samba - Feb 2017 - samba-tool domain classicupgrade smb_krb5_context_init_basic failed (Invalid argument)

On Thu, 2017-02-09 at 10:53 +1100, Tom Robinson via samba
wrote:
> On 07/02/17 21:45, Tom Robinson via samba wrote:
> > On 07/02/17 17:01, Andrew Bartlett via samba wrote:
> > > On Tue, 2017-02-07 at 15:58 +1100, Tom Robinson via samba wrote:
> > > > Hi,
> > > > \
> > > > Next rid = 13001
> > > > krb5_init_context failed (Invalid argument)
> > > > smb_krb5_context_init_basic failed (Invalid argument)
> > > > #
> > > > 
> > > > Is this a CentOS 6/7 difference issue or is the
classicupgrade
> > > > broken
> > > > for Samba Version
> > > > 4.2.14-SerNet? Any help is appreciated.
> > > 
> > > Remove the include lines from the krb5.conf, our internal Heimdal
> > > doesn't understand them.
> > > 
> > 
> > Thanks Andrew. I've taken that line out but now I just get
> > Segmentation
> > fault. :-/
> > 
> > I also took a more extreme step of moving /etc/krb5.conf and
> > /etc/krb5.conf.d out of /etc but samba-tool still seg faults.
> > 
> > Is it anything to do with the groups it's complaining about below?
> > 
> > # samba-tool domain classicupgrade --debuglevel=0 --dbdir
> > /var/lib/samba/bentley/ --use-xattrs=yes --realm=mrc.motec.com.au
> > --dns-backend=BIND9_DLZ /etc/samba/smb.bentley.conf
> > Reading smb.conf
> > Unknown parameter encountered: "share modes"
> > Ignoring unknown parameter "share modes"
> > Provisioning
> > Exporting account policy
> > Exporting groups
> > Ignoring group 'Administrators' S-1-5-32-544 listed but then
not
> > found:
> > Unable to enumerate members for alias, (-1073741487,The specified
> > local
> > group does not exist.)
> > Ignoring group 'Account Operators' S-1-5-32-548 listed but
then not
> > found: Unable to enumerate members for alias, (-1073741487,The
> > specified
> > local group does not exist.)
> > Ignoring group 'Print Operators' S-1-5-32-550 listed but then
not
> > found:
> > Unable to enumerate members for alias, (-1073741487,The specified
> > local
> > group does not exist.)
> > Ignoring group 'Backup Operators' S-1-5-32-551 listed but then
not
> > found: Unable to enumerate members for alias, (-1073741487,The
> > specified
> > local group does not exist.)
> > Ignoring group 'Replicators' S-1-5-32-552 listed but then not
> > found:
> > Unable to enumerate members for alias, (-1073741487,The specified
> > local
> > group does not exist.)
> > Exporting users
> >   Skipping wellknown rid=500 (for username=root)
> > Next rid = 13001
> > Segmentation fault
> 
> Hmm, not sure where to go from here. Seems like this is not going to
> be fixed. Does anyone know if
> the classiscupgrade in Version 4.2 also fail on CenOS 6?
> 
> That's not really what I want, though. What I want is an AD enabled
> samba version on CentOS/RHEL 7
> using rpm packaging but it seems a difficult path to tread.
> 
> My preference is to manage software with RPMs. Perhaps I'm not
> looking hard enough or in the wrong
> places; it appears that the available binary RPMs for CentOS/RHEL 7
> all have AD disabled. Am I going
> to be wasting my time trying to manually build the latest samba
> stable version on CentOS 7 with AD
> enabled? Has anyone already done this successfully?
It should build and run fine on CentOS 7.  

If it still gives you issues, then please send us the backtrace (either
to samba-technical or in a bug, this list will probably eat your
attachments).  Make sure to CC me.

