1769256 – ipa-client-samba Installation fails

Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.

Bug 1769256 - ipa-client-samba Installation fails

Summary: ipa-client-samba Installation fails

Keywords:
Status:	CLOSED ERRATA
Alias:	None
Product:	Fedora
Classification:	Fedora
Component:	samba
Sub Component:
Version:	31
Hardware:	x86_64
OS:	Linux
Priority:	unspecified
Severity:	unspecified
Target Milestone:	---
Assignee:	Guenther Deschner
QA Contact:	Fedora Extras Quality Assurance
Docs Contact:
URL:
Whiteboard:
Duplicates (1):	1769254 (view as bug list)
Depends On:
Blocks:
TreeView+	depends on / blocked

Reported:	2019-11-06 10:04 UTC by Dirk
Modified:	2019-11-14 01:12 UTC (History)
CC List:	12 users (show)
Fixed In Version:	samba-4.11.2-1.fc31
Doc Type:	If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:	2019-11-14 01:12:27 UTC
Type:	Bug
Embargoed:
Dependent Products:

Attachments	(Terms of Use)
ipaclientsamba-install.log (24.00 KB, text/plain) 2019-11-06 10:08 UTC, Dirk	no flags	Details
View All

Description Dirk 2019-11-06 10:04:51 UTC

Description of problem:

ipa-client-samba install fails with the output :


Continue to configure the system with these values? [no]: yes
Cannot set machine account creds in Samba. Error:
CalledProcessError(Command ['/usr/bin/net', 'changesecretpw', '-f']
returned non-zero exit status 1: 'secrets_domain_info_kerberos_keys:
generation of a des-cbc-md5 key failed: Bad encryption
type\nsecrets_fetch_or_upgrade_domain_info:
secrets_domain_info_password_create(pw) failed for LINUX -
NT_STATUS_UNSUCCESSFUL\nsecrets_prepare_password_change:
secrets_fetch_or_upgrade_domain_info(LINUX) failed\nUnable to write the
machine account
password in the secrets database')
Traceback (most recent call last):
  File "/usr/sbin/ipa-client-samba", line 15, in <module>
    sys.exit(ipa_client_samba.run())
  File
"/usr/lib/python3.7/site-packages/ipaclient/install/ipa_client_samba.py",
line 724, in run
    fstore, statestore, options, domains[0], password
  File
"/usr/lib/python3.7/site-packages/ipaclient/install/ipa_client_samba.py",
line 358, in populate_samba_databases
    ipautil.run(args, stdin=password, encoding="utf-8")
  File "/usr/lib/python3.7/site-packages/ipapython/ipautil.py", line
598, in run
    p.returncode, arg_string, output_log, error_log
ipapython.ipautil.CalledProcessError: CalledProcessError(Command
['/usr/bin/net', 'changesecretpw', '-f'] returned non-zero exit status
1: 'secrets_domain_info_kerberos_keys: generation of a des-cbc-md5 key
failed: Bad encryption type\nsecrets_fetch_or_upgrade_domain_info:
secrets_domain_info_password_create(pw) failed for LINUX -
NT_STATUS_UNSUCCESSFUL\nsecrets_prepare_password_change:
secrets_fetch_or_upgrade_domain_info(LINUX) failed\nUnable to write the
machine account password in
the secrets database')


Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.Install freeipa-client 
2.Install freeipa-client-samba
3.

Actual results:

The Installation fails


Expected results:

Installation without any Error.

Additional info:

Comment 1 Dirk 2019-11-06 10:08:55 UTC

Created attachment 1633238 [details]
ipaclientsamba-install.log

Comment 2 Alexander Bokovoy 2019-11-06 10:15:55 UTC

*** Bug 1769254 has been marked as a duplicate of this bug. ***

Comment 3 Alexander Bokovoy 2019-11-06 10:16:39 UTC

Moving to the right component.

