[Samba] ldb segment fault. Problem on joining as a DC member.
Chan Min Wai
dcmwai at gmail.com
Wed Feb 5 19:13:13 MST 2014
believes it or not... the problem are simple.
Glic issue on long DNS so both server cannot request "
87e240b2-95f9-4cae-9dc6-c8412397eddf._msdcs.kl01.amtb-m.org.my'"
Solution :
As per suggested in some old post.
Add this in /etc/hosts (Different value for different HOST)
Thank You...
But I do hope someone can advise on the ldb* segment fault...
On Wed, Feb 5, 2014 at 11:15 PM, Chan Min Wai <dcmwai at gmail.com> wrote:
> Dear All,
>
> Need some help as I was trying to follow the guide below.
>
> https://wiki.samba.org/index.php/Samba4/HOWTO/Join_a_domain_as_a_DC
>
> Until the steps of
>
> ldbsearch -H /usr/local/samba/private/sam.ldb '(invocationid=*)' --cross-ncs objectguid
>
>
> and my ldbsearch reply with such a result.
>
> ldb: unable to dlopen /usr/lib64/samba/ldb/acl.so :
> /usr/lib64/ldb/libreplace.so: version `SAMBA_4.1.4' not found (required by
> /usr/lib64/samba/libkrb5-samba4.so.26)
> ldb: unable to dlopen /usr/lib64/samba/ldb/aclread.so :
> /usr/lib64/ldb/libreplace.so: version `SAMBA_4.1.4' not found (required by
> /usr/lib64/samba/libsamba-security.so)
> ldb: unable to dlopen /usr/lib64/samba/ldb/anr.so :
> /usr/lib64/ldb/libreplace.so: version `SAMBA_4.1.4' not found (required by
> /usr/lib64/libsamba-util.so.0)
> Segmentation fault
>
> I'm sure that all files are there...
>
> as for the DC member.
> I can join without problem...
>
> When do samba single I notice the following ---> "WERR_BADFILE"
> Terminating connection - 'dcesrv: NT_STATUS_CONNECTION_DISCONNECTED'
> imessaging: cleaning up /var/lib/samba/private/smbd.tmp/msg/msg.2299.98
> single_terminate: reason[dcesrv: NT_STATUS_CONNECTION_DISCONNECTED]
> Terminating connection - 'dcesrv: NT_STATUS_CONNECTION_DISCONNECTED'
> imessaging: cleaning up /var/lib/samba/private/smbd.tmp/msg/msg.2299.98
> single_terminate: reason[dcesrv: NT_STATUS_CONNECTION_DISCONNECTED]
> dreplsrv_notify_schedule(5) scheduled for: Wed Feb 5 22:12:16 2014 MYT
> dreplsrv_notify_schedule(5) scheduled for: Wed Feb 5 22:12:22 2014 MYT
> dreplsrv_notify_schedule(5) scheduled for: Wed Feb 5 22:12:27 2014 MYT
> dreplsrv_notify_schedule(5) scheduled for: Wed Feb 5 22:12:32 2014 MYT
> dreplsrv_notify_schedule(5) scheduled for: Wed Feb 5 22:12:37 2014 MYT
> dreplsrv_notify_schedule(5) scheduled for: Wed Feb 5 22:12:42 2014 MYT
> dreplsrv_notify_schedule(5) scheduled for: Wed Feb 5 22:12:47 2014 MYT
> wb_irpc_get_idmap called
> wb_sids2xids_send called
> wb_irpc_get_idmap_callback called
> wb_sids2xids_recv called
> dreplsrv_notify_schedule(5) scheduled for: Wed Feb 5 22:12:52 2014 MYT
> dreplsrv_notify_schedule(5) scheduled for: Wed Feb 5 22:12:57 2014 MYT
> Terminating connection - 'dcesrv: NT_STATUS_CONNECTION_DISCONNECTED'
> imessaging: cleaning up /var/lib/samba/private/smbd.tmp/msg/msg.2299.96
> single_terminate: reason[dcesrv: NT_STATUS_CONNECTION_DISCONNECTED]
> dreplsrv_notify_schedule(5) scheduled for: Wed Feb 5 22:13:02 2014 MYT
