
> > Ignoring group 'Account Operators' S-1-5-32-548 listed but
then not
> > found: Unable to enumerate members for alias, (-1073741487,The
> > specified
> > local group does not exist.)
> > Ignoring group 'Print Operators' S-1-5-32-550 listed but then
not
> > found:
> > Unable to enumerate members for alias, (-1073741487,The specified
> > local
> > group does not exist.)
> > Ignoring group 'Backup Operators' S-1-5-32-551 listed but then
not
> > found: Unable to enumerate members for alias, (-1073741487,The
> > specified
> > local group does not exist.)
> > Ignoring group 'Replicators' S-1-5-32-552 listed but then not
> > found:
> > Unable to enumerate members for alias, (-1073741487,The specified
> > local
> > group does not exist.)
> > Exporting users
> >   Skipping wellknown rid=500 (for username=root)
> > Next rid = 13001
> > Segmentation fault
> 
> Hmm, not sure where to go from here. Seems like this is not going to
> be fixed. Does anyone know if
> the classiscupgrade in Version 4.2 also fail on CenOS 6?
> 
> That's not really what I want, though. What I want is an AD enabled
> samba version on CentOS/RHEL 7
> using rpm packaging but it seems a difficult path to tread.
> 
> My preference is to manage software with RPMs. Perhaps I'm not
> looking hard enough or in the wrong
> places; it appears that the available binary RPMs for CentOS/RHEL 7
> all have AD disabled. Am I going
> to be wasting my time trying to manually build the latest samba
> stable version on CentOS 7 with AD
> enabled? Has anyone already done this successfully?
It should build and run fine on CentOS 7.  

If it still gives you issues, then please send us the backtrace (either
to samba-technical or in a bug, this list will probably eat your
attachments).  Make sure to CC me.

Thanks,

Andrew Bartlett
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 862 bytes
Desc: This is a digitally signed message part
URL:
<http://lists.samba.org/pipermail/samba/attachments/20170209/d29b8d96/signature.sig>