AIX Open Source

AIX Open Source

Share your experiences and connect with fellow developers to discover how to build and manage open source software for the AIX operating system

 View Only
  • 1.  samba 4 net join core dumps

    Posted Wed October 18, 2023 01:02 AM

    Hi there,


    I'm trying to get samba 4 running for a customer. They were running an older "pware" version of samba 3 but need to update.

    I installed the "dnf" package manager and used that to install the latest version of samba 4. It installed a bunch of dependencies like it always does. I also downloaded and installed openssl 1.1.1.1202 and openssh 8.1.112.1201 as they had much older versions of these (not sure from where).

    The LPAR is running 7200-05-02-2114. Yes I know it's old - the customer is rather anti-update, the last time we updated AIX was only because it was required to move from Power 7 hardware to Power 9. However, the LPAR I'm installing on is still running on a P7. Suffice to say there's probably no way we'll get to update AIX on this one.

    dnf installed samba 4.18.5. It didn't install the krb5-libs package, nor did it install samba-winbind-krb5-locator, both of which I installed later after reading other posts on this forum.

    Winbindd starts fine, but when I attempt to join an AD domain, I get a core dump. From the error log, it looks like a kerberos issue (see below).

    Samba packages:

    root@sndbpd10:/var/log/samba # rpm -qa | grep sam | sort
    samba-4.18.5-1.ppc
    samba-client-4.18.5-1.ppc
    samba-common-4.18.5-1.ppc
    samba-devel-4.18.5-1.ppc
    samba-libs-4.18.5-1.ppc
    samba-test-4.18.5-1.ppc
    samba-test-libs-4.18.5-1.ppc
    samba-winbind-4.18.5-1.ppc
    samba-winbind-clients-4.18.5-1.ppc
    samba-winbind-krb5-locator-4.18.5-1.ppc
    root@sndbpd10:/var/log/samba # rpm -qa | grep krb | sort
    krb5-libs-1.20.1-1.ppc
    samba-winbind-krb5-locator-4.18.5-1.ppc
    root@sndbpd10:/var/log/samba #


    Openssl/ssh:

    root@sndbpd10:/var/log/samba # lslpp -L openssl*
      Fileset                      Level  State  Type  Description (Uninstaller)
      ----------------------------------------------------------------------------
      openssl.base            1.1.1.1202    C     F    Open Secure Socket Layer
      openssl.license         1.1.1.1202    C     F    Open Secure Socket License
      openssl.man.en_US       1.1.1.1202    C     F    Open Secure Socket Layer


    root@sndbpd10:/var/log/samba # lslpp -L openssh*
      Fileset                      Level  State  Type  Description (Uninstaller)
      ----------------------------------------------------------------------------
      openssh.base.client   8.1.112.1201    C     F    Open Secure Shell Commands
      openssh.base.server   8.1.112.1201    C     F    Open Secure Shell Server
      openssh.license       8.1.112.1201    C     F    Open Secure Shell License
      openssh.man.en_US     8.1.112.1201    C     F    Open Secure Shell  Documentation - U.S. English
      openssh.msg.en_US     8.1.112.1201    C     F    Open Secure Shell Messages - U.S. English


    From errpt:

    LABEL:          CORE_DUMP
    IDENTIFIER:     A924A5FC

    Date/Time:       Mon Oct 16 15:56:37 EETDT 2023
    Sequence Number: 12228705
    Machine Id:      00F778824C00
    Node Id:         sndbpd10
    Class:           S
    Type:            PERM
    WPAR:            Global
    Resource Name:   SYSPROC

    Description
    SOFTWARE PROGRAM ABNORMALLY TERMINATED

    Probable Causes
    SOFTWARE PROGRAM

    User Causes
    USER GENERATED SIGNAL

            Recommended Actions
            CORRECT THEN RETRY

    Failure Causes
    SOFTWARE PROGRAM

            Recommended Actions
            RERUN THE APPLICATION PROGRAM
            IF PROBLEM PERSISTS THEN DO THE FOLLOWING
            CONTACT APPROPRIATE SERVICE REPRESENTATIVE

    Detail Data
    SIGNAL NUMBER
               4
    USER'S PROCESS ID:
                  10092840
    FILE SYSTEM SERIAL NUMBER
               1
    INODE NUMBER
                     29110
    CORE FILE NAME
    /etc/samba/core
    PROGRAM NAME
    net
    STACK EXECUTION DISABLED
               0
    COME FROM ADDRESS REGISTER
    krb5_stor 44

    PROCESSOR ID
      hw_fru_id: 0
      hw_cpu_id: 3

    ADDITIONAL INFORMATION
    ??
    krb5_stor 48
    fkt_next_ 48
    fkt_next_ 38
    krb5_kt_n B8
    smb_krb5_ 3E4
    smb_krb5_ 10C
    add_kt_en 2A4
    ads_keyta 548
    ads_keyta 1DC
    libnet_jo 64
    libnet_jo 2C
    libnet_jo 198
    libnet_Jo 154
    net_ads_j 688
    net_run_f C0
    net_ads 348
    net_run_f C0
    main 1168
    __start 6C

    Symptom Data
    REPORTABLE
    1
    INTERNAL ERROR
    0
    SYMPTOM CODE
    PCSS/SPI2 FLDS/net SIG/4 FLDS/krb5_stor VALU/48
    root@sndbpd10:/var/log/samba #


    Any help would be much appreciated.

    Cheers,

    Peter



    ------------------------------
    Peter McFarlane,
    andersenIT
    Brisbane
    ------------------------------


  • 2.  RE: samba 4 net join core dumps

    Posted Wed October 18, 2023 01:48 AM

    Whether the smb.conf has "kerberos method = secrets and keytab" option ? There is a kerberos issue with Samba on AIX when that option is enabled. We are checking on that. 



    ------------------------------
    Ayappan P
    ------------------------------



  • 3.  RE: samba 4 net join core dumps

    Posted Wed October 18, 2023 02:40 AM

    Hi Ayappan,

    Yes, I had "kerberos method = secrets and keytab" option set, it was a carry-over from the previous version. testparm didn't say anything about it, so I thought it was safe to leave.

    Anyway, I've removed it and successfully joined the domain. Now it remains to be seen if we can access the shares.

    Thanks for the reply.

    Cheers,

    Peter



    ------------------------------
    petermc 9BBD
    andersenIT
    Brisbane
    ------------------------------