[Samba] Fwd: Samba broken after 4.8 upgrade

Andrew Dumaresq dumaresq at gmail.com
Thu Apr 12 17:02:21 UTC 2018


Hello,

Today I tried to upgrade to samba 4.8.0, the upgrade seems to have failed,
and I can't seem to fix it or back out.  The issue seems to be I've lost
the some KRB tickets.  Here's and example of the errors i get:

samba-tool domain exportkeytab /tmp/test2
samba_kdc_fetch: could not find own KRBTGT in DB: dsdb_search at
../source4/dsdb/common/util.c:4641
ERROR(runtime): uncaught exception - }
  File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/__init__.py",
line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/domain.py",
line 143, in run
    net.export_keytab(keytab=keytab, principal=principal)

this missing KRBTGT also means that my kdc is not listening on port 88
netstat -tlpn |grep samba
tcp        0      0 192.168.1.10:636        0.0.0.0:*               LISTEN
    17772/samba: task[l
tcp        0      0 192.168.1.10:49152      0.0.0.0:*               LISTEN
    17767/samba: task[d
tcp        0      0 192.168.1.10:49153      0.0.0.0:*               LISTEN
    17767/samba: task[d
tcp        0      0 192.168.1.10:49154      0.0.0.0:*               LISTEN
    17767/samba: task[d
tcp        0      0 192.168.1.10:3268       0.0.0.0:*               LISTEN
    17772/samba: task[l
tcp        0      0 192.168.1.10:3269       0.0.0.0:*               LISTEN
    17772/samba: task[l
tcp        0      0 192.168.1.10:389        0.0.0.0:*               LISTEN
    17772/samba: task[l
tcp        0      0 192.168.1.10:135        0.0.0.0:*               LISTEN
    17767/samba: task[d



I suspect this has something to do with my domain being very old (I created
it while samba 4 was still in beta).  I was upgrading from samba-4.7.5 so
it wasn't a huge version jump.

I am also unable to downgrade, the source4/scripting/bin/sambaundoguididx
script core dumps without producing any messages so I can't downgrade
either (serves me right for not taking a backup first).


More information about the samba mailing list