Christian Naumer
2019-May-20 09:15 UTC
[Samba] Upgrade from 4.9.8 to 4.10.3 on Centos using Sernet Packages
Hello you all,
we have a 4 DC environment running on Centos7 with the Sernet-Packages.
Version on all DCs is 4.9.8 (smb.conf below). We upgraded one of the DCs
to 4.10.3. After a few minutes we see this in the logs:
May 20 10:57:17 dc3 samba[15547]: [2019/05/20 10:57:17.200060, 0]
../../lib/util/fault.c:79(fault_report)
May 20 10:57:17 dc3 samba[15547]:
==============================================================May 20 10:57:17
dc3 samba[15547]: [2019/05/20 10:57:17.200405, 0]
../../lib/util/fault.c:80(fault_report)
May 20 10:57:17 dc3 samba[15547]: INTERNAL ERROR: Signal 11 in pid
15547 (4.10.3-SerNet-RedHat-4.el7)
May 20 10:57:17 dc3 samba[15547]: Please read the Trouble-Shooting
section of the Samba HOWTO
May 20 10:57:17 dc3 samba[15547]: [2019/05/20 10:57:17.200481, 0]
../../lib/util/fault.c:82(fault_report)
May 20 10:57:17 dc3 samba[15547]:
==============================================================May 20 10:57:17
dc3 samba[15547]: [2019/05/20 10:57:17.200527, 0]
../../lib/util/fault.c:128(smb_panic_default)
May 20 10:57:17 dc3 samba[15547]: smb_panic_default: PANIC (pid 15547):
internal error
May 20 10:57:17 dc3 samba[15547]: [2019/05/20 10:57:17.203783, 0]
../../lib/util/fault.c:261(log_stack_trace)
May 20 10:57:17 dc3 samba[15547]: BACKTRACE: 62 stack frames:
May 20 10:57:17 dc3 samba[15547]: #0
/usr/lib64/samba/libsamba-util.so.0(log_stack_trace+0x2f) [0x7f2425a1dc1d]
May 20 10:57:17 dc3 samba[15547]: #1
/usr/lib64/samba/libsamba-util.so.0(smb_panic+0xa2) [0x7f2425a1dd82]
May 20 10:57:17 dc3 samba[15547]: #2
/usr/lib64/samba/libsamba-util.so.0(+0x13061) [0x7f2425a1e061]
May 20 10:57:17 dc3 samba[15547]: #3 /lib64/libpthread.so.0(+0xf5d0)
[0x7f241807f5d0]
May 20 10:57:17 dc3 samba[15547]: #4
/usr/lib64/samba/ldb/paged_results.so(+0x1cdf) [0x7f2407d74cdf]
May 20 10:57:17 dc3 samba[15547]: #5
/usr/lib64/samba/ldb/paged_results.so(+0x29d6) [0x7f2407d759d6]
May 20 10:57:17 dc3 samba[15547]: #6
/usr/lib64/samba/libldb.so.1(ldb_module_done+0x144) [0x7f2424f999d5]
May 20 10:57:17 dc3 samba[15547]: #7
/usr/lib64/samba/ldb/asq.so(+0x123c) [0x7f240b42e23c]
May 20 10:57:17 dc3 samba[15547]: #8
/usr/lib64/samba/ldb/asq.so(+0x15f8) [0x7f240b42e5f8]
May 20 10:57:17 dc3 samba[15547]: #9
/usr/lib64/samba/ldb/asq.so(+0x181d) [0x7f240b42e81d]
May 20 10:57:17 dc3 samba[15547]: #10
/usr/lib64/samba/libldb.so.1(ldb_module_done+0x144) [0x7f2424f999d5]
May 20 10:57:17 dc3 samba[15547]: #11
/usr/lib64/samba/libldb.so.1(+0x8ca1) [0x7f2424f94ca1]
May 20 10:57:17 dc3 samba[15547]: #12
/usr/lib64/samba/libldb.so.1(ldb_module_done+0x144) [0x7f2424f999d5]
May 20 10:57:17 dc3 samba[15547]: #13
/usr/lib64/samba/ldb/acl.so(+0x7579) [0x7f240ba42579]
