View Issue Details

IDProjectCategoryView StatusLast Update
0016515CentOS-7sambapublic2020-03-03 12:55
Reporterbgstack15 
PrioritynormalSeveritymajorReproducibilityalways
Status newResolutionopen 
Product Version7.7-1908 
Target VersionFixed in Version 
Summary0016515: Samba 4.9.1-6 always fails with ipasam backend
DescriptionI use samba with freeipa authentication to the SMB exports. The dedicated keytab has a valid key and I can kinit -kt /etc/samba/samba.keytab cifs/storage1.ipa.mydomain.com@IPA.MYDOMAIN.COM. However, samba fails to start.
Steps To Reproduce1. Upgrade from samba 4.8.3 to 4.9.1 with "yum update"
2. Restart samba.
Additional InformationRunning this command to downgrade the affected packages allows samba to start normally:

yum --enablerepo=C7.6.1810* downgrade samba samba-client samba-client-libs libsmbclient samba-common samba-common-libs samba-common-tools samba-libs samba-python samba-winbind samba-winbind-modules libwbclient

Suite 4.8.3 and before have worked well with this arrangement. The attached log file was captured at log level = 10 and includes the samba.conf contents.
Tagssamba
abrt_hash
URL

Activities

bgstack15

bgstack15

2019-10-01 21:55

reporter  

samba.log-scrubbed (77,262 bytes)
bgstack15

bgstack15

2020-03-03 12:55

reporter   ~0036436

As noted at https://bgstack15.wordpress.com/2017/05/10/samba-share-with-freeipa-auth/comment-page-1/#comment-3027, commenting two entries in the smb.conf (embedded in the attached samba.log-scrubbed) will make samba-4.9.1-10.el7_7.x86_64 work with ipasam as expected! Comment out these two lines:
# domain master = Yes
# domain logons = Yes

Issue History

Date Modified Username Field Change
2019-10-01 21:55 bgstack15 New Issue
2019-10-01 21:55 bgstack15 File Added: samba.log-scrubbed
2019-10-01 21:55 bgstack15 Tag Attached: samba
2020-03-03 12:55 bgstack15 Note Added: 0036436