> Kerberos: AS-REQ AMTBSERVER$@KL01.AMTB-M.ORG.MY from ipv4:
> 192.168.11.20:44354 for krbtgt/KL01.AMTB-M.ORG.MY at KL01.AMTB-M.ORG.MY
> Kerberos: No preauth found, returning PREAUTH-REQUIRED -- AMTBSERVER$@
> KL01.AMTB-M.ORG.MY
> Kerberos: TGS-REQ AMTBSERVER$@KL01.AMTB-M.ORG.MY from ipv4:
> 192.168.11.20:33877 for krbtgt/KL01.AMTB-M.ORG.MY at KL01.AMTB-M.ORG.MY[forwarded, forwardable]
> Kerberos: TGS-REQ authtime: 2014-02-05T22:12:58 starttime:
> 2014-02-05T22:12:58 endtime: 2014-02-06T08:12:58 renew till: unset
> Kerberos: TGS-REQ AMTBSERVER$@KL01.AMTB-M.ORG.MY from ipv4:
> 192.168.11.20:37638 for ldap/
> amtbserver.kl01.amtb-m.org.my at KL01.AMTB-M.ORG.MY [canonicalize]
> Kerberos: TGS-REQ authtime: 2014-02-05T22:12:58 starttime:
> 2014-02-05T22:12:58 endtime: 2014-02-06T08:12:58 renew till: unset
> dreplsrv_notify_schedule(5) scheduled for: Wed Feb 5 22:13:07 2014 MYT
> dreplsrv_notify_schedule(5) scheduled for: Wed Feb 5 22:13:12 2014 MYT
> dreplsrv_notify_schedule(5) scheduled for: Wed Feb 5 22:13:17 2014 MYT
> dreplsrv_notify_schedule(5) scheduled for: Wed Feb 5 22:13:22 2014 MYT
> dreplsrv_notify_schedule(5) scheduled for: Wed Feb 5 22:13:27 2014 MYT
> dreplsrv_notify_schedule(5) scheduled for: Wed Feb 5 22:13:32 2014 MYT
> dreplsrv_notify_schedule(5) scheduled for: Wed Feb 5 22:13:37 2014 MYT
> dreplsrv_notify_schedule(5) scheduled for: Wed Feb 5 22:13:42 2014 MYT
> Kerberos: AS-REQ AMTBSRV02$@KL01.AMTB-M.ORG.MY from ipv4:
> 192.168.11.24:36114 for krbtgt/KL01.AMTB-M.ORG.MY at KL01.AMTB-M.ORG.MY
> Kerberos: No preauth found, returning PREAUTH-REQUIRED -- AMTBSRV02$@
> KL01.AMTB-M.ORG.MY
> Kerberos: AS-REQ AMTBSRV02$@KL01.AMTB-M.ORG.MY from ipv4:
> 192.168.11.25:41604 for krbtgt/KL01.AMTB-M.ORG.MY at KL01.AMTB-M.ORG.MY
> Kerberos: Client sent patypes: encrypted-timestamp
> Kerberos: Looking for PKINIT pa-data -- AMTBSRV02$@KL01.AMTB-M.ORG.MY
> Kerberos: Looking for ENC-TS pa-data -- AMTBSRV02$@KL01.AMTB-M.ORG.MY
> Kerberos: ENC-TS Pre-authentication succeeded -- AMTBSRV02$@
> KL01.AMTB-M.ORG.MY using arcfour-hmac-md5
> authsam_account_ok: Checking SMB password for user AMTBSRV02$@
> KL01.AMTB-M.ORG.MY
> logon_hours_ok: No hours restrictions for user AMTBSRV02$@
> KL01.AMTB-M.ORG.MY
> Kerberos: AS-REQ authtime: 2014-02-05T22:13:39 starttime: unset endtime:
> 2014-02-06T08:13:39 renew till: unset
> Kerberos: Client supported enctypes: aes256-cts-hmac-sha1-96,
> aes128-cts-hmac-sha1-96, des3-cbc-sha1, des3-cbc-md5, arcfour-hmac-md5,
> using arcfour-hmac-md5/arcfour-hmac-md5
> Kerberos: Requested flags: forwardable
> Kerberos: TGS-REQ AMTBSRV02$@KL01.AMTB-M.ORG.MY from ipv4:
> 192.168.11.25:34819 for ldap/
> AMTBSRV02.KL01.AMTB-M.ORG.MY at KL01.AMTB-M.ORG.MY [canonicalize]
> Kerberos: TGS-REQ authtime: 2014-02-05T22:13:39 starttime:
> 2014-02-05T22:13:39 endtime: 2014-02-06T08:13:39 renew till: unset
> Terminating connection - 'kdc_tcp_call_loop: tstream_read_pdu_blob_recv()
> - NT_STATUS_CONNECTION_DISCONNECTED'
> imessaging: cleaning up /var/lib/samba/private/smbd.tmp/msg/msg.2299.96
> single_terminate: reason[kdc_tcp_call_loop: tstream_read_pdu_blob_recv() -