Thanks,

Andrew Bartlett
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 862 bytes
Desc: This is a digitally signed message part
URL:
<http://lists.samba.org/pipermail/samba/attachments/20170209/d29b8d96/signature.sig>

Tom Robinson
IT Manager/System Administrator

MoTeC Pty Ltd

121 Merrindale Drive
Croydon South
3136 Victoria
Australia

T: +61 3 9761 5050
F: +61 3 9761 5051   
E: tom.robinson at motec.com.au

On 09/02/17 11:14, Andrew Bartlett via samba wrote:
> On Thu, 2017-02-09 at 10:53 +1100, Tom Robinson via samba wrote:
>> On 07/02/17 21:45, Tom Robinson via samba wrote:
>>> On 07/02/17 17:01, Andrew Bartlett via samba wrote:
>>>> On Tue, 2017-02-07 at 15:58 +1100, Tom Robinson via samba
wrote:
>>>>> Hi,
>>>>> \
>>>>> Next rid = 13001
>>>>> krb5_init_context failed (Invalid argument)
>>>>> smb_krb5_context_init_basic failed (Invalid argument)
>>>>> #
>>>>>
>>>>> Is this a CentOS 6/7 difference issue or is the
classicupgrade
>>>>> broken
>>>>> for Samba Version
>>>>> 4.2.14-SerNet? Any help is appreciated.
>>>> Remove the include lines from the krb5.conf, our internal
Heimdal
>>>> doesn't understand them.
>>>>
>>> Thanks Andrew. I've taken that line out but now I just get
>>> Segmentation
>>> fault. :-/
>>>
>>> I also took a more extreme step of moving /etc/krb5.conf and
>>> /etc/krb5.conf.d out of /etc but samba-tool still seg faults.
>>>
>>> Is it anything to do with the groups it's complaining about
below?
>>>
>>> # samba-tool domain classicupgrade --debuglevel=0 --dbdir
>>> /var/lib/samba/bentley/ --use-xattrs=yes --realm=mrc.motec.com.au
>>> --dns-backend=BIND9_DLZ /etc/samba/smb.bentley.conf
>>> Reading smb.conf
>>> Unknown parameter encountered: "share modes"
>>> Ignoring unknown parameter "share modes"
>>> Provisioning
>>> Exporting account policy
>>> Exporting groups
>>> Ignoring group 'Administrators' S-1-5-32-544 listed but
then not
>>> found:
>>> Unable to enumerate members for alias, (-1073741487,The specified
>>> local
>>> group does not exist.)
>>> Ignoring group 'Account Operators' S-1-5-32-548 listed but
then not
>>> found: Unable to enumerate members for alias, (-1073741487,The
>>> specified
>>> local group does not exist.)
>>> Ignoring group 'Print Operators' S-1-5-32-550 listed but
then not
>>> found:
>>> Unable to enumerate members for alias, (-1073741487,The specified
>>> local
>>> group does not exist.)
>>> Ignoring group 'Backup Operators' S-1-5-32-551 listed but
then not
>>> found: Unable to enumerate members for alias, (-1073741487,The
>>> specified
>>> local group does not exist.)
>>> Ignoring group 'Replicators' S-1-5-32-552 listed but then
not
>>> found:
>>> Unable to enumerate members for alias, (-1073741487,The specified
>>> local
>>> group does not exist.)
>>> Exporting users
>>>   Skipping wellknown rid=500 (for username=root)
>>> Next rid = 13001
>>> Segmentation fault
>> Hmm, not sure where to go from here. Seems like this is not going to
>> be fixed. Does anyone know if
>> the classiscupgrade in Version 4.2 also fail on CenOS 6?
>>
>> That's not really what I want, though. What I want is an AD enabled
>> samba version on CentOS/RHEL 7
>> using rpm packaging but it seems a difficult path to tread.
>>
>> My preference is to manage software with RPMs. Perhaps I'm not
>> looking hard enough or in the wrong
>> places; it appears that the available binary RPMs for CentOS/RHEL 7
>> all have AD disabled. Am I going
>> to be wasting my time trying to manually build the latest samba
>> stable version on CentOS 7 with AD
>> enabled? Has anyone already done this successfully?
> It should build and run fine on CentOS 7.  
>
> If it still gives you issues, then please send us the backtrace (either
> to samba-technical or in a bug, this list will probably eat your
> attachments).  Make sure to CC me.
Thanks Andrew, much appreciated.

I've grabbed samba 4.5.4 and customised an existing rpm spec file. Still
some issues there.

What replaces '--with-aio-support' in the configuration step now?

