thr3ads.net - samba - [Samba] Upgrade from 4.9.8 to 4.10.3 on Centos using Sernet Packages [May 2019]

If this information is useful, please help other people find it:
Share via:

Christian Naumer

2019-May-20 09:15 UTC

[Samba] Upgrade from 4.9.8 to 4.10.3 on Centos using Sernet Packages

Hello you all,
we have a 4 DC environment running on Centos7 with the Sernet-Packages.
Version on all DCs is 4.9.8 (smb.conf below). We upgraded one of the DCs
to 4.10.3. After a few minutes we see this in the logs:

May 20 10:57:17 dc3 samba[15547]: [2019/05/20 10:57:17.200060,  0]
../../lib/util/fault.c:79(fault_report)
May 20 10:57:17 dc3 samba[15547]:
==============================================================May 20 10:57:17
dc3 samba[15547]: [2019/05/20 10:57:17.200405,  0]
../../lib/util/fault.c:80(fault_report)
May 20 10:57:17 dc3 samba[15547]:  INTERNAL ERROR: Signal 11 in pid
15547 (4.10.3-SerNet-RedHat-4.el7)
May 20 10:57:17 dc3 samba[15547]:  Please read the Trouble-Shooting
section of the Samba HOWTO
May 20 10:57:17 dc3 samba[15547]: [2019/05/20 10:57:17.200481,  0]
../../lib/util/fault.c:82(fault_report)
May 20 10:57:17 dc3 samba[15547]:
==============================================================May 20 10:57:17
dc3 samba[15547]: [2019/05/20 10:57:17.200527,  0]
../../lib/util/fault.c:128(smb_panic_default)
May 20 10:57:17 dc3 samba[15547]:  smb_panic_default: PANIC (pid 15547):
internal error
May 20 10:57:17 dc3 samba[15547]: [2019/05/20 10:57:17.203783,  0]
../../lib/util/fault.c:261(log_stack_trace)
May 20 10:57:17 dc3 samba[15547]:  BACKTRACE: 62 stack frames:
May 20 10:57:17 dc3 samba[15547]:   #0
/usr/lib64/samba/libsamba-util.so.0(log_stack_trace+0x2f) [0x7f2425a1dc1d]
May 20 10:57:17 dc3 samba[15547]:   #1
/usr/lib64/samba/libsamba-util.so.0(smb_panic+0xa2) [0x7f2425a1dd82]
May 20 10:57:17 dc3 samba[15547]:   #2
/usr/lib64/samba/libsamba-util.so.0(+0x13061) [0x7f2425a1e061]
May 20 10:57:17 dc3 samba[15547]:   #3 /lib64/libpthread.so.0(+0xf5d0)
[0x7f241807f5d0]
May 20 10:57:17 dc3 samba[15547]:   #4
/usr/lib64/samba/ldb/paged_results.so(+0x1cdf) [0x7f2407d74cdf]
May 20 10:57:17 dc3 samba[15547]:   #5
/usr/lib64/samba/ldb/paged_results.so(+0x29d6) [0x7f2407d759d6]
May 20 10:57:17 dc3 samba[15547]:   #6
/usr/lib64/samba/libldb.so.1(ldb_module_done+0x144) [0x7f2424f999d5]
May 20 10:57:17 dc3 samba[15547]:   #7
/usr/lib64/samba/ldb/asq.so(+0x123c) [0x7f240b42e23c]
May 20 10:57:17 dc3 samba[15547]:   #8
/usr/lib64/samba/ldb/asq.so(+0x15f8) [0x7f240b42e5f8]
May 20 10:57:17 dc3 samba[15547]:   #9
/usr/lib64/samba/ldb/asq.so(+0x181d) [0x7f240b42e81d]
May 20 10:57:17 dc3 samba[15547]:   #10
/usr/lib64/samba/libldb.so.1(ldb_module_done+0x144) [0x7f2424f999d5]
May 20 10:57:17 dc3 samba[15547]:   #11
/usr/lib64/samba/libldb.so.1(+0x8ca1) [0x7f2424f94ca1]
