Good evening,
We have been dealing with an incident for several weeks during peak load
times, either due to authentications or service accesses that rely on Samba
4 AD. Below are the details of the current Samba version and OS:
**Samba version 4.19.2**
```bash
~$ uname -r
5.15.0-41-generic
~$ sudo lsb_release
No LSB modules are available.
~$ sudo lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 20.04.2 LTS
Release: 20.04
Codename: focal
The first error that appeared in the logs since September 10 is as follows:
bash
Copiar c?digo
Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.301924, 0]
../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug)
Sep 10 09:41:36 domain samba[1658021]: ldb: module encrypted_secrets
initialization failed : Operations error
Sep 10 09:41:36 domain samba[1658021]: ldb: module group_audit_log
initialization failed : Operations error
Sep 10 09:41:36 domain samba[1658021]: ldb: module repl_meta_data
initialization failed : Operations error
Sep 10 09:41:36 domain samba[1658021]: ldb: module subtree_delete
initialization failed : Operations error
Sep 10 09:41:36 domain samba[1658021]: ldb: module aclread initialization
failed : Operations error
Sep 10 09:41:36 domain samba[1658021]: ldb: module acl initialization
failed : Operations error
Sep 10 09:41:36 domain samba[1658021]: ldb: module descriptor
initialization failed : Operations error
Sep 10 09:41:36 domain samba[1658021]: ldb: module objectclass
initialization failed : Operations error
Sep 10 09:41:36 domain samba[1658021]: ldb: module audit_log
initialization failed : Operations error
Sep 10 09:41:36 domain samba[1658021]: ldb: module asq initialization
failed : Operations error
Sep 10 09:41:36 domain samba[1658021]: ldb: module server_sort
initialization failed : Operations error
Sep 10 09:41:36 domain samba[1658021]: ldb: module vlv initialization
failed : Operations error
Sep 10 09:41:36 domain samba[1658021]: ldb: module dsdb_paged_results
initialization failed : Operations error
Sep 10 09:41:36 domain samba[1658021]: ldb: module dirsync initialization
failed : Operations error
Sep 10 09:41:36 domain samba[1658021]: ldb: module schema_load
initialization failed : Operations error
Sep 10 09:41:36 domain samba[1658021]: ldb: module dsdb_notification
initialization failed : Operations error
Sep 10 09:41:36 domain samba[1658021]: ldb: module rootdse initialization
failed : Operations error
Sep 10 09:41:36 domain samba[1658021]: ldb: module samba_dsdb
initialization failed : Operations error
Sep 10 09:41:36 domain samba[1658021]: ldb: Unable to load modules for
/usr/local/samba/private/sam.ldb: Error (24) Too many open files - Opening
encrypted_secrets key file
The current configuration file is:
bash
Copiar c?digo
# Global parameters
[global]
bind interfaces only = Yes
dns forwarder = x.x.x.x x.x.x.x
interfaces = lo ens3
netbios name = xxxxxx
realm = xxxxxx
server role = active directory domain controller
workgroup = xxxxx
tls enabled = yes
tls keyfile = /usr/local/xxxxx/private/tls/key.pem
tls certfile = /usr/local/xxxxx/private/tls/cert.pem
tls cafile = /usr/local/xxxxx/private/tls/ca.pem
log level = 1 dsdb_json_audit:2 dsdb_password_json_audit:2
dsdb_group_json_audit:2 dsdb_transaction_json_audit:2 auth_json_audit:3@
/usr/local/samba/var/log.samba
max log size = 100000
tls priority = NORMAL:-VERS-TLS1.0:-VERS-TLS1.1
restrict anonymous = 2
disable netbios = yes
smb ports = 445
printcap name = /dev/null
load printers = no
disable spoolss = yes
printing = bsd
[sysvol]
path = /usr/local/samba/var/locks/sysvol
read only = No
[netlogon]
path = /usr/local/samba/var/locks/sysvol/xxxxxxx/scripts
read only = No>From September 10 onwards, we have continuously seen errors similar to the
following in the event logs:
bash
Copiar c?digo
Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.301924, 0]
../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug)
Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.302148, 0]
../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug)
Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.302159, 0]
../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug)
Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.302169, 0]
../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug)
Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.302179, 0]
../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug)
Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.302192, 0]
../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug)
Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.302365, 0]
../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug)
Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.302387, 0]
../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug)
Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.302398, 0]
../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug)
Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.302408, 0]
../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug)
Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.302417, 0]
../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug)
Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.302426, 0]
../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug)
Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.302439, 0]
../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug)
Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.302459, 0]
../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug)
Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.302649, 0]
../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug)
Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.302672, 0]
../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug)
We are actively looking for information regarding this error but have not
been able to pinpoint the root cause.
Please feel free to reach out to me.
