samba - Jul 2017 - apt.van-belle.nl offline?

On Fri, 7 Jul 2017 10:43:41 +0200
"Stefan G. Weichinger via samba" <samba at lists.samba.org>
wrote:
> Am 2017-06-30 um 09:41 schrieb Stefan G. Weichinger via samba:
> 
> > I have an appointment to switch over a domain next friday, until
> > then I have time to test packages in my test environment and decide
> > what to use in real life there. I will upgrade my test VM to deb9
> > now (after a nice snapshot), assuming this will give me issues as I
> > used your packages with jessie there (going to upstream
> > samba-packages at first).
> > 
> > As you know from my dozens of emails this migration scares the s..t
> > out of me, but things look quite well in the test VM (deb8.8 plus
> > your 4.6.x pkgs) so I have to bite the bullet asap.
> 
> just a primer : this afternoon things get serious ...
> maybe someone keeps an eye on the ml for my mailings of panic :-P
> 
> Stefan
> 
> 
Good luck with the migration, if you follow what you did in your tests,
you should be okay. Unfortunately I will be un-contactable for the
next two days, but I am sure that you will get help if you require it.

Rowland

Am 2017-07-07 um 14:59 schrieb Rowland Penny via samba:
> Good luck with the migration, if you follow what you did in your tests,
> you should be okay. Unfortunately I will be un-contactable for the
> next two days, but I am sure that you will get help if you require it.
it looks quite ok, but somehow it seems better to rejoin all the PCs and
member servers. We are through ~50% .. maybe inefficient, but the
fastest way for now.

GPOs work, etc

thx

Am 2017-07-07 um 18:40 schrieb Stefan G. Weichinger via
samba:
> Am 2017-07-07 um 14:59 schrieb Rowland Penny via samba:
> 
>> Good luck with the migration, if you follow what you did in your tests,
>> you should be okay. Unfortunately I will be un-contactable for the
>> next two days, but I am sure that you will get help if you require it.
> 
> it looks quite ok, but somehow it seems better to rejoin all the PCs and
> member servers. We are through ~50% .. maybe inefficient, but the
> fastest way for now.
> 
> GPOs work, etc

maybe I should start a new thread?

I see issues on the fileserver, winbind crashes.



Jul 08 10:12:38 pre01svdeb01 systemd[1]: Starting Samba Winbind Daemon...
Jul 08 10:12:38 pre01svdeb01 systemd[1]: winbind.service: Supervising
process 24915 which is not our child. We'll most likely not notice when
it exits.
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: [2017/07/08
10:12:38.759158,  0]
../source3/winbindd/winbindd_cache.c:3244(initialize_winbindd_cache)
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: initialize_winbindd_cache:
clearing cache and re-creating with version number 2
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: [2017/07/08
10:12:38.778362,  0] ../lib/util/become_daemon.c:124(daemon_ready)
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: STATUS=daemon 'winbindd'
finished starting up and ready to serve connections
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: [2017/07/08
10:12:38.778405,  0] ../source3/lib/util.c:791(smb_panic_s3)
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: PANIC (pid 24915): Could
not find our domain
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: [2017/07/08
10:12:38.778958,  0] ../source3/lib/util.c:902(log_stack_trace)
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: BACKTRACE: 12 stack frames:
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: #0
/usr/lib/x86_64-linux-gnu/libsmbconf.so.0(log_stack_trace+0x1a)
[0x7fa2debeb85a]
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: #1
/usr/lib/x86_64-linux-gnu/libsmbconf.so.0(smb_panic_s3+0x20)
[0x7fa2debeb940]
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: #2
/usr/lib/x86_64-linux-gnu/libsamba-util.so.0(smb_panic+0x2f)
[0x7fa2e2163fcf]
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: #3
/usr/sbin/winbindd(+0x375f3) [0x7fa2e406a5f3]
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: #4
/usr/sbin/winbindd(rescan_trusted_domains+0x1d) [0x7fa2e406a61d]
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: #5
/usr/lib/x86_64-linux-gnu/libtevent.so.0(tevent_common_loop_timer_delay+0xcd)
[0x7fa2dbe3fafd]
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: #6
/usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x9afa) [0x7fa2dbe40afa]
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: #7
/usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x8217) [0x7fa2dbe3f217]
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: #8
/usr/lib/x86_64-linux-gnu/libtevent.so.0(_tevent_loop_once+0x8d)
[0x7fa2dbe3b43d]
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: #9
/usr/sbin/winbindd(main+0xbc4) [0x7fa2e4058d24]
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: #10
/lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7fa2db85bb45]
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: #11
/usr/sbin/winbindd(+0x263b0) [0x7fa2e40593b0]
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: [2017/07/08
10:12:38.779343,  0] ../source3/lib/dumpcore.c:303(dump_core)
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]: dumping core in
/var/log/samba/cores/winbindd
Jul 08 10:12:38 pre01svdeb01 winbindd[24915]:
Jul 08 10:12:38 pre01svdeb01 systemd[1]: Started Samba Winbind Daemon.
Jul 08 10:12:38 pre01svdeb01 systemd[1]: winbind.service: main process
exited, code=dumped, status=6/ABRT
Jul 08 10:12:38 pre01svdeb01 systemd[1]: Unit winbind.service entered
failed state.

this is samba-4.5.10-Debian from LPH repos (for jessie).

Maybe my smb.conf is flaky:

[global]
	netbios name = SERVER
	realm = MY.TLD
	workgroup = BUERO
	logon home = ""
	logon path = ""
	load printers = No
	printcap name = /dev/null
	dedicated keytab file = /etc/krb5.keytab
	kerberos method = secrets and keytab
	map to guest = Bad User
	map untrusted to domain = Yes
	security = ADS
	username map = /etc/samba/smbusers
	template shell = /usr/sbin/nologin
	winbind enum groups = Yes
	winbind enum users = Yes
	winbind refresh tickets = Yes
	winbind use default domain = Yes
	idmap config buero:schema_mode = rfc2307
	idmap config buero:range = 10000-99999
	idmap config buero:backend = rid
	idmap config *:range = 2000-9999
	idmap config * : backend = tdb
	printing = bsd

cp-ied that from another customer's ADS member servers (and modified
workgroup, sure)