May 20 10:57:17 dc3 samba[15547]:   #12
/usr/lib64/samba/libldb.so.1(ldb_module_done+0x144) [0x7f2424f999d5]
May 20 10:57:17 dc3 samba[15547]:   #13
/usr/lib64/samba/ldb/acl.so(+0x7579) [0x7f240ba42579]
May 20 10:57:17 dc3 samba[15547]:   #14
/usr/lib64/samba/libldb.so.1(ldb_module_done+0x144) [0x7f2424f999d5]
May 20 10:57:17 dc3 samba[15547]:   #15
/usr/lib64/samba/ldb/aclread.so(+0x38bb) [0x7f240b8388bb]
May 20 10:57:17 dc3 samba[15547]:   #16
/usr/lib64/samba/libldb.so.1(ldb_module_done+0x144) [0x7f2424f999d5]
May 20 10:57:17 dc3 samba[15547]:   #17
/usr/lib64/samba/ldb/encrypted_secrets.so(+0x3cfb) [0x7f240a7fbcfb]
May 20 10:57:17 dc3 samba[15547]:   #18
/usr/lib64/samba/libldb.so.1(ldb_module_done+0x144) [0x7f2424f999d5]
May 20 10:57:17 dc3 samba[15547]:   #19
/usr/lib64/samba/ldb/operational.so(+0x3a2e) [0x7f2407f7ba2e]
May 20 10:57:17 dc3 samba[15547]:   #20
/usr/lib64/samba/libldb.so.1(ldb_module_done+0x144) [0x7f2424f999d5]
May 20 10:57:17 dc3 samba[15547]:   #21
/usr/lib64/samba/ldb/extended_dn_out.so(+0x2a2d) [0x7f240a3eda2d]
May 20 10:57:17 dc3 samba[15547]:   #22
/usr/lib64/samba/ldb/extended_dn_out.so(+0x354d) [0x7f240a3ee54d]
May 20 10:57:17 dc3 samba[15547]:   #23
/usr/lib64/samba/libldb.so.1(ldb_module_done+0x144) [0x7f2424f999d5]
May 20 10:57:17 dc3 samba[15547]:   #24
/usr/lib64/samba/libdsdb-module-samba4.so(dsdb_next_callback+0x50)
[0x7f2410575c8a]
May 20 10:57:17 dc3 samba[15547]:   #25
/usr/lib64/samba/libldb.so.1(ldb_module_done+0x144) [0x7f2424f999d5]
May 20 10:57:17 dc3 samba[15547]:   #26
/usr/lib64/samba/ldb/partition.so(+0x57d7) [0x7f24079657d7]
May 20 10:57:17 dc3 samba[15547]:   #27
/usr/lib64/samba/libldb-key-value-samba4.so(+0x40df) [0x7f24095bd0df]
May 20 10:57:17 dc3 samba[15547]:   #28
/usr/lib64/samba/libldb-key-value-samba4.so(+0x5d4f) [0x7f24095bed4f]
May 20 10:57:17 dc3 samba[15547]:   #29
/usr/lib64/samba/libtevent.so.0(tevent_common_invoke_timer_handler+0x172)
[0x7f2423f05bbc]
May 20 10:57:17 dc3 samba[15547]:   #30
/usr/lib64/samba/libtevent.so.0(tevent_common_loop_timer_delay+0xa6)
[0x7f2423f05d22]
May 20 10:57:17 dc3 samba[15547]:   #31
/usr/lib64/samba/libtevent.so.0(+0xc180) [0x7f2423f07180]
May 20 10:57:17 dc3 samba[15547]:   #32
/usr/lib64/samba/libtevent.so.0(+0xa167) [0x7f2423f05167]
May 20 10:57:17 dc3 samba[15547]:   #33
/usr/lib64/samba/libtevent.so.0(_tevent_loop_once+0xa3) [0x7f2423f00880]
May 20 10:57:17 dc3 samba[15547]:   #34
/usr/lib64/samba/libldb.so.1(ldb_wait+0x143) [0x7f2424f964f2]
May 20 10:57:17 dc3 samba[15547]:   #35
/usr/lib64/samba/service/ldap.so(ldapsrv_do_call+0x7d7) [0x7f240cca04f6]
May 20 10:57:17 dc3 samba[15547]:   #36
/usr/lib64/samba/service/ldap.so(+0x558f) [0x7f240cc9d58f]
May 20 10:57:17 dc3 samba[15547]:   #37
/usr/lib64/samba/libtevent.so.0(+0x67a4) [0x7f2423f017a4]
