[Samba] Update samba4 from 4.1.17 to 4.2.1 failed

[Rowland Penny]

On 22/05/15 06:58, 陳揚仁 wrote:
> Hi .
>
> I upgraded my samba4 servers from 4.1.17 to 4.2.1 .
>
> After upgrading ,  the samba4 servers becomed very slow and these 
> error logs occured :
>
> [2015/04/27 08:09:08.279400,  1] 
> ../source4/rpc_server/backupkey/dcesrv_backupke
> y.c:1423(bkrp_do_retrieve_server_wrap_key)
>  Unable to fetch value for secret 
> BCKUPKEY_34847c15-efd9-4430-ba82-bf7d3160e9e1
> , are we an undetected RODC?
> [2015/04/27 08:09:08.454487,  1] 
> ../source4/rpc_server/backupkey/dcesrv_backupke
> y.c:1423(bkrp_do_retrieve_server_wrap_key)
>  Unable to fetch value for secret 
> BCKUPKEY_34847c15-efd9-4430-ba82-bf7d3160e9e1
> , are we an undetected RODC?
> [2015/04/27 08:09:09.494243,  1] 
> ../source4/rpc_server/backupkey/dcesrv_backupke
> y.c:1423(bkrp_do_retrieve_server_wrap_key)
>  Unable to fetch value for secret 
> BCKUPKEY_34847c15-efd9-4430-ba82-bf7d3160e9e1
> , are we an undetected RODC?
>
>
>
> This is the smb.conf of my server :
>
> [global]
>        bind interfaces only = yes
>        interfaces = 10.5.1.26 127.0.0.1
>        workgroup = TKT
>        netbios name = DC
>        realm = TKT.COM
>        server role = active directory domain controller
>        dns forwarder = 10.5.1.1
>        ldap admin dn = cn=Administrator,cn=Users,dc=tkt,dc=com
>        idmap_ldb:use rfc2307 = Yes
>        server string = PDC server
>        hostname lookups = no
>        log level = 1
>        log file = /var/log/samba4/samba.log
>        max log size = 1024
>        guest account = nobody
>        wins support = yes
>        socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=65536
> SO_SNDBUF=65536
>        write cache size = 2097152
>        getwd cache=yes
>        min receivefile size = 16384
>        os level = 80
> [netlogon]
>        path = /ap/samba4/var/locks/sysvol/tkt.com/scripts
>        read only = No
> [sysvol]
>        path = /ap/samba4/var/locks/sysvol
>        read only = No
>
>
>
> I use this to compiled my smaba4 server :
>
> ./configure --prefix=/ap/samba4  \
>            --download \
>            --with-piddir=/var/run \
>            --with-logfilebase=/var/log/samba4 \
>            --with-ads     \
>            --disable-iprint
>
>
> Does anybody have any opinions or experience with my issue ?
>
>
>
> thanks
>
> Frank
>
>
>

It cannot find your backupkey, now whether this is down to your rather 
strange smb.conf is debatable, but I would suggest that you remove these 
unneeded or default lines:

        server string = AD DC
        ldap admin dn = cn=Administrator,cn=Users,dc=tkt,dc=com
        hostname lookups = no
        guest account = nobody
        wins support = yes
        socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=65536 
SO_SNDBUF=65536
        getwd cache=yes
        min receivefile size = 16384
        os level = 80

There was a bug similar to this: 
https://bugzilla.samba.org/show_bug.cgi?id=11097

Rowland