[Freeipa-users] Samba Failing to start (Causing FreeIPA to not start!)

[Sumit Bose]

On Wed, Jul 22, 2015 at 11:14:51AM -0700, William Graboyes wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
> 
> Hi All,
> 
> I have been messing around with AD trust installs mainly around doing
> ntlm_auth for a radius server.
> 
> However, as I was unable to see some of the needed resources, I
> thought maybe IPA may need a kick.
> 
> So I ran the following command
> 
> `ipactl restart`
> 
> # ipactl restart
> Restarting Directory Service
> Restarting krb5kdc Service
> Restarting kadmin Service
> Restarting ipa_memcached Service
> Restarting httpd Service
> Restarting ipa-otpd Service
> Starting smb Service
> Job for smb.service failed. See 'systemctl status smb.service' and
> 'journalctl -xn' for details.
> Failed to start smb Service
> Shutting down
> Aborting ipactl
> 
> # systemctl status smb.service
> smb.service - Samba SMB Daemon
>    Loaded: loaded (/usr/lib/systemd/system/smb.service; disabled)
>    Active: failed (Result: exit-code) since Wed 2015-07-22 11:01:44
> PDT; 20s ago
>   Process: 16752 ExecStart=/usr/sbin/smbd $SMBDOPTIONS (code=exited,
> status=1/FAILURE)
>  Main PID: 16752 (code=exited, status=1/FAILURE)
>    Status: "Starting process..."
>    CGroup: /system.slice/smb.service
> 
> Jul 22 11:01:43 ipa-server-1.foo.bar systemd[1]: Starting Samba SMB
> Daemon...
> Jul 22 11:01:43 ipa-server-1.foo.bar smbd[16751]: [2015/07/22
> 11:01:43.956721,  0] ../source3/smbd/server.c:1269(main)
> Jul 22 11:01:44 ipa-server-1.foo.bar smbd[16752]: GSSAPI client step 1
> Jul 22 11:01:44 ipa-server-1.foo.bar smbd[16752]: GSSAPI client step 1
> Jul 22 11:01:44 ipa-server-1.foo.bar smbd[16752]: GSSAPI client step 1
> Jul 22 11:01:44 ipa-server-1.foo.bar smbd[16752]: GSSAPI client step 2
> Jul 22 11:01:44 ipa-server-1.foo.bar systemd[1]: smb.service: main
> process exited, code=exited, status=1/FAILURE
> Jul 22 11:01:44 ipa-server-1.foo.bar systemd[1]: Failed to start Samba
> SMB Daemon.
> Jul 22 11:01:44 ipa-server-1.foo.bar systemd[1]: Unit smb.service
> entered failed state.
> 
> journalctl -xn provides no useful information, however journalctl
> does... sorta:
> 
> Jul 22 11:03:19 ipa-server-1.foo.bar smbd[16903]: [2015/07/22
> 11:03:19.824614,  0] ipa_sam.c:3574(get_fallback_group_sid)
> Jul 22 11:03:19 ipa-server-1.foo.bar smbd[16903]: Missing mandatory
> attribute ipaNTSecurityIdentifier.
> Jul 22 11:03:19 ipa-server-1.foo.bar smbd[16903]: [2015/07/22
> 11:03:19.824829,  0] ipa_sam.c:4526(pdb_init_ipasam)
> Jul 22 11:03:19 ipa-server-1.foo.bar smbd[16903]: Cannot find SID of
> fallback group.
> Jul 22 11:03:19 ipa-server-1.foo.bar smbd[16903]: [2015/07/22
> 11:03:19.824878,  0]
> ../source3/passdb/pdb_interface.c:178(make_pdb_method_name)
> Jul 22 11:03:19 ipa-server-1.foo.bar smbd[16903]: pdb backend
> ipasam:ldapi://%2fvar%2frun%2fslapd-CENIC-ORG.socket did not correctly
> init (error was NT_STATUS_INVALID_PARAMETER)
> Jul 22 11:03:19 ipa-server-1.foo.bar systemd[1]: smb.service: main
> process exited, code=exited, status=1/FAILURE
> Jul 22 11:03:19 ipa-server-1.foo.bar systemd[1]: Failed to start Samba
> SMB Daemon.
> Jul 22 11:03:19 ipa-server-1.foo.bar systemd[1]: Unit smb.service
> entered failed state.

You can try and run 'ipa-adtrust-install' a second time. This might add
all attributes smbd needs.


HTH

bye,
Sumit

> 
> 
> Thanks,
> Bill
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG/MacGPG2 v2
> Comment: GPGTools - https://gpgtools.org
> 
> iQIcBAEBCgAGBQJVr92bAAoJEJFMz73A1+zrgmAQAJp9DXynmqX89gWlacRmS/Hy
> HiwAaiHXmCG7cpWY0PE68l8XgUmpBtOWQJ7hPv83BG1DAyPX267npnFgtJ8t50j7
> mwr9OyuKNiQs0ki4wOnnyNt2xGTgQimugQG0bQsIbP0QBoVAOu6RjK+ucGpagWv8
> zcdIjVP1jjf7I9KtgYzSBT1siFfcP1NAVnd47WC7ombL0db0KIi9oWNy6xXx5rkq
> cSmfonN7jFmkn4gHPzNcqZAIVG+IFJfpqU/OAQrELjkcCXM57BRuzwffnI0DFt6d
> Wm7liuoZHRABlaQ+L9OazCFPGOzpTWKCICdW4Vq6ixpnBG5eRR24Yfqn0z+86R4u
> WmCz2aJEDa2zlZ4IYXZNnIxWkANg+cAxutBKPvyCmQxjxNz9YbPshhQBGG3JVf66
> B3CquNAXNw5O5N/vlKl8RtA4/xArRfvvXtofVrOgRAsjLw2Xdw8tahfIJKptNyYO
> 86CDmyxgoK2ucdncJ5dC8GhX1ajBf5Mu8YnFC7MlfrS72TxsjCBMs5Y5rRmwZwA6
> ZF8TkfaZJmQc/bNe9V/+Ol/qXZM28ZrvZTs68/jTlRlruNc2D9458mdajKxUZB3n
> OaIdE/hXqH7HB32qp9733TCtFxRoJlrD5tVURkHl9kqgnqKxcDZ56VPmNYRn4GYu
> Y7j1+rZUNTtgDUJDk+Jk
> =xQLh
> -----END PGP SIGNATURE-----
> 
> -- 
> Manage your subscription for the Freeipa-users mailing list:
> https://www.redhat.com/mailman/listinfo/freeipa-users
> Go to http://freeipa.org for more info on the project