May 20 10:57:17 dc3 samba[15547]:   #38
/usr/lib64/samba/libtevent.so.0(tevent_common_invoke_immediate_handler+0x125)
[0x7f2423f0147c]
May 20 10:57:17 dc3 samba[15547]:   #39
/usr/lib64/samba/libtevent.so.0(tevent_common_loop_immediate+0x1c)
[0x7f2423f014ae]
May 20 10:57:17 dc3 samba[15547]:   #40
/usr/lib64/samba/libtevent.so.0(+0xc16b) [0x7f2423f0716b]
May 20 10:57:17 dc3 samba[15547]:   #41
/usr/lib64/samba/libtevent.so.0(+0xa167) [0x7f2423f05167]
May 20 10:57:17 dc3 samba[15547]:   #42
/usr/lib64/samba/libtevent.so.0(_tevent_loop_once+0xa3) [0x7f2423f00880]
May 20 10:57:17 dc3 samba[15547]:   #43
/usr/lib64/samba/libtevent.so.0(tevent_common_loop_wait+0x17)
[0x7f2423f00a6e]
May 20 10:57:17 dc3 samba[15547]:   #44
/usr/lib64/samba/libtevent.so.0(+0xa117) [0x7f2423f05117]
May 20 10:57:17 dc3 samba[15547]:   #45
/usr/lib64/samba/libtevent.so.0(_tevent_loop_wait+0xa) [0x7f2423f00ad6]
May 20 10:57:17 dc3 samba[15547]:   #46
/usr/lib64/samba/process_model/standard.so(+0x2e16) [0x7f2411257e16]
May 20 10:57:17 dc3 samba[15547]:   #47
/usr/lib64/samba/libservice-samba4.so(+0x38b3) [0x7f24253e08b3]
May 20 10:57:17 dc3 samba[15547]:   #48
/usr/lib64/samba/libtevent.so.0(tevent_common_invoke_fd_handler+0x82)
[0x7f2423f0105f]
May 20 10:57:17 dc3 samba[15547]:   #49
/usr/lib64/samba/libtevent.so.0(+0xc415) [0x7f2423f07415]
May 20 10:57:17 dc3 samba[15547]:   #50
/usr/lib64/samba/libtevent.so.0(+0xa167) [0x7f2423f05167]
May 20 10:57:17 dc3 samba[15547]:   #51
/usr/lib64/samba/libtevent.so.0(_tevent_loop_once+0xa3) [0x7f2423f00880]
May 20 10:57:17 dc3 samba[15547]:   #52
/usr/lib64/samba/libtevent.so.0(tevent_common_loop_wait+0x17)
[0x7f2423f00a6e]
May 20 10:57:17 dc3 samba[15547]:   #53
/usr/lib64/samba/libtevent.so.0(+0xa117) [0x7f2423f05117]
May 20 10:57:17 dc3 samba[15547]:   #54
/usr/lib64/samba/libtevent.so.0(_tevent_loop_wait+0xa) [0x7f2423f00ad6]
May 20 10:57:17 dc3 samba[15547]:   #55
/usr/lib64/samba/process_model/standard.so(+0x2630) [0x7f2411257630]
May 20 10:57:17 dc3 samba[15547]:   #56
/usr/lib64/samba/libservice-samba4.so(task_server_startup+0x61)
[0x7f24253e1d6d]
May 20 10:57:17 dc3 samba[15547]:   #57
/usr/lib64/samba/libservice-samba4.so(server_service_startup+0x15c)
[0x7f24253e07b3]
May 20 10:57:17 dc3 samba[15547]:   #58 /usr/sbin/samba(+0x5e4d)
[0x565012c3ee4d]
May 20 10:57:17 dc3 samba[15547]:   #59 /usr/sbin/samba(main+0x2b)
[0x565012c3f165]
May 20 10:57:17 dc3 samba[15547]:   #60
/lib64/libc.so.6(__libc_start_main+0xf5) [0x7f24175f73d5]
May 20 10:57:17 dc3 samba[15547]:   #61 /usr/sbin/samba(+0x4299)
[0x565012c3d299]
May 20 10:57:17 dc3 samba[14973]: [2019/05/20 10:57:17.217470,  0]
../../source4/smbd/process_standard.c:160(standard_child_pipe_handler)
May 20 10:57:17 dc3 samba[14973]:  standard_child_pipe_handler: Child
15547 () terminated with signal 6