May 20 10:57:17 dc3 samba[15547]: #14
/usr/lib64/samba/libldb.so.1(ldb_module_done+0x144) [0x7f2424f999d5]
May 20 10:57:17 dc3 samba[15547]: #15
/usr/lib64/samba/ldb/aclread.so(+0x38bb) [0x7f240b8388bb]
May 20 10:57:17 dc3 samba[15547]: #16
/usr/lib64/samba/libldb.so.1(ldb_module_done+0x144) [0x7f2424f999d5]
May 20 10:57:17 dc3 samba[15547]: #17
/usr/lib64/samba/ldb/encrypted_secrets.so(+0x3cfb) [0x7f240a7fbcfb]
May 20 10:57:17 dc3 samba[15547]: #18
/usr/lib64/samba/libldb.so.1(ldb_module_done+0x144) [0x7f2424f999d5]
May 20 10:57:17 dc3 samba[15547]: #19
/usr/lib64/samba/ldb/operational.so(+0x3a2e) [0x7f2407f7ba2e]
May 20 10:57:17 dc3 samba[15547]: #20
/usr/lib64/samba/libldb.so.1(ldb_module_done+0x144) [0x7f2424f999d5]
May 20 10:57:17 dc3 samba[15547]: #21
/usr/lib64/samba/ldb/extended_dn_out.so(+0x2a2d) [0x7f240a3eda2d]
May 20 10:57:17 dc3 samba[15547]: #22
/usr/lib64/samba/ldb/extended_dn_out.so(+0x354d) [0x7f240a3ee54d]
May 20 10:57:17 dc3 samba[15547]: #23
/usr/lib64/samba/libldb.so.1(ldb_module_done+0x144) [0x7f2424f999d5]
May 20 10:57:17 dc3 samba[15547]: #24
/usr/lib64/samba/libdsdb-module-samba4.so(dsdb_next_callback+0x50)
[0x7f2410575c8a]
May 20 10:57:17 dc3 samba[15547]: #25
/usr/lib64/samba/libldb.so.1(ldb_module_done+0x144) [0x7f2424f999d5]
May 20 10:57:17 dc3 samba[15547]: #26
/usr/lib64/samba/ldb/partition.so(+0x57d7) [0x7f24079657d7]
May 20 10:57:17 dc3 samba[15547]: #27
/usr/lib64/samba/libldb-key-value-samba4.so(+0x40df) [0x7f24095bd0df]
May 20 10:57:17 dc3 samba[15547]: #28
/usr/lib64/samba/libldb-key-value-samba4.so(+0x5d4f) [0x7f24095bed4f]
May 20 10:57:17 dc3 samba[15547]: #29
/usr/lib64/samba/libtevent.so.0(tevent_common_invoke_timer_handler+0x172)
[0x7f2423f05bbc]
May 20 10:57:17 dc3 samba[15547]: #30
/usr/lib64/samba/libtevent.so.0(tevent_common_loop_timer_delay+0xa6)
[0x7f2423f05d22]
May 20 10:57:17 dc3 samba[15547]: #31
/usr/lib64/samba/libtevent.so.0(+0xc180) [0x7f2423f07180]
May 20 10:57:17 dc3 samba[15547]: #32
/usr/lib64/samba/libtevent.so.0(+0xa167) [0x7f2423f05167]
May 20 10:57:17 dc3 samba[15547]: #33
/usr/lib64/samba/libtevent.so.0(_tevent_loop_once+0xa3) [0x7f2423f00880]
May 20 10:57:17 dc3 samba[15547]: #34
/usr/lib64/samba/libldb.so.1(ldb_wait+0x143) [0x7f2424f964f2]
May 20 10:57:17 dc3 samba[15547]: #35
/usr/lib64/samba/service/ldap.so(ldapsrv_do_call+0x7d7) [0x7f240cca04f6]
May 20 10:57:17 dc3 samba[15547]: #36
/usr/lib64/samba/service/ldap.so(+0x558f) [0x7f240cc9d58f]
May 20 10:57:17 dc3 samba[15547]: #37
/usr/lib64/samba/libtevent.so.0(+0x67a4) [0x7f2423f017a4]
May 20 10:57:17 dc3 samba[15547]: #38
/usr/lib64/samba/libtevent.so.0(tevent_common_invoke_immediate_handler+0x125)
[0x7f2423f0147c]
May 20 10:57:17 dc3 samba[15547]: #39
/usr/lib64/samba/libtevent.so.0(tevent_common_loop_immediate+0x1c)
[0x7f2423f014ae]
May 20 10:57:17 dc3 samba[15547]: #40
/usr/lib64/samba/libtevent.so.0(+0xc16b) [0x7f2423f0716b]
May 20 10:57:17 dc3 samba[15547]: #41
/usr/lib64/samba/libtevent.so.0(+0xa167) [0x7f2423f05167]
May 20 10:57:17 dc3 samba[15547]: #42
/usr/lib64/samba/libtevent.so.0(_tevent_loop_once+0xa3) [0x7f2423f00880]
May 20 10:57:17 dc3 samba[15547]: #43
/usr/lib64/samba/libtevent.so.0(tevent_common_loop_wait+0x17)
[0x7f2423f00a6e]
May 20 10:57:17 dc3 samba[15547]: #44
/usr/lib64/samba/libtevent.so.0(+0xa117) [0x7f2423f05117]
May 20 10:57:17 dc3 samba[15547]: #45
/usr/lib64/samba/libtevent.so.0(_tevent_loop_wait+0xa) [0x7f2423f00ad6]
May 20 10:57:17 dc3 samba[15547]: #46
/usr/lib64/samba/process_model/standard.so(+0x2e16) [0x7f2411257e16]
May 20 10:57:17 dc3 samba[15547]: #47
/usr/lib64/samba/libservice-samba4.so(+0x38b3) [0x7f24253e08b3]
May 20 10:57:17 dc3 samba[15547]: #48
/usr/lib64/samba/libtevent.so.0(tevent_common_invoke_fd_handler+0x82)
[0x7f2423f0105f]
May 20 10:57:17 dc3 samba[15547]: #49
/usr/lib64/samba/libtevent.so.0(+0xc415) [0x7f2423f07415]
May 20 10:57:17 dc3 samba[15547]: #50
/usr/lib64/samba/libtevent.so.0(+0xa167) [0x7f2423f05167]
May 20 10:57:17 dc3 samba[15547]: #51
/usr/lib64/samba/libtevent.so.0(_tevent_loop_once+0xa3) [0x7f2423f00880]
May 20 10:57:17 dc3 samba[15547]: #52
/usr/lib64/samba/libtevent.so.0(tevent_common_loop_wait+0x17)
[0x7f2423f00a6e]
May 20 10:57:17 dc3 samba[15547]: #53
/usr/lib64/samba/libtevent.so.0(+0xa117) [0x7f2423f05117]
May 20 10:57:17 dc3 samba[15547]: #54
/usr/lib64/samba/libtevent.so.0(_tevent_loop_wait+0xa) [0x7f2423f00ad6]
May 20 10:57:17 dc3 samba[15547]: #55
/usr/lib64/samba/process_model/standard.so(+0x2630) [0x7f2411257630]
May 20 10:57:17 dc3 samba[15547]: #56
/usr/lib64/samba/libservice-samba4.so(task_server_startup+0x61)
[0x7f24253e1d6d]
May 20 10:57:17 dc3 samba[15547]: #57
/usr/lib64/samba/libservice-samba4.so(server_service_startup+0x15c)
[0x7f24253e07b3]
May 20 10:57:17 dc3 samba[15547]: #58 /usr/sbin/samba(+0x5e4d)
[0x565012c3ee4d]
May 20 10:57:17 dc3 samba[15547]: #59 /usr/sbin/samba(main+0x2b)
[0x565012c3f165]
May 20 10:57:17 dc3 samba[15547]: #60
/lib64/libc.so.6(__libc_start_main+0xf5) [0x7f24175f73d5]
May 20 10:57:17 dc3 samba[15547]: #61 /usr/sbin/samba(+0x4299)
[0x565012c3d299]
May 20 10:57:17 dc3 samba[14973]: [2019/05/20 10:57:17.217470, 0]
../../source4/smbd/process_standard.c:160(standard_child_pipe_handler)
May 20 10:57:17 dc3 samba[14973]: standard_child_pipe_handler: Child
15547 () terminated with signal 6
The process is restarted and no apparent error is seen. As we had a
snapshot from before the upgrade we just reverted back to this and don't
see the panic anymore. Anyone has an idea how to debug this?
