Every-time Pipeline failing [Pulling docker image gitlab/gitlab-runner-helper:x86_64-58d8360f .. ERROR: Job failed: execution took longer than 1h0m0s seconds]

Thu Jun 20 07:08:45 UTC 2019

Dear Devels,

My pipeline(https://gitlab.com/amitkuma/samba/-/jobs/235933064) keeps on
failing on "samba-ad-dc-2" test case.

Pulling docker image gitlab/gitlab-runner-helper:x86_64-58d8360f ...
ERROR: Job failed: execution took longer than 1h0m0s seconds

My patch(https://gitlab.com/samba-team/samba/merge_requests/524) is
simple, addition below in "docs-xml/manpages/net.8.xml"

<refsect2>

<title>ADS GPO</title>

<refsect3>
<title>ADS GPO APPLY [<replaceable>USERNAME</replaceable>]
[<replaceable>MACHINENAME</replaceable>]</title>
<para>Apply GPOs for user/machine.</para>
</refsect3>

<refsect3>
<title>ADS GPO GETGPO [<replaceable>GPO</replaceable>]</title>
<para>List specified GPO.</para>
</refsect3>

<refsect3>
<title>ADS GPO LINKADD [<replaceable>LINKDN</replaceable>]
[<replaceable>GPODN</replaceable>]</title>
<para>Link a container to a GPO. <replaceable>LINKDN</replaceable>
Container to link to a GPO. <replaceable>GPODN</replaceable> GPO to link
container to. DNs must be provided properly escaped. See RFC 4514 for
details.</para>
</refsect3>

<refsect3>
<title>ADS GPO LINKGET [<replaceable>CONTAINER</replaceable>]</title>
<para>Lists gPLink of a containter.</para>
</refsect3>

<refsect3>
<title>ADS GPO LIST [<replaceable>USERNAME</replaceable>]
[<replaceable>MACHINENAME</replaceable>]</title>
<para>Lists all GPOs for user/machine.</para>
</refsect3>

<refsect3>
<title>ADS GPO LISTALL</title>
<para>Lists all GPOs on a DC.</para>
</refsect3>

<refsect3>
<title>ADS GPO REFRESH [<replaceable>USERNAME</replaceable>]
[<replaceable>MACHINENAME</replaceable>]</title>
<para>Lists all GPOs assigned to an account and download them.
<replaceable>USERNAME</replaceable> User to refresh GPOs for.
<replaceable>MACHINENAME</replaceable> Machine to refresh GPOs for.</para>
</refsect3>

</refsect2>

I am working on building a docker image as mentioned here:
https://wiki.samba.org/index.php/Samba_CI_on_gitlab/Debugging_CI_failures

Any help is Appreciated!!

Amit

On 06/05/2019 05:10 PM, Amit Kumar wrote:
>
> :) Again, CI/CD pipeline failed for "samba-ad-dc-2"
>
> /tmp/samba-testbase/b21/samba-ad-dc-2/bin/winbindd:                                
> value                    : DATA_BLOB length=16
> /tmp/samba-testbase/b21/samba-ad-dc-2/bin/winbindd:                            
> keys: struct secrets_domain_info1_kerberos_key
> /tmp/samba-testbase/b21/samba-ad-dc-2/bin/winbindd:                                
> keytype                  : 0x00000017 (23)
> /tmp/samba-testbase/b21/samba-ad-dc-2/bin/winbindd:                                
> iteration_count          : 0x00001000 (4096)
> /tmp/samba-testbase/b21/samba-ad-dc-2/bin/winbindd:                                
> value                    : DATA_BLOB length=16
> /tmp/samba-testbase/b21/samba-ad-dc-2/bin/winbindd:                            
> keys: struct secrets_domain_info1_kerberos_key
> /tmp/samba-testbase/b21/samba-ad-dc-2/bin/winbindd:                                
> keytype                  : 0x00000003 (3)
> /tmp/samba-testbase/b21/samba-ad-dc-2/bin/winbindd:                                
> iteration_count          : 0x00001000 (4096)
> /tmp/samba-testbase/b21/samba-ad-dc-2/bin/winbindd:                                
> value                    : DATA_BLOB length=8
> /tmp/samba-testbase/b21/samba-ad-dc-2/bin/winbindd:                
> old_password             : NULL
> /tmp/samba-testbase/b21/samba-ad-dc-2/bin/winbindd:                
> older_password           : NULL
> /tmp/samba-testbase/b21/samba-ad-dc-2/bin/winbindd:
> secrets_store_domain_info: SEC_CHAN_* not supported for SAMBADOMAIN
> /tmp/samba-testbase/b21/samba-ad-dc-2/bin/winbindd:
> secrets_fetch_or_upgrade_domain_info: secrets_store_domain_info()
> failed for SAMBADOMAIN - NT_STATUS_INTERNAL_ERROR
> /tmp/samba-testbase/b21/samba-ad-dc-2/bin/winbindd:
> fill_mem_keytab_from_secrets:
> secrets_fetch_or_upgrade_domain_info(SAMBADOMAIN) -
> NT_STATUS_INTERNAL_ERROR
> /tmp/samba-testbase/b21/samba-ad-dc-2/bin/winbindd:
> ../../source3/librpc/crypto/gse_krb5.c:591: Error! Unable to set mem
> keytab - -1765328254
> /tmp/samba-testbase/b21/samba-ad-dc-2/bin/winbindd: Failed to start
> GENSEC server mech gse_krb5: NT_STATUS_INTERNAL_ERROR
> /tmp/samba-testbase/b21/samba-ad-dc-2/bin/winbindd:
> ../../source3/libads/authdata.c:278Failed to start server-side GENSEC
> krb5 to validate a Kerberos ticket: NT_STATUS_INTERNAL_ERROR
> /tmp/samba-testbase/b21/samba-ad-dc-2/bin/winbindd: kinit failed for
> 'Administrator at SAMBA.EXAMPLE.COM' with: Preauthentication failed
> (-1765328360)
>
> ==> /builds/amitkuma/samba/samba-ad-dc-2.stdout <==
> [60(451)/67 at 34m8s] samba4.krb5.kdc with account DENIED permission
> to replicate to an RODC(rodc)
>
> ==> /builds/amitkuma/samba/samba-ad-dc-2.stderr <==
> python3: WARNING: The "lsa over netlogon" option is deprecated
> python3: WARNING: The "server schannel" option is deprecated
>
> ==> /builds/amitkuma/samba/samba-ad-dc-2.stdout <==
> [61(748)/67 at 35m35s] samba4.krb5.kdc with account ALLOWED permission
> to replicate to an RODC(rodc)
> [62(1237)/67 at 37m10s] samba4.krb5.kdc with machine account(rodc:local)
>
> ==> /builds/amitkuma/samba/samba-ad-dc-2.stderr <==
> python3: WARNING: The "lsa over netlogon" option is deprecated
> python3: WARNING: The "server schannel" option is deprecated
> python3: WARNING: The "lsa over netlogon" option is deprecated
> python3: WARNING: The "server schannel" option is deprecated
> Pulling docker image gitlab/gitlab-runner-helper:x86_64-ac2a293c ...
> ERROR: Job failed: execution took longer than 1h0m0s seconds