On 14/02/2020 12:32, Alexander Bokovoy wrote:
On pe, 14 helmi 2020, lejeczek via FreeIPA-users wrote:
> hi everyone,
>
> I did something pretty vanilla:
>
> $ ipa-adtrust-install --unattended --admin-password=xxx
>
> Process showed first some warning about "unattended" but
> then this:
>
> Configuring CIFS
> [1/24]: validate server hostname
> [2/24]: stopping smbd
> [3/24]: creating samba domain object
> [4/24]: retrieve local idmap range
> [5/24]: creating samba config registry
> [6/24]: writing samba config file
> [7/24]: adding cifs Kerberos principal
> [8/24]: adding cifs and host Kerberos principals to the
> adtrust agents
> group
> [9/24]: check for cifs services defined on other replicas
> [10/24]: adding cifs principal to S4U2Proxy targets
> [11/24]: adding admin(group) SIDs
> [12/24]: adding RID bases
> [13/24]: updating Kerberos config
> 'dns_lookup_kdc' already set to 'true', nothing to do.
> [14/24]: activating CLDAP plugin
> [15/24]: activating sidgen task
> [16/24]: map BUILTIN\Guests to nobody group
> [17/24]: configuring smbd to start on boot
> [18/24]: adding special DNS service records
> [19/24]: restarting Directory Server to take MS PAC and
> LDAP plugins
> changes into account
> [20/24]: adding fallback group
> [21/24]: adding Default Trust View
> [22/24]: setting SELinux booleans
> [23/24]: starting CIFS services
> ipaserver.install.adtrustinstance: CRITICAL CIFS services
> failed to start
> [24/24]: restarting smbd
> Done configuring CIFS.
>
> Now, Samba would not start and I wonder what that might
> have to do with
> the above:
>
> tarting Samba SMB Daemon...
> [2020/02/14 11:21:34.801358, 0]
> ../../source3/passdb/pdb_interface.c:171(make_pdb_method_name)
>
> No builtin nor plugin backend for ipasam found
> smb.service: Main process exited, code=exited,
> status=1/FAILURE
> smb.service: Failed with result 'exit-code'.
> Failed to start Samba SMB Daemon.
>
> Or is is it unrelated? Hot to troubleshoot & fix it?
>
> I'm on Centos 8 with
> ipa-server-4.8.0-13.module_el8.1.0+265+e1e65be4.x86_64
There was an issue in CentOS 8.1 build that ipa was built
before samba
was build and thus ABI was different and failed.
https://bugs.centos.org/view.php?id=16929
Okey. Does it mean that only IPA would have to be re/built?
Any other things which need special attention?
many thanks, L.