Good evening,> > We have been dealing with an incident for several weeks during peak load > times, either due to authentications or service accesses that rely on Samba > 4 AD. Below are the details of the current Samba version and OS: > > **Samba version 4.19.2** > > ```bash > ~$ uname -r > 5.15.0-41-generic > ~$ sudo lsb_release > No LSB modules are available. > ~$ sudo lsb_release -a > No LSB modules are available. > Distributor ID: Ubuntu > Description: Ubuntu 20.04.2 LTS > Release: 20.04 > Codename: focal > The first error that appeared in the logs since September 10 is as follows: > > bash > Copiar c?digo > Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.301924, 0] > ../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug) > Sep 10 09:41:36 domain samba[1658021]: ldb: module encrypted_secrets > initialization failed : Operations error > Sep 10 09:41:36 domain samba[1658021]: ldb: module group_audit_log > initialization failed : Operations error > Sep 10 09:41:36 domain samba[1658021]: ldb: module repl_meta_data > initialization failed : Operations error > Sep 10 09:41:36 domain samba[1658021]: ldb: module subtree_delete > initialization failed : Operations error > Sep 10 09:41:36 domain samba[1658021]: ldb: module aclread > initialization failed : Operations error > Sep 10 09:41:36 domain samba[1658021]: ldb: module acl initialization > failed : Operations error > Sep 10 09:41:36 domain samba[1658021]: ldb: module descriptor > initialization failed : Operations error > Sep 10 09:41:36 domain samba[1658021]: ldb: module objectclass > initialization failed : Operations error > Sep 10 09:41:36 domain samba[1658021]: ldb: module audit_log > initialization failed : Operations error > Sep 10 09:41:36 domain samba[1658021]: ldb: module asq initialization > failed : Operations error > Sep 10 09:41:36 domain samba[1658021]: ldb: module server_sort > initialization failed : Operations error > Sep 10 09:41:36 domain samba[1658021]: ldb: module vlv initialization > failed : Operations error > Sep 10 09:41:36 domain samba[1658021]: ldb: module dsdb_paged_results > initialization failed : Operations error > Sep 10 09:41:36 domain samba[1658021]: ldb: module dirsync > initialization failed : Operations error > Sep 10 09:41:36 domain samba[1658021]: ldb: module schema_load > initialization failed : Operations error > Sep 10 09:41:36 domain samba[1658021]: ldb: module dsdb_notification > initialization failed : Operations error > Sep 10 09:41:36 domain samba[1658021]: ldb: module rootdse > initialization failed : Operations error > Sep 10 09:41:36 domain samba[1658021]: ldb: module samba_dsdb > initialization failed : Operations error > Sep 10 09:41:36 domain samba[1658021]: ldb: Unable to load modules for > /usr/local/samba/private/sam.ldb: Error (24) Too many open files - Opening > encrypted_secrets key file > The current configuration file is: > > bash > Copiar c?digo > # Global parameters > [global] > bind interfaces only = Yes > dns forwarder = x.x.x.x x.x.x.x > interfaces = lo ens3 > netbios name = xxxxxx > realm = xxxxxx > server role = active directory domain controller > workgroup = xxxxx > > tls enabled = yes > tls keyfile = /usr/local/xxxxx/private/tls/key.pem > tls certfile = /usr/local/xxxxx/private/tls/cert.pem > tls cafile = /usr/local/xxxxx/private/tls/ca.pem > > log level = 1 dsdb_json_audit:2 dsdb_password_json_audit:2 > dsdb_group_json_audit:2 dsdb_transaction_json_audit:2 auth_json_audit:3@ > /usr/local/samba/var/log.samba > max log size = 100000 > > tls priority = NORMAL:-VERS-TLS1.0:-VERS-TLS1.1 > restrict anonymous = 2 > disable netbios = yes > smb ports = 445 > printcap name = /dev/null > load printers = no > disable spoolss = yes > printing = bsd > > [sysvol] > path = /usr/local/samba/var/locks/sysvol > read only = No > > [netlogon] > path = /usr/local/samba/var/locks/sysvol/xxxxxxx/scripts > read only = No > From September 10 onwards, we have continuously seen errors similar to the > following in the event logs: > > bash > Copiar c?digo > Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.301924, 0] > ../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug) > Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.302148, 0] > ../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug) > Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.302159, 0] > ../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug) > Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.302169, 0] > ../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug) > Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.302179, 0] > ../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug) > Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.302192, 0] > ../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug) > Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.302365, 0] > ../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug) > Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.302387, 0] > ../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug) > Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.302398, 0] > ../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug) > Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.302408, 0] > ../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug) > Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.302417, 0] > ../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug) > Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.302426, 0] > ../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug) > Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.302439, 0] > ../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug) > Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.302459, 0] > ../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug) > Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.302649, 0] > ../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug) > Sep 10 09:41:36 domain samba[1658021]: [2024/09/10 09:41:36.302672, 0] > ../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug) > > > We are actively looking for information regarding this error but have not > been able to pinpoint the root cause. > > Please feel free to reach out to me. >