Regards
Christian
smb.conf
[global]
netbios name = DC3
realm = XX.DOMAIN.DE
server services = s3fs, rpc, wrepl, ldap, cldap, kdc, drepl,
winbindd, ntp_signd, kcc, dnsupdate
workgroup = DOMAIN-02
log level = auth_audit:2 dsdb_password_audit:5
dsdb_transaction_audit:5 dsdb_group_audit:5
#log level = 4 auth_audit:3
logging =syslog only
server role = active directory domain controller
prefork children = 8
idmap_ldb:use rfc2307 = yes
username map = /etc/samba/smbusers
template shell = /bin/bash
template homedir = /home/%U
#ntlm auth = yes
ntlm auth = mschapv2-and-ntlmv2-only
disable netbios = yes
smb ports = 445
server min protocol = SMB2
client min protocol = SMB2
rpc server dynamic port range = 1024-1300
tls enabled = yes
tls keyfile = tls/server_de.key
tls certfile = tls/server.pem
tls cafile = tls/ca.pem
[netlogon]
path = /var/lib/samba/sysvol/xx.domain.de/scripts
read only = No
[sysvol]
path = /var/lib/samba/sysvol
read only = No
--
Dr. Christian Naumer
Research Scientist
Plattform-Koordinator Bioprozesstechnik
B.R.A.I.N Aktiengesellschaft
Darmstaedter Str. 34-36, D-64673 Zwingenberg
e-mail cn at brain-biotech.de, homepage www.brain-biotech.de
fon +49-6251-9331-30 / fax +49-6251-9331-11
Sitz der Gesellschaft: Zwingenberg/Bergstrasse
Registergericht AG Darmstadt, HRB 24758
Vorstand: Dr. Juergen Eck (Vorsitzender), Manfred Bender,
Ludger Roedder
Aufsichtsratsvorsitzender: Dr. Georg Kellinghusen
Rowland penny
2019-May-20 09:59 UTC
[Samba] Upgrade from 4.9.8 to 4.10.3 on Centos using Sernet Packages
On 20/05/2019 10:15, Christian Naumer via samba wrote:> Hello you all, > we have a 4 DC environment running on Centos7 with the Sernet-Packages. > Version on all DCs is 4.9.8 (smb.conf below). We upgraded one of the DCs > to 4.10.3. After a few minutes we see this in the logs: > > > smb.conf > > [global] > netbios name = DC3 > realm = XX.DOMAIN.DE > server services = s3fs, rpc, wrepl, ldap, cldap, kdc, drepl, > winbindd, ntp_signd, kcc, dnsupdate > workgroup = DOMAIN-02 > log level = auth_audit:2 dsdb_password_audit:5 > dsdb_transaction_audit:5 dsdb_group_audit:5 > #log level = 4 auth_audit:3 > logging =syslog onlyWhy do you have a parameter with another parameter as its value ? both 'logging' and 'syslog only' are both parameters, did you mean 'logging = syslog' ?> server role = active directory domain controller > prefork children = 8 > idmap_ldb:use rfc2307 = yes > username map = /etc/samba/smbusersNo, you do not use the line above on a DC> template shell = /bin/bash > template homedir = /home/%U > #ntlm auth = yes > ntlm auth = mschapv2-and-ntlmv2-only > disable netbios = yesWhy ? there is virtually no netbios on a DC and there is no browsing> smb ports = 445 > server min protocol = SMB2 > client min protocol = SMB2Why are you setting these ?> rpc server dynamic port range = 1024-1300Why are you using the pre 4.7.0 range ? Rowland
Christian Naumer
2019-May-20 10:19 UTC
[Samba] Upgrade from 4.9.8 to 4.10.3 on Centos using Sernet Packages
