Samba dumps core if you try to export keytab in trusty

Bug #1289318 reported by Rowland Penny
22
This bug affects 4 people
Affects Status Importance Assigned to Milestone
samba (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

If you set samba up as an AD controller in trust and then run this command:

sudo samba-tool domain exportkeytab /etc/krb5.keytab -U Administrator

Nothing seems to happen and the keytab is not exported.

Run 'sudo su' and then run the command again, you get:

Illegal instruction (core dumped)

Unlike most of your bug reports, I actually know the cure, firstly the cause, On debian it was found that parts of samba were being built against the wrong libs, this was discovered in version 4.1.3, a patch was developed.

How to cure the problem, very easy, move to debian version 4.1.4 or 4.1.5

I know that you may say that it is a bit late now to upgrade a package, but think about it, do you really want to ship an LTS version with a badly broken major package, if it is a very easy fix???

lsb_release -rd
Description: Ubuntu Trusty Tahr (development branch)
Release: 14.04

 apt-cache policy samba
samba:
  Installed: 2:4.1.3+dfsg-2ubuntu3
  Candidate: 2:4.1.3+dfsg-2ubuntu3
  Version table:
 *** 2:4.1.3+dfsg-2ubuntu3 0
        500 http://gb.archive.ubuntu.com/ubuntu/ trusty/main amd64 Packages
        100 /var/lib/dpkg/status

Revision history for this message
Rowland Penny (rpenny241155) wrote :

18th Mar 19:00
OK, just downloaded an update and I am now on 2:4.1.3+dfsg-2ubuntu4, I still cannot get a keytab, same reason. Another user has also reported the same problem on the samba mailing list. I can confirm that this problem is easily repeatable, just install a fresh version of Ubuntu 14.04, install samba and provision as a DC, then try and get a keytab, I can confirm that you will not get it!!!

The only way that I can get a samba AD server to work on Ubuntu 14.04 is to download all the samba packages from debian jessie and install these, then it works, so could I please plead with you to stop messing about, drop version 4.1.3 and update to version 4.1.5 from jessie, Please, I beg you, I am down on my bended knees ;-)

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in samba (Ubuntu):
status: New → Confirmed
Revision history for this message
Stuart Longland (redhatter) wrote :

For the record, my initial report of problems was here:
https://lists.samba.org/archive/samba/2014-March/179844.html

Revision history for this message
Rowland Penny (rpenny241155) wrote :

If it helps there is this in dmesg:

[ 86.177156] samba-tool[1643]: segfault at 0 ip (null) sp 00007fff780ce138 error 14 in python2.7[400000+2bd000]

this is after login as normal user, changing to root via 'sudo su' and running 'samba-tool domain exportkeytab /etc/krb5.keytab'

the response on the command line is: Segmentation fault (core dumped)

You only get this response, if you run the command as root, if you run it as a normal user, you get no response.

As I said, this was a known problem with the debian 4.1.3 package and it went away with the debian 4.1.4 package.

Revision history for this message
Rowland Penny (rpenny241155) wrote :

You can close this bug now, you have updated samba from version 4.1.3 to version 4.1.6, though it would have been nice to have been informed of this.
I can confirm that with version 4.1.6, you can now export a keytab.
What I cannot understand is just why you went with 4.1.3 in the first place????

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.