> NT_STATUS_CONNECTION_DISCONNECTED]
> Kerberos: TGS-REQ AMTBSRV02$@KL01.AMTB-M.ORG.MY from ipv4:
> 192.168.11.24:40001 for ldap/
> AMTBSRV02.KL01.AMTB-M.ORG.MY at KL01.AMTB-M.ORG.MY
> Kerberos: TGS-REQ authtime: 2014-02-05T22:13:39 starttime:
> 2014-02-05T22:13:40 endtime: 2014-02-06T08:13:39 renew till: unset
> Terminating connection - 'kdc_tcp_call_loop: tstream_read_pdu_blob_recv()
> - NT_STATUS_CONNECTION_DISCONNECTED'
> imessaging: cleaning up /var/lib/samba/private/smbd.tmp/msg/msg.2299.96
> single_terminate: reason[kdc_tcp_call_loop: tstream_read_pdu_blob_recv() -
> NT_STATUS_CONNECTION_DISCONNECTED]
> Kerberos: TGS-REQ AMTBSRV02$@KL01.AMTB-M.ORG.MY from ipv4:
> 192.168.11.25:56393 for krbtgt/KL01.AMTB-M.ORG.MY at KL01.AMTB-M.ORG.MY[forwarded, forwardable]
> Kerberos: TGS-REQ authtime: 2014-02-05T22:13:39 starttime:
> 2014-02-05T22:13:40 endtime: 2014-02-06T08:13:39 renew till: unset
> dreplsrv_notify_schedule(5) scheduled for: Wed Feb 5 22:13:47 2014 MYT
> dreplsrv_notify_schedule(5) scheduled for: Wed Feb 5 22:13:52 2014 MYT
> dreplsrv_notify_schedule(5) scheduled for: Wed Feb 5 22:13:57 2014 MYT
> dreplsrv_notify_schedule(5) scheduled for: Wed Feb 5 22:14:02 2014 MYT
> dreplsrv_notify_schedule(5) scheduled for: Wed Feb 5 22:14:07 2014 MYT
> dreplsrv_notify_schedule(5) scheduled for: Wed Feb 5 22:14:12 2014 MYT
> dreplsrv_notify_schedule(5) scheduled for: Wed Feb 5 22:14:17 2014 MYT
> dreplsrv_notify_schedule(5) scheduled for: Wed Feb 5 22:14:22 2014 MYT
> dreplsrv_periodic_run(): schedule pull replication
>
> dreplsrv_refresh_partition(DC=DomainDnsZones,DC=kl01,DC=amtb-m,DC=org,DC=my)
> dreplsrv_out_connection_attach(87e240b2-95f9-4cae-9dc6-c8412397eddf._
> msdcs.kl01.amtb-m.org.my): attach
>
> dreplsrv_refresh_partition(DC=ForestDnsZones,DC=kl01,DC=amtb-m,DC=org,DC=my)
> dreplsrv_out_connection_attach(87e240b2-95f9-4cae-9dc6-c8412397eddf._
> msdcs.kl01.amtb-m.org.my): attach
> dreplsrv_refresh_partition(DC=kl01,DC=amtb-m,DC=org,DC=my)
> dreplsrv_out_connection_attach(87e240b2-95f9-4cae-9dc6-c8412397eddf._
> msdcs.kl01.amtb-m.org.my): attach
>
> dreplsrv_refresh_partition(CN=Schema,CN=Configuration,DC=kl01,DC=amtb-m,DC=org,DC=my)
> dreplsrv_out_connection_attach(87e240b2-95f9-4cae-9dc6-c8412397eddf._
> msdcs.kl01.amtb-m.org.my): attach
> dreplsrv_refresh_partition(CN=Configuration,DC=kl01,DC=amtb-m,DC=org,DC=my)
> dreplsrv_out_connection_attach(87e240b2-95f9-4cae-9dc6-c8412397eddf._
> msdcs.kl01.amtb-m.org.my): attach
> dreplsrv_periodic_run(): run pending_ops memory=233
> ../source4/dsdb/repl/drepl_ridalloc.c:239: Requesting more RIDs from RID
> Manager
> dreplsrv_out_connection_attach(87e240b2-95f9-4cae-9dc6-c8412397eddf._
> msdcs.kl01.amtb-m.org.my): attach
> dreplsrv_periodic_schedule(300) scheduled for: Wed Feb 5 22:19:21 2014 MYT
> Mapped to DCERPC endpoint 135