+ ./configure --enable-fhs --with-lockdir=/var/cache/samba --prefix=/usr
--exec-prefix=/usr
--bindir=/usr/bin --sbindir=/usr/sbin --sysconfdir=/etc --datadir=/usr/share
--includedir=/usr/include --libdir=/usr/lib64 --libexecdir=/usr/libexec
--localstatedir=/var
--sharedstatedir=/var/lib --mandir=/usr/share/man --infodir=/usr/share/info
--with-pammodulesdir=/lib64/security --disable-rpath-install
--bundled-libraries=ALL --enable-cups
--enable-gnutls --with-acl-support --with-aio-support --with-automount
--with-pam --with-pam_smbpass
--without-profiling-data --with-quotas --with-syslog --with-utmp --with-winbind
--with-ads
--with-dnsupdate --with-cluster-support --with-libarchive --without-dmapi
--with-shared-modules=vfs_audit,vfs_cap,vfs_catia,vfs_cacheprime,vfs_expand_msdfs,vfs_extd_audit,vfs_fake_perms,vfs_netatalk,vfs_recycle,vfs_streams_depot,vfs_aio_fork,vfs_snapper,vfs_gpfs,idmap_rid,idmap_autorid,idmap_rfc2307,idmap_ad,idmap_tdb2,idmap_hash
waf [command] [options]

Main commands (example: ./waf build -j4)
  build       : build all targets
  clean       : removes the build files
  configure   : configures the project
  ctags       : build 'tags' file using ctags
  dist        : makes a tarball for distribution
  distcheck   : test that distribution tarball builds and installs
  distclean   : removes the build directory
  etags       : build TAGS file using etags
  install     : installs the build files
  pep8        : run pep8 validator
  pydoctor    : build python apidocs
  reconfigure : reconfigure if config scripts have changed
  test        : Run the test suite (see test options below)
  testonly    : run tests without doing a build first
  uninstall   : removes the installed files
  wafdocs     : build wafsamba apidocs
  wildcard_cmd: called on a unknown command

waf: error: no such option: --with-aio-support
error: Bad exit status from /var/tmp/rpm-tmp.QxZXtr (%build)


RPM build errors:
    Bad exit status from /var/tmp/rpm-tmp.QxZXtr (%build)


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.samba.org/pipermail/samba/attachments/20170209/82cd48ba/signature-0001.sig>

On 09/02/17 11:14, Andrew Bartlett via samba wrote:
> On Thu, 2017-02-09 at 10:53 +1100, Tom Robinson via samba wrote:
>> On 07/02/17 21:45, Tom Robinson via samba wrote:
>>> On 07/02/17 17:01, Andrew Bartlett via samba wrote:
>>>> On Tue, 2017-02-07 at 15:58 +1100, Tom Robinson via samba
wrote:
>>>>> Hi,
>>>>> \
>>>>> Next rid = 13001
>>>>> krb5_init_context failed (Invalid argument)
>>>>> smb_krb5_context_init_basic failed (Invalid argument)
>>>>> #
>>>>>
>>>>> Is this a CentOS 6/7 difference issue or is the
classicupgrade
>>>>> broken
>>>>> for Samba Version
>>>>> 4.2.14-SerNet? Any help is appreciated.
>>>> Remove the include lines from the krb5.conf, our internal
Heimdal
>>>> doesn't understand them.
>>>>
>>> Thanks Andrew. I've taken that line out but now I just get
>>> Segmentation
>>> fault. :-/
>>>
>>> I also took a more extreme step of moving /etc/krb5.conf and
>>> /etc/krb5.conf.d out of /etc but samba-tool still seg faults.
>>>
>>> Is it anything to do with the groups it's complaining about
below?
>>>
>>> # samba-tool domain classicupgrade --debuglevel=0 --dbdir
>>> /var/lib/samba/bentley/ --use-xattrs=yes --realm=mrc.motec.com.au
>>> --dns-backend=BIND9_DLZ /etc/samba/smb.bentley.conf
>>> Reading smb.conf
>>> Unknown parameter encountered: "share modes"
>>> Ignoring unknown parameter "share modes"
>>> Provisioning
>>> Exporting account policy
>>> Exporting groups
>>> Ignoring group 'Administrators' S-1-5-32-544 listed but
then not
>>> found:
>>> Unable to enumerate members for alias, (-1073741487,The specified
>>> local
>>> group does not exist.)
>>> Ignoring group 'Account Operators' S-1-5-32-548 listed but
then not
>>> found: Unable to enumerate members for alias, (-1073741487,The
>>> specified
>>> local group does not exist.)
>>> Ignoring group 'Print Operators' S-1-5-32-550 listed but
then not
>>> found:
>>> Unable to enumerate members for alias, (-1073741487,The specified
>>> local
>>> group does not exist.)
>>> Ignoring group 'Backup Operators' S-1-5-32-551 listed but
then not
>>> found: Unable to enumerate members for alias, (-1073741487,The
>>> specified
>>> local group does not exist.)
>>> Ignoring group 'Replicators' S-1-5-32-552 listed but then
not
>>> found:
>>> Unable to enumerate members for alias, (-1073741487,The specified
>>> local
>>> group does not exist.)
>>> Exporting users
>>>   Skipping wellknown rid=500 (for username=root)
>>> Next rid = 13001
>>> Segmentation fault
>> Hmm, not sure where to go from here. Seems like this is not going to
>> be fixed. Does anyone know if
>> the classiscupgrade in Version 4.2 also fail on CenOS 6?
>>
>> That's not really what I want, though. What I want is an AD enabled
>> samba version on CentOS/RHEL 7
>> using rpm packaging but it seems a difficult path to tread.
>>
>> My preference is to manage software with RPMs. Perhaps I'm not
>> looking hard enough or in the wrong
>> places; it appears that the available binary RPMs for CentOS/RHEL 7
>> all have AD disabled. Am I going
>> to be wasting my time trying to manually build the latest samba
>> stable version on CentOS 7 with AD
>> enabled? Has anyone already done this successfully?
> It should build and run fine on CentOS 7.  
>
> If it still gives you issues, then please send us the backtrace (either
> to samba-technical or in a bug, this list will probably eat your
> attachments).  Make sure to CC me.
Thanks Andrew, much appreciated.

