samba-4.3.6 and talloc-2.1.6

[Andrew Bartlett]

On Sat, 2016-03-12 at 17:25 +0300, Andrey Cherepanov wrote:
> I build new version of talloc-2.1.6 (build from external tarball) and
> samba-4.3.6.
> But if I provision domain by command
> 
> samba-tool domain provision --realm=test.alt --domain test 
> --adminpass='Pa$$word' --dns-backend=SAMBA_INTERNAL --server-role=dc 
> --use-rfc2307 --use-xattrs=yes
> 
> I got error:
> Fixing provision GUIDs
> ERROR(runtime): uncaught exception - pytalloc_reference_ex() called
> for 
> object type not based on talloc
>    File "/usr/lib64/python2.7/site
> -packages/samba/netcmd/__init__.py", 
> line 175, in _run
>      return self.run(*args, **kwargs)
>    File "/usr/lib64/python2.7/site-packages/samba/netcmd/domain.py", 
> line 442, in run
>      nosync=ldap_backend_nosync, ldap_dryrun_mode=ldap_dryrun_mode)
>    File 
> "/usr/lib64/python2.7/site-packages/samba/provision/__init__.py",
> line 
> 2172, in provision
>      skip_sysvolacl=skip_sysvolacl)
>    File 
> "/usr/lib64/python2.7/site-packages/samba/provision/__init__.py",
> line 
> 1864, in provision_fill
>      attrs=['defaultObjectCategory'])
>    File "/usr/lib64/python2.7/site-packages/samba/dbchecker.py", line
> 138, in check_database
>      error_count += self.check_object(object.dn, attrs=attrs)
>    File "/usr/lib64/python2.7/site-packages/samba/dbchecker.py", line
> 1358, in check_object
>      normalised = 
> self.samdb.dsdb_normalise_attributes(self.samdb_schema, attrname,
> [val])
>    File "/usr/lib64/python2.7/site-packages/samba/samdb.py", line
> 672, 
> in dsdb_normalise_attributes
>      return dsdb._dsdb_normalise_attributes(ldb, ldap_display_name, 
> ldif_elements)
> 
> What policy of using new version of libraries for stable version of 
> Samba? Can I fix domain provision with talloc-2.1.6 for samba-4.3.6?

Versions less than Samba git master are buggy with respect to talloc
handling in the dsdb python bindings, and finally the new talloc
notices that.

The purpose of this new talloc version was to notice this and still be
backward compatible with correct users, but incorrect users (including
all released Samba versions) will get this message.  They only worked
by accident (two structures had the same layout for the first few
elements).

In short, it means we need to get the matching Samba fix for this
backported. 

Sorry,

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba