View Issue Details
|ID||Project||Category||View Status||Date Submitted||Last Update|
|0016515||CentOS-7||samba||public||2019-10-01 21:55||2020-03-03 12:55|
|Target Version||Fixed in Version|
|Summary||0016515: Samba 4.9.1-6 always fails with ipasam backend|
|Description||I use samba with freeipa authentication to the SMB exports. The dedicated keytab has a valid key and I can kinit -kt /etc/samba/samba.keytab cifs/storage1.ipa.mydomain.com@IPA.MYDOMAIN.COM. However, samba fails to start.|
|Steps To Reproduce||1. Upgrade from samba 4.8.3 to 4.9.1 with "yum update"|
2. Restart samba.
|Additional Information||Running this command to downgrade the affected packages allows samba to start normally:|
yum --enablerepo=C7.6.1810* downgrade samba samba-client samba-client-libs libsmbclient samba-common samba-common-libs samba-common-tools samba-libs samba-python samba-winbind samba-winbind-modules libwbclient
Suite 4.8.3 and before have worked well with this arrangement. The attached log file was captured at log level = 10 and includes the samba.conf contents.
samba.log-scrubbed (77,262 bytes)
As noted at https://bgstack15.wordpress.com/2017/05/10/samba-share-with-freeipa-auth/comment-page-1/#comment-3027, commenting two entries in the smb.conf (embedded in the attached samba.log-scrubbed) will make samba-4.9.1-10.el7_7.x86_64 work with ipasam as expected! Comment out these two lines:
# domain master = Yes
# domain logons = Yes