The process is restarted and no apparent error is seen. As we had a
snapshot from before the upgrade we just reverted back to this and don't
see the panic anymore. Anyone has an idea how to debug this?

Regards

Christian







smb.conf

[global]
        netbios name = DC3
        realm = XX.DOMAIN.DE
        server services = s3fs, rpc, wrepl, ldap, cldap, kdc, drepl,
winbindd, ntp_signd, kcc, dnsupdate
        workgroup = DOMAIN-02
        log level = auth_audit:2 dsdb_password_audit:5
dsdb_transaction_audit:5 dsdb_group_audit:5
        #log level = 4 auth_audit:3
        logging =syslog only
        server role = active directory domain controller
        prefork children = 8
        idmap_ldb:use rfc2307 = yes
        username map = /etc/samba/smbusers
        template shell = /bin/bash
        template homedir = /home/%U
        #ntlm auth = yes
        ntlm auth = mschapv2-and-ntlmv2-only
        disable netbios = yes
        smb ports = 445
        server min protocol = SMB2
        client min protocol = SMB2
        rpc server dynamic port range = 1024-1300
        tls enabled  = yes
        tls keyfile  = tls/server_de.key
        tls certfile = tls/server.pem
        tls cafile   = tls/ca.pem

[netlogon]
        path = /var/lib/samba/sysvol/xx.domain.de/scripts
        read only = No

[sysvol]
        path = /var/lib/samba/sysvol
        read only = No

-- 
Dr. Christian Naumer
Research Scientist
Plattform-Koordinator Bioprozesstechnik

B.R.A.I.N Aktiengesellschaft
Darmstaedter Str. 34-36, D-64673 Zwingenberg
e-mail cn at brain-biotech.de, homepage www.brain-biotech.de
fon +49-6251-9331-30  /   fax +49-6251-9331-11

Sitz der Gesellschaft: Zwingenberg/Bergstrasse
Registergericht AG Darmstadt, HRB 24758
Vorstand: Dr. Juergen Eck (Vorsitzender), Manfred Bender,
Ludger Roedder
Aufsichtsratsvorsitzender: Dr. Georg Kellinghusen

Rowland penny

2019-May-20 09:59 UTC

head link

[Samba] Upgrade from 4.9.8 to 4.10.3 on Centos using Sernet Packages

On 20/05/2019 10:15, Christian Naumer via samba wrote:> Hello you all,
> we have a 4 DC environment running on Centos7 with the Sernet-Packages.
> Version on all DCs is 4.9.8 (smb.conf below). We upgraded one of the DCs
> to 4.10.3. After a few minutes we see this in the logs:
>
>
> smb.conf
>
> [global]
>          netbios name = DC3
>          realm = XX.DOMAIN.DE
>          server services = s3fs, rpc, wrepl, ldap, cldap, kdc, drepl,
> winbindd, ntp_signd, kcc, dnsupdate
>          workgroup = DOMAIN-02
>          log level = auth_audit:2 dsdb_password_audit:5
> dsdb_transaction_audit:5 dsdb_group_audit:5
>          #log level = 4 auth_audit:3
>          logging =syslog only
Why do you have a parameter with another parameter as its value ?

both 'logging' and 'syslog only' are both parameters, did you
mean
'logging = syslog' ?
>          server role = active directory domain controller
>          prefork children = 8
>          idmap_ldb:use rfc2307 = yes
>          username map = /etc/samba/smbusers
No, you do not use the line above on a DC>          template shell = /bin/bash
>          template homedir = /home/%U
>          #ntlm auth = yes
>          ntlm auth = mschapv2-and-ntlmv2-only
>          disable netbios = yesWhy ? there is virtually no netbios on a DC and there is no
browsing>          smb ports = 445
>          server min protocol = SMB2
>          client min protocol = SMB2
Why are you setting these ?
>          rpc server dynamic port range = 1024-1300
Why are you using the pre 4.7.0 range ?