Am 20.05.19 um 11:59 schrieb Rowland penny via samba:>> logging =syslog only > > Why do you have a parameter with another parameter as its value ? > > both 'logging' and 'syslog only' are both parameters, did you mean > 'logging = syslog' ?Yes I meant this "logging = syslog"> >> server role = active directory domain controller >> prefork children = 8 >> idmap_ldb:use rfc2307 = yes >> username map = /etc/samba/smbusers > No, you do not use the line above on a DCOk. Noted.>> template shell = /bin/bash >> template homedir = /home/%U >> #ntlm auth = yes >> ntlm auth = mschapv2-and-ntlmv2-only >> disable netbios = yes > Why ? there is virtually no netbios on a DC and there is no browsingWell virtually no is not no? I wanted to make sure.>> smb ports = 445 >> server min protocol = SMB2 >> client min protocol = SMB2 > > Why are you setting these ?To disable smbv1.> >> rpc server dynamic port range = 1024-1300 > > Why are you using the pre 4.7.0 range ?So I wouldn't have to change the firewall as it was setup with samba 4.4. Regards -- Dr. Christian Naumer Research Scientist Plattform-Koordinator Bioprozesstechnik B.R.A.I.N Aktiengesellschaft Darmstaedter Str. 34-36, D-64673 Zwingenberg e-mail cn at brain-biotech.de, homepage www.brain-biotech.de fon +49-6251-9331-30 / fax +49-6251-9331-11 Sitz der Gesellschaft: Zwingenberg/Bergstrasse Registergericht AG Darmstadt, HRB 24758 Vorstand: Dr. Juergen Eck (Vorsitzender), Manfred Bender, Ludger Roedder Aufsichtsratsvorsitzender: Dr. Georg Kellinghusen
Sérgio Basto
2019-May-20 19:21 UTC
[Samba] Upgrade from 4.9.8 to 4.10.3 on Centos using Sernet Packages
On Mon, 2019-05-20 at 11:15 +0200, Christian Naumer via samba wrote:> we have a 4 DC environment running on Centos7 with the Sernet- > Packages.Just curiosity , are Sernet-Packages available for free ? or these packages have a fee to pay ? , if they are free where are they ? Thanks, -- Sérgio M. B.
Rowland penny
2019-May-20 19:38 UTC
[Samba] Upgrade from 4.9.8 to 4.10.3 on Centos using Sernet Packages
On 20/05/2019 20:21, Sérgio Basto via samba wrote:> On Mon, 2019-05-20 at 11:15 +0200, Christian Naumer via samba wrote: >> we have a 4 DC environment running on Centos7 with the Sernet- >> Packages. > Just curiosity , are Sernet-Packages available for free ? or these > packages have a fee to pay ? , if they are free where are they ? > > Thanks,They are available here: https://samba.plus/ But they are subscription based. Rowland
me at tdiehl.org
2019-May-20 19:40 UTC
[Samba] Upgrade from 4.9.8 to 4.10.3 on Centos using Sernet Packages
On Mon, 20 May 2019, S?rgio Basto via samba wrote:> On Mon, 2019-05-20 at 11:15 +0200, Christian Naumer via samba wrote: >> we have a 4 DC environment running on Centos7 with the Sernet- >> Packages. > > Just curiosity , are Sernet-Packages available for free ? or these > packages have a fee to pay ? , if they are free where are they ?No, they are not free. See https://shop.samba.plus/en/samba for pricing. Regards, -- Tom me at tdiehl.org