Comment 4 Alexander Bokovoy 2019-11-06 10:17:21 UTC

I'm running a new build for Rawhide that includes updated patch from https://gitlab.com/samba-team/samba/merge_requests/829

Comment 5 Fedora Update System 2019-11-06 12:16:43 UTC

FEDORA-2019-57d43f3b58 has been submitted as an update to Fedora 31. https://bodhi.fedoraproject.org/updates/FEDORA-2019-57d43f3b58

Comment 6 Fedora Update System 2019-11-06 12:18:06 UTC

FEDORA-2019-fba8841170 has been submitted as an update to Fedora 32. https://bodhi.fedoraproject.org/updates/FEDORA-2019-fba8841170

Comment 7 Isaac Boukris 2019-11-06 12:48:40 UTC

Hi Dirk, what version of samba packages do you have installed ? try enabling update-testing, check what's version there and if you still see the problem, thanks.

Comment 8 Dirk 2019-11-06 12:50:21 UTC

Here comes the packages i have installed:

[root@ipasamba ~]# rpm -qa | grep freeipa*
freeipa-client-common-4.8.1-4.fc31.noarch
freeipa-client-4.8.1-4.fc31.x86_64
freeipa-common-4.8.1-4.fc31.noarch
freeipa-client-samba-4.8.1-4.fc31.x86_64
[root@ipasamba ~]# rpm -qa | grep samba*
samba-client-libs-4.11.0-3.fc31.x86_64
samba-client-4.11.0-3.fc31.x86_64
python3-samba-4.11.0-3.fc31.x86_64
samba-common-4.11.0-3.fc31.noarch
samba-common-libs-4.11.0-3.fc31.x86_64
samba-libs-4.11.0-3.fc31.x86_64
samba-common-tools-4.11.0-3.fc31.x86_64
samba-4.11.0-3.fc31.x86_64
samba-winbind-4.11.0-3.fc31.x86_64
samba-winbind-modules-4.11.0-3.fc31.x86_64
freeipa-client-samba-4.8.1-4.fc31.x86_64

Comment 9 Alexander Bokovoy 2019-11-06 13:00:01 UTC

Ok, so these (4.11.0-3) are not the builds that have no-DES patches. The patches came in 4.11.1-1 or later.

Comment 10 Dirk 2019-11-06 13:08:27 UTC

so,after install Testing Updates everything works fine :)

[root@ipasamba ~]# rpm -qa | grep -i freeipa*
freeipa-client-common-4.8.1-4.fc31.noarch
freeipa-client-samba-4.8.1-4.fc31.x86_64
freeipa-common-4.8.1-4.fc31.noarch
freeipa-client-4.8.1-4.fc31.x86_64
[root@ipasamba ~]# rpm -qa | grep -i samab
[root@ipasamba ~]# rpm -qa | grep -i samba
samba-4.11.2-0.fc31.x86_64
samba-libs-4.11.2-0.fc31.x86_64
samba-winbind-4.11.2-0.fc31.x86_64
freeipa-client-samba-4.8.1-4.fc31.x86_64
samba-client-libs-4.11.2-0.fc31.x86_64
python3-samba-4.11.2-0.fc31.x86_64
samba-common-libs-4.11.2-0.fc31.x86_64
samba-common-tools-4.11.2-0.fc31.x86_64
samba-client-4.11.2-0.fc31.x86_64
samba-common-4.11.2-0.fc31.noarch
samba-winbind-modules-4.11.2-0.fc31.x86_64

Comment 11 Alexander Bokovoy 2019-11-06 13:10:41 UTC

Note that 4.11.2-0 is the build with previous version of no-DES patches. ;) The update I made as part of this bug should have 4.11.2-1.

Comment 12 Alexander Bokovoy 2019-11-06 13:20:47 UTC

Once update https://bodhi.fedoraproject.org/updates/FEDORA-2019-57d43f3b58 is pushed to testing, please test it too and help it with karma

Comment 13 Fedora Update System 2019-11-07 01:44:29 UTC

samba-4.11.2-1.fc31 has been pushed to the Fedora 31 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2019-57d43f3b58

Comment 14 Fedora Update System 2019-11-14 01:12:27 UTC

samba-4.11.2-1.fc31 has been pushed to the Fedora 31 stable repository. If problems still persist, please make note of it in this bug report.

Note You need to log in before you can comment on or make changes to this bug.