Rowland

Christian Naumer

2019-May-20 10:19 UTC

head link

[Samba] Upgrade from 4.9.8 to 4.10.3 on Centos using Sernet Packages

Am 20.05.19 um 11:59 schrieb Rowland penny via samba:
>>          logging =syslog only
> 
> Why do you have a parameter with another parameter as its value ?
> 
> both 'logging' and 'syslog only' are both parameters, did
you mean
> 'logging = syslog' ?
Yes I meant this "logging = syslog"
> 
>>          server role = active directory domain controller
>>          prefork children = 8
>>          idmap_ldb:use rfc2307 = yes
>>          username map = /etc/samba/smbusers
> No, you do not use the line above on a DC
Ok. Noted.
>>          template shell = /bin/bash
>>          template homedir = /home/%U
>>          #ntlm auth = yes
>>          ntlm auth = mschapv2-and-ntlmv2-only
>>          disable netbios = yes
> Why ? there is virtually no netbios on a DC and there is no browsing
Well virtually no is not no? I wanted to make sure.

>>          smb ports = 445
>>          server min protocol = SMB2
>>          client min protocol = SMB2
> 
> Why are you setting these ?
To disable smbv1.

> 
>>          rpc server dynamic port range = 1024-1300
> 
> Why are you using the pre 4.7.0 range ?
So I wouldn't have to change the firewall as it was setup with samba 4.4.



Regards

-- 
Dr. Christian Naumer
Research Scientist
Plattform-Koordinator Bioprozesstechnik

B.R.A.I.N Aktiengesellschaft
Darmstaedter Str. 34-36, D-64673 Zwingenberg
e-mail cn at brain-biotech.de, homepage www.brain-biotech.de
fon +49-6251-9331-30  /   fax +49-6251-9331-11

Sitz der Gesellschaft: Zwingenberg/Bergstrasse
Registergericht AG Darmstadt, HRB 24758
Vorstand: Dr. Juergen Eck (Vorsitzender), Manfred Bender,
Ludger Roedder
Aufsichtsratsvorsitzender: Dr. Georg Kellinghusen

Sérgio Basto

2019-May-20 19:21 UTC

head link

[Samba] Upgrade from 4.9.8 to 4.10.3 on Centos using Sernet Packages

On Mon, 2019-05-20 at 11:15 +0200, Christian Naumer via samba
wrote:> we have a 4 DC environment running on Centos7 with the Sernet-
> Packages.
Just curiosity , are Sernet-Packages available for free ? or these
packages have a fee to pay ? , if they are free where are they ? 

Thanks,
-- 
Sérgio M. B.

Rowland penny

2019-May-20 19:38 UTC

head link

[Samba] Upgrade from 4.9.8 to 4.10.3 on Centos using Sernet Packages

On 20/05/2019 20:21, Sérgio Basto via samba wrote:> On Mon, 2019-05-20 at 11:15 +0200, Christian Naumer via samba wrote:
>> we have a 4 DC environment running on Centos7 with the Sernet-
>> Packages.
> Just curiosity , are Sernet-Packages available for free ? or these
> packages have a fee to pay ? , if they are free where are they ?
>
> Thanks,
They are available here:

https://samba.plus/

But they are subscription based.

Rowland

me at tdiehl.org

2019-May-20 19:40 UTC

head link

[Samba] Upgrade from 4.9.8 to 4.10.3 on Centos using Sernet Packages

On Mon, 20 May 2019, S?rgio Basto via samba wrote:
> On Mon, 2019-05-20 at 11:15 +0200, Christian Naumer via samba wrote:
>> we have a 4 DC environment running on Centos7 with the Sernet-
>> Packages.
>
> Just curiosity , are Sernet-Packages available for free ? or these
> packages have a fee to pay ? , if they are free where are they ?
No, they are not free.

See https://shop.samba.plus/en/samba for pricing.

Regards,

-- 
Tom			me at tdiehl.org

Possibly Parallel Threads

Search for more apparently analagous threads

samba - May 2019 - Upgrade from 4.9.8 to 4.10.3 on Centos using Sernet Packages

[Samba] Upgrade from 4.9.8 to 4.10.3 on Centos using Sernet Packages

[Samba] Upgrade from 4.9.8 to 4.10.3 on Centos using Sernet Packages

[Samba] Upgrade from 4.9.8 to 4.10.3 on Centos using Sernet Packages

[Samba] Upgrade from 4.9.8 to 4.10.3 on Centos using Sernet Packages

[Samba] Upgrade from 4.9.8 to 4.10.3 on Centos using Sernet Packages

[Samba] Upgrade from 4.9.8 to 4.10.3 on Centos using Sernet Packages

Possibly Parallel Threads