[Samba] samba-tool illegal instruction setting up Kerberos auth for http

[Rowland Penny]

On 18/03/14 08:00, Stuart Longland wrote:
> Hi all,
>
> Has anyone noticed this behaviour in samba-tool?  I was trying to do the
> Apache Single Sign on authentication:
>
> https://wiki.samba.org/index.php/Authenticating_other_services_against_AD#Apache_Single_Sign-On
>
>> root at bnedevdc0:~# samba-tool domain exportkeytab /root/httpd.keytab --principal=HTTP/svn.myrealm.mydomain at MYREALM.MYDOMAIN -d10
>> INFO: Current debug levels:
>>    all: 10
>>    tdb: 10
>>    printdrivers: 10
>>    lanman: 10
>>    smb: 10
>>    rpc_parse: 10
>>    rpc_srv: 10
>>    rpc_cli: 10
>>    passdb: 10
>>    sam: 10
>>    auth: 10
>>    winbind: 10
>>    vfs: 10
>>    idmap: 10
>>    quota: 10
>>    acls: 10
>>    locking: 10
>>    msdfs: 10
>>    dmapi: 10
>>    registry: 10
>>    scavenger: 10
>>    dns: 10
>>    ldb: 10
>> lpcfg_load: refreshing parameters from /etc/samba/smb.conf
>> params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
>> Processing section "[global]"
>> Processing section "[netlogon]"
>> Processing section "[sysvol]"
>> pm_process() returned Yes
>> GENSEC backend 'gssapi_spnego' registered
>> GENSEC backend 'gssapi_krb5' registered
>> GENSEC backend 'gssapi_krb5_sasl' registered
>> GENSEC backend 'schannel' registered
>> GENSEC backend 'spnego' registered
>> GENSEC backend 'ntlmssp' registered
>> GENSEC backend 'krb5' registered
>> GENSEC backend 'fake_gssapi_krb5' registered
>> added interface eth0 ip=10.20.30.4 bcast=10.20.30.255 netmask=255.255.255.0
>> added interface eth0 ip=10.20.30.4 bcast=10.20.30.255 netmask=255.255.255.0
>> Illegal instruction
>> root at bnedevdc0:~# dmesg
>> [102985.769109] traps: samba-tool[11436] trap invalid opcode ip:7f3e6df228de sp:7fffdb366718 error:0 in libHDB_SAMBA4.so.0[7f3e6df21000+2000]
>> [103313.833497] traps: samba-tool[11780] trap invalid opcode ip:7f103c9158de sp:7fffd8573db8 error:0 in libHDB_SAMBA4.so.0[7f103c914000+2000]
>> [103426.961682] traps: samba-tool[11899] trap invalid opcode ip:7f6d0c55a8de sp:7fff7fdc02d8 error:0 in libHDB_SAMBA4.so.0[7f6d0c559000+2000]
>> root at bnedevdc0:~# samba-tool --version
>> 4.1.3-Ubuntu
>> root at bnedevdc0:~# dpkg -l samba*
>> Desired=Unknown/Install/Remove/Purge/Hold
>> | Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
>> |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
>> ||/ Name                    Version          Architecture     Description
>> +++-=======================-================-================-====================================================
>> ii  samba                   2:4.1.3+dfsg-2ub amd64            SMB/CIFS file, print, and login server for Unix
>> un  samba-ad-dc             <none>           <none>           (no description available)
>> un  samba-client            <none>           <none>           (no description available)
>> ii  samba-common            2:4.1.3+dfsg-2ub all              common files used by both the Samba server and clien
>> ii  samba-common-bin        2:4.1.3+dfsg-2ub amd64            Samba common files used by both the server and the c
>> un  samba-doc               <none>           <none>           (no description available)
>> ii  samba-dsdb-modules      2:4.1.3+dfsg-2ub amd64            Samba Directory Services Database
>> ii  samba-libs:amd64        2:4.1.3+dfsg-2ub amd64            Samba core libraries
>> un  samba-tools             <none>           <none>           (no description available)
>> ii  samba-vfs-modules       2:4.1.3+dfsg-2ub amd64            Samba Virtual FileSystem plugins
>> ii  samba4                  4.0.3+dfsg1-0.1u amd64            dummy transitional package for samba 4.x series
>> un  samba4-clients          <none>           <none>           (no description available)
>> un  samba4-common           <none>           <none>           (no description available)
>> un  samba4-common-bin       <none>           <none>           (no description available)
> Anyone else seen this?
>
> Regards,
Hi, is this on Ubuntu 14.04 by any chance? if so, I have an open bug on 
this at Ubuntu (bug 1289318). Debian had problems with samba version 
4.1.3, these had something to do with building against the wrong libs. A 
fix was found and added to version 4.1.4, this made it into Jessie 
before Ubuntu upgraded the samba package in 14.04, but Ubuntu still went 
with 4.1.3 and supposedly backported the fix, only it does not seem to 
have worked :-)

The only fix that I have found (and bear in mind, that I was only 
testing) is to download the latest 'testing' packages and install them.

Rowland