[Samba] samba-tool domain classicupgrade smb_krb5_context_init_basic failed (Invalid argument)

[Tom Robinson]

On 07/02/17 21:45, Tom Robinson via samba wrote:
> On 07/02/17 17:01, Andrew Bartlett via samba wrote:
>> On Tue, 2017-02-07 at 15:58 +1100, Tom Robinson via samba wrote:
>>> Hi,
>>> \
>>> Next rid = 13001
>>> krb5_init_context failed (Invalid argument)
>>> smb_krb5_context_init_basic failed (Invalid argument)
>>> #
>>>
>>> Is this a CentOS 6/7 difference issue or is the classicupgrade broken
>>> for Samba Version
>>> 4.2.14-SerNet? Any help is appreciated.
>> Remove the include lines from the krb5.conf, our internal Heimdal
>> doesn't understand them.
>>
> Thanks Andrew. I've taken that line out but now I just get Segmentation
> fault. :-/
>
> I also took a more extreme step of moving /etc/krb5.conf and
> /etc/krb5.conf.d out of /etc but samba-tool still seg faults.
>
> Is it anything to do with the groups it's complaining about below?
>
> # samba-tool domain classicupgrade --debuglevel=0 --dbdir
> /var/lib/samba/bentley/ --use-xattrs=yes --realm=mrc.motec.com.au
> --dns-backend=BIND9_DLZ /etc/samba/smb.bentley.conf
> Reading smb.conf
> Unknown parameter encountered: "share modes"
> Ignoring unknown parameter "share modes"
> Provisioning
> Exporting account policy
> Exporting groups
> Ignoring group 'Administrators' S-1-5-32-544 listed but then not found:
> Unable to enumerate members for alias, (-1073741487,The specified local
> group does not exist.)
> Ignoring group 'Account Operators' S-1-5-32-548 listed but then not
> found: Unable to enumerate members for alias, (-1073741487,The specified
> local group does not exist.)
> Ignoring group 'Print Operators' S-1-5-32-550 listed but then not found:
> Unable to enumerate members for alias, (-1073741487,The specified local
> group does not exist.)
> Ignoring group 'Backup Operators' S-1-5-32-551 listed but then not
> found: Unable to enumerate members for alias, (-1073741487,The specified
> local group does not exist.)
> Ignoring group 'Replicators' S-1-5-32-552 listed but then not found:
> Unable to enumerate members for alias, (-1073741487,The specified local
> group does not exist.)
> Exporting users
>   Skipping wellknown rid=500 (for username=root)
> Next rid = 13001
> Segmentation fault
Hmm, not sure where to go from here. Seems like this is not going to be fixed. Does anyone know if
the classiscupgrade in Version 4.2 also fail on CenOS 6?

That's not really what I want, though. What I want is an AD enabled samba version on CentOS/RHEL 7
using rpm packaging but it seems a difficult path to tread.

My preference is to manage software with RPMs. Perhaps I'm not looking hard enough or in the wrong
places; it appears that the available binary RPMs for CentOS/RHEL 7 all have AD disabled. Am I going
to be wasting my time trying to manually build the latest samba stable version on CentOS 7 with AD
enabled? Has anyone already done this successfully?



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba/attachments/20170209/8bfa5327/signature.sig>