I've grabbed samba 4.5.4 and customised an existing rpm spec file. Still
some issues there.

What replaces '--with-aio-support' in the configuration step now?

+ ./configure --enable-fhs --with-lockdir=/var/cache/samba --prefix=/usr
--exec-prefix=/usr
--bindir=/usr/bin --sbindir=/usr/sbin --sysconfdir=/etc --datadir=/usr/share
--includedir=/usr/include --libdir=/usr/lib64 --libexecdir=/usr/libexec
--localstatedir=/var
--sharedstatedir=/var/lib --mandir=/usr/share/man --infodir=/usr/share/info
--with-pammodulesdir=/lib64/security --disable-rpath-install
--bundled-libraries=ALL --enable-cups
--enable-gnutls --with-acl-support --with-aio-support --with-automount
--with-pam --with-pam_smbpass
--without-profiling-data --with-quotas --with-syslog --with-utmp --with-winbind
--with-ads
--with-dnsupdate --with-cluster-support --with-libarchive --without-dmapi
--with-shared-modules=vfs_audit,vfs_cap,vfs_catia,vfs_cacheprime,vfs_expand_msdfs,vfs_extd_audit,vfs_fake_perms,vfs_netatalk,vfs_recycle,vfs_streams_depot,vfs_aio_fork,vfs_snapper,vfs_gpfs,idmap_rid,idmap_autorid,idmap_rfc2307,idmap_ad,idmap_tdb2,idmap_hash
waf [command] [options]

Main commands (example: ./waf build -j4)
  build       : build all targets
  clean       : removes the build files
  configure   : configures the project
  ctags       : build 'tags' file using ctags
  dist        : makes a tarball for distribution
  distcheck   : test that distribution tarball builds and installs
  distclean   : removes the build directory
  etags       : build TAGS file using etags
  install     : installs the build files
  pep8        : run pep8 validator
  pydoctor    : build python apidocs
  reconfigure : reconfigure if config scripts have changed
  test        : Run the test suite (see test options below)
  testonly    : run tests without doing a build first
  uninstall   : removes the installed files
  wafdocs     : build wafsamba apidocs
  wildcard_cmd: called on a unknown command

waf: error: no such option: --with-aio-support
error: Bad exit status from /var/tmp/rpm-tmp.QxZXtr (%build)


RPM build errors:
    Bad exit status from /var/tmp/rpm-tmp.QxZXtr (%build)




-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.samba.org/pipermail/samba/attachments/20170210/5b91bd24/signature.sig>

On Fri, 10 Feb 2017 12:34:23 +1100
Tom Robinson via samba <samba at lists.samba.org> wrote:
> 
> I've grabbed samba 4.5.4 and customised an existing rpm spec file.
> Still some issues there.
> 
> What replaces '--with-aio-support' in the configuration step now?
> 
As far as I can see, nothing, see the 4.4.0 release notes here:

https://www.samba.org/samba/history/samba-4.4.0.html

Rowland