> added interface enp2s0 ip=192.168.11.24 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s2 ip=192.168.11.25 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s3 ip=192.168.11.26 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s4 ip=192.168.11.27 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s0 ip=192.168.11.24 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s2 ip=192.168.11.25 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s3 ip=192.168.11.26 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s4 ip=192.168.11.27 bcast=192.168.11.255
> netmask=255.255.255.0
> dns child failed to find name '87e240b2-95f9-4cae-9dc6-c8412397eddf._
> msdcs.kl01.amtb-m.org.my' of type A
> dreplsrv_op_pull_source(WERR_BADFILE) for
> DC=DomainDnsZones,DC=kl01,DC=amtb-m,DC=org,DC=my
> Mapped to DCERPC endpoint 135
> added interface enp2s0 ip=192.168.11.24 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s2 ip=192.168.11.25 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s3 ip=192.168.11.26 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s4 ip=192.168.11.27 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s0 ip=192.168.11.24 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s2 ip=192.168.11.25 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s3 ip=192.168.11.26 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s4 ip=192.168.11.27 bcast=192.168.11.255
> netmask=255.255.255.0
> dns child failed to find name '87e240b2-95f9-4cae-9dc6-c8412397eddf._
> msdcs.kl01.amtb-m.org.my' of type A
> dreplsrv_op_pull_source(WERR_BADFILE) for
> DC=ForestDnsZones,DC=kl01,DC=amtb-m,DC=org,DC=my
> Mapped to DCERPC endpoint 135
> added interface enp2s0 ip=192.168.11.24 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s2 ip=192.168.11.25 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s3 ip=192.168.11.26 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s4 ip=192.168.11.27 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s0 ip=192.168.11.24 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s2 ip=192.168.11.25 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s3 ip=192.168.11.26 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s4 ip=192.168.11.27 bcast=192.168.11.255
> netmask=255.255.255.0
> dns child failed to find name '87e240b2-95f9-4cae-9dc6-c8412397eddf._
> msdcs.kl01.amtb-m.org.my' of type A
> dreplsrv_op_pull_source(WERR_BADFILE) for DC=kl01,DC=amtb-m,DC=org,DC=my
> Mapped to DCERPC endpoint 135
> added interface enp2s0 ip=192.168.11.24 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s2 ip=192.168.11.25 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s3 ip=192.168.11.26 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s4 ip=192.168.11.27 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s0 ip=192.168.11.24 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s2 ip=192.168.11.25 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s3 ip=192.168.11.26 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s4 ip=192.168.11.27 bcast=192.168.11.255
> netmask=255.255.255.0
> dns child failed to find name '87e240b2-95f9-4cae-9dc6-c8412397eddf._
> msdcs.kl01.amtb-m.org.my' of type A
> dreplsrv_op_pull_source(WERR_BADFILE) for
> CN=Schema,CN=Configuration,DC=kl01,DC=amtb-m,DC=org,DC=my
