[Samba] samba upgrade fails: corrupted ./private/secrets.ldb?

Mon Feb 20 18:13:06 UTC 2017

On Mon, 2017-02-20 at 13:03 +0100, lists via samba wrote:
> Hi,
> 
> Hope someone can help.
> 
> We're on the sernet packages, and trying to update 4.3.8 to 4.3.13 
> (=latest in the repo) This is failing like this:
> 
> > root at domainmember:/etc/apt# dpkg --get-selections | grep sernet
> > sernet-samba                                    install
> > sernet-samba-client                             install
> > sernet-samba-common                             install
> > sernet-samba-keyring                            install
> > sernet-samba-libs:amd64                         install
> > sernet-samba-libsmbclient0:amd64                install
> > sernet-samba-winbind                            install
> > root at domainmember:/etc/apt# apt-get install sernet-samba sernet-
> > samba-client sernet-samba-common sernet-samba-keyring sernet-samba-
> > libs sernet-samba-libsmbclient0 sernet-samba-winbind
> > Reading package lists... Done
> > Building dependency tree
> > Reading state information... Done
> > sernet-samba-keyring is already the newest version.
> > Suggested packages:
> >   sernet-samba-ad
> > The following packages will be REMOVED:
> >   cifs-utils libwbclient0
> > The following packages will be upgraded:
> >   libsmbclient sernet-samba sernet-samba-client sernet-samba-common 
> > sernet-samba-libs sernet-samba-libsmbclient0 sernet-samba-winbind
> > 7 upgraded, 0 newly installed, 2 to remove and 271 not upgraded.
> > Need to get 10.3 MB of archives.
> > After this operation, 775 kB disk space will be freed.
> > Do you want to continue [Y/n]?
> > Get:1 https://download.sernet.de/subscriptions/samba/4.3/debian/
> > wheezy/main libsmbclient amd64 99:4.3.13-17 [3,856 B]
> > Get:2 https://download.sernet.de/subscriptions/samba/4.3/debian/
> > wheezy/main sernet-samba-libsmbclient0 amd64 99:4.3.13-17 [63.6 kB]
> > Get:3 https://download.sernet.de/subscriptions/samba/4.3/debian/
> > wheezy/main sernet-samba amd64 99:4.3.13-17 [2,058 kB]
> > Get:4 https://download.sernet.de/subscriptions/samba/4.3/debian/
> > wheezy/main sernet-samba-winbind amd64 99:4.3.13-17 [504 kB]
> > Get:5 https://download.sernet.de/subscriptions/samba/4.3/debian/
> > wheezy/main sernet-samba-libs amd64 99:4.3.13-17 [6,782 kB]
> > Get:6 https://download.sernet.de/subscriptions/samba/4.3/debian/
> > wheezy/main sernet-samba-client amd64 99:4.3.13-17 [734 kB]
> > Get:7 https://download.sernet.de/subscriptions/samba/4.3/debian/
> > wheezy/main sernet-samba-common all 99:4.3.13-17 [149 kB]
> > Fetched 10.3 MB in 2s (3,765 kB/s)
> > Reading changelogs... Done
> > (Reading database ... 155107 files and directories currently
> > installed.)
> > Removing cifs-utils ...
> > Removing libwbclient0:amd64 ...
> > Processing triggers for man-db ...
> > (Reading database ... 155086 files and directories currently
> > installed.)
> > Preparing to replace libsmbclient:amd64 99:4.3.8-11 (using
> > .../libsmbclient_99%3a4.3.13-17_amd64.deb) ...
> > Unpacking replacement libsmbclient:amd64 ...
> > Preparing to replace sernet-samba-libsmbclient0:amd64 99:4.3.8-11
> > (using .../sernet-samba-libsmbclient0_99%3a4.3.13-17_amd64.deb) ...
> > Unpacking replacement sernet-samba-libsmbclient0:amd64 ...
> > Preparing to replace sernet-samba 99:4.3.8-11 (using .../sernet-
> > samba_99%3a4.3.13-17_amd64.deb) ...
> > Unpacking replacement sernet-samba ...
> > Preparing to replace sernet-samba-winbind 99:4.3.8-11 (using
> > .../sernet-samba-winbind_99%3a4.3.13-17_amd64.deb) ...
> > Unpacking replacement sernet-samba-winbind ...
> > Preparing to replace sernet-samba-libs:amd64 99:4.3.8-11 (using
> > .../sernet-samba-libs_99%3a4.3.13-17_amd64.deb) ...
> > Unpacking replacement sernet-samba-libs:amd64 ...
> > Preparing to replace sernet-samba-client 99:4.3.8-11 (using
> > .../sernet-samba-client_99%3a4.3.13-17_amd64.deb) ...
> > Unpacking replacement sernet-samba-client ...
> > Preparing to replace sernet-samba-common 99:4.3.8-11 (using
> > .../sernet-samba-common_99%3a4.3.13-17_all.deb) ...
> > Unpacking replacement sernet-samba-common ...
> > Processing triggers for man-db ...
> > Setting up sernet-samba-common (99:4.3.13-17) ...
> > Setting up sernet-samba-libs:amd64 (99:4.3.13-17) ...
> > Setting up sernet-samba-libsmbclient0:amd64 (99:4.3.13-17) ...
> > Setting up libsmbclient:amd64 (99:4.3.13-17) ...
> > Setting up sernet-samba-client (99:4.3.13-17) ...
> > transaction_read: failed at off=825241399 len=24
> > failed to copy ./private/secrets.ldb
> > dpkg: error processing sernet-samba-client (--configure):
> >  subprocess installed post-installation script returned error exit
> > status 123
> > dpkg: dependency problems prevent configuration of sernet-samba:
> >  sernet-samba depends on sernet-samba-client (= 99:4.3.13-17);
> > however:
> >   Package sernet-samba-client is not configured yet.
> > 
> > dpkg: error processing sernet-samba (--configure):
> >  dependency problems - leaving unconfigured
> > dpkg: dependency problems prevent configuration of sernet-samba-
> > winbind:
> >  sernet-samba-winbind depends on sernet-samba-client (= 99:4.3.13-
> > 17); however:
> >   Package sernet-samba-client is not configured yet.
> > 
> > dpkg: error processing sernet-samba-winbind (--configure):
> >  dependency problems - leaving unconfigured
> > Errors were encountered while processing:
> >  sernet-samba-client
> >  sernet-samba
> >  sernet-samba-winbind
> > E: Sub-process /usr/bin/dpkg returned an error code (1)
> 
> When looking at secrets.ldb manually:
> > root at domainmember:/var/lib/samba# tdbbackup -s testMJ
> > /var/lib/samba/private/secrets.ldb
> > transaction_read: failed at off=825241399 len=24
> > failed to copy /var/lib/samba/private/secrets.ldb
> > root at domainmember:/var/lib/samba#
> 
> So, perhaps I'm stuck with a corrupted secrets.ldb file..?

I think you do.  

> Any ideas how to proceed now?

If this is corrupt, what else is?

As a (very) rough guide on to how to proceed from here:

ldbdump may help recover the contents, then I think it will be a task
of re-creating the ldb from what you can find, the template (make a new
similar provision and see what it has set) and the running the
./source4/scripting/devel/chgtdcpass script to re-sync the passwords.

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba