View Issue Details

IDProjectCategoryView StatusLast Update
0016929CentOS-8ipa-serverpublic2020-02-17 08:28
Reporteropoplawski 
PriorityurgentSeveritycrashReproducibilityalways
Status acknowledgedResolutionopen 
Product Version8.1.1911 
Target VersionFixed in Version 
Summary0016929: ipa-server-trust-ad appears to built with the incorrect samba version
DescriptionWith:
samba-4.10.4-101.el8_1.x86_64
ipa-server-trust-ad-4.8.0-11.module_el8.1.0+253+3b90c921.x86_64

# pdbedit -s /dev/null -b ipasam -d5

errors with:

Attempting to find a passdb backend to match ipasam (ipasam)
No builtin backend found, trying to load plugin
load_module_absolute_path: Probing module '/usr/lib64/samba/pdb/ipasam.so'
Error loading module '/usr/lib64/samba/pdb/ipasam.so': /usr/lib64/samba/pdb/ipasam.so: undefined symbol: DEBUGLEVEL_CLASS

https://bugzilla.redhat.com/show_bug.cgi?id=1744926 seems to suggest that it was build with the wrong samba version
TagsNo tags attached.

Activities

opoplawski

opoplawski

2020-01-15 23:36

reporter   ~0036028

Indeed - https://koji.mbox.centos.org/pkgs/packages/ipa/4.8.0/11.module_el8.1.0+253+3b90c921/data/logs/x86_64/root.log shows that it was built with samba 4.9.1-8.el8
opoplawski

opoplawski

2020-01-15 23:48

reporter   ~0036029

I'll note that RHEL 8.1 appears to have a newer version of ipa in DL1: 4.8.0-13.module+el8.1.0+4923+c6efe041
elytscha

elytscha

2020-01-23 15:20

reporter   ~0036102

do you have found a workaround? btw. can i offer help here? what is needed to do to fix it?

compile the freeipa sources with the right samba version?
opoplawski

opoplawski

2020-01-23 15:33

reporter   ~0036103

My workaround was to install the RHEL8.1 packages :(. Re-compiling the ipa rpm with the proper deps would do it - though modules greatly complicates things here.
Sokel

Sokel

2020-01-23 19:14

reporter   ~0036108

The -13 still is compiled against the old samba 4.9.1 (why?). The workaround that works for me is to dnf downgrade samba back to 4.9.1. And then the samba service runs for ipa.service.
lejeczek

lejeczek

2020-02-17 08:28

reporter   ~0036296

My vote would go marking this as 'urgent'
If you integrate Samba with ipa-adtrust-install then "smb" service will fail to start.
regards, L.

Issue History

Date Modified Username Field Change
2020-01-15 23:30 opoplawski New Issue
2020-01-15 23:36 opoplawski Note Added: 0036028
2020-01-15 23:48 opoplawski Note Added: 0036029
2020-01-16 07:18 toracat Status new => acknowledged
2020-01-23 15:20 elytscha Note Added: 0036102
2020-01-23 15:33 opoplawski Note Added: 0036103
2020-01-23 19:14 Sokel Note Added: 0036108
2020-02-17 08:28 lejeczek Note Added: 0036296