> Mapped to DCERPC endpoint 135
> added interface enp2s0 ip=192.168.11.24 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s2 ip=192.168.11.25 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s3 ip=192.168.11.26 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s4 ip=192.168.11.27 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s0 ip=192.168.11.24 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s2 ip=192.168.11.25 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s3 ip=192.168.11.26 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s4 ip=192.168.11.27 bcast=192.168.11.255
> netmask=255.255.255.0
> dns child failed to find name '87e240b2-95f9-4cae-9dc6-c8412397eddf._
> msdcs.kl01.amtb-m.org.my' of type A
> dreplsrv_op_pull_source(WERR_BADFILE) for
> CN=Configuration,DC=kl01,DC=amtb-m,DC=org,DC=my
> Mapped to DCERPC endpoint 135
> added interface enp2s0 ip=192.168.11.24 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s2 ip=192.168.11.25 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s3 ip=192.168.11.26 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s4 ip=192.168.11.27 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s0 ip=192.168.11.24 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s2 ip=192.168.11.25 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s3 ip=192.168.11.26 bcast=192.168.11.255
> netmask=255.255.255.0
> added interface enp2s4 ip=192.168.11.27 bcast=192.168.11.255
> netmask=255.255.255.0
> dns child failed to find name '87e240b2-95f9-4cae-9dc6-c8412397eddf._
> msdcs.kl01.amtb-m.org.my' of type A
> dreplsrv_op_pull_source(WERR_BADFILE) for CN=RID
> Manager$,CN=System,DC=kl01,DC=amtb-m,DC=org,DC=my
> ../source4/dsdb/repl/drepl_ridalloc.c:43: RID Manager failed RID
> allocation - WERR_BADFILE - extended_ret[0x0]
> kccsrv_periodic_run(): update
> Testing kcctpl_create_intersite_connections
> NT_STATUS_OK
> all_connected=1, 0 GUIDs returned
> found 1 existing nTDSConnection objects
> 0 connections have been deleted
> 0 connections have been added
>
>
>
> samba-tool drs showrepl from DC1 seem to be ok
> and also when samba-tool drs showrepl From DC2
> amtbsrv02 ~ # samba-tool drs showrepl
>
> Failed to bind to uuid e3514235-4b06-11d1-ab04-00c04fc2dcd2 for
> e3514235-4b06-11d1-ab04-00c04fc2dcd2 at ncacn_ip_tcp:
> amtbsrv02.kl01.amtb-m.org.my[1024,seal] NT_STATUS_UNSUCCESSFUL
> ERROR(<class 'samba.drs_utils.drsException'>): DRS connection to
> amtbsrv02.kl01.amtb-m.org.my failed - drsException: DRS connection to
> amtbsrv02.kl01.amtb-m.org.my failed: (-1073741823, 'Undetermined error')
> File "/usr/lib64/python2.7/site-packages/samba/netcmd/drs.py", line 39,
> in drsuapi_connect
> (ctx.drsuapi, ctx.drsuapi_handle, ctx.bind_supported_extensions) =
> drs_utils.drsuapi_connect(ctx.server, ctx.lp, ctx.creds)
> File "/usr/lib64/python2.7/site-packages/samba/drs_utils.py", line 54,
> in drsuapi_connect
> raise drsException("DRS connection to %s failed: %s" % (server, e))
>
> Please help....
>
More information about the samba
mailing list