Samba 4.10 with ipasam

[João Baúto]

Hi all,

I'm setting FreeIPA along with Samba and currently I'm running into an
issue with the ipasam module where if I use samba 4.9.X everything works as
expected while upgrading to 4.10.X, samba fails to load ipasam. Since the
ipasam.so comes from ipa-server-trust-ad, I'm linking it to the samba
modules folder.

-   Error loading module '/usr/local/samba/lib/pdb/ipasam.so': /usr
   /local/samba/lib/pdb/ipasam.so: undefined symbol: DEBUGLEVEL_CLASS

Is there a way of compiling a compatible version of ipasam with samba
4.10.X?

I'm running CentOS 7.6.1810 with FreeIPA 4.6.4.

Thanks!
JB

[Rob Crittenden]

João Baúto via FreeIPA-users wrote:
> Hi all,
>
> I'm setting FreeIPA along with Samba and currently I'm running into an
> issue with the ipasam module where if I use samba 4.9.X everything works
> as expected while upgrading to 4.10.X, samba fails to load ipasam. Since
> the ipasam.so comes from ipa-server-trust-ad, I'm linking it to the
> samba modules folder.
> Error loading module '/usr/local/samba/lib/pdb/ipasam.so':
> /usr/local/samba/lib/pdb/ipasam.so: undefined symbol: DEBUGLEVEL_CLASS
>
> Is there a way of compiling a compatible version of ipasam with samba
> 4.10.X?
>
> I'm running CentOS 7.6.1810 with FreeIPA 4.6.4.

See https://pagure.io/freeipa/issue/7893

rob
> Thanks!
> JB
>
> FreeIPA-users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedorahosted.org/archives/list/[e-mail]...

[Alexander Bokovoy]

Please don't do that.

There are many patches required. They are in ipa-4-6 branch upstream.

But I'd recommend to avoid messing up between samba and FreeIPA versions. Until FreeIPA 4.8.1, there are few issues that prevent file server operations. And there's still an issue on samba side that I haven't fixed yet for domain member operation. Finally, only in very recent samba version I fixed 12 year old bug that prevented resolving is users from Windows side.

There are so many fragile points if you'd deviate from tried and tested packaged versions.

----- João Baúto via FreeIPA-users  wrote:
> Hi all,
>
> I'm setting FreeIPA along with Samba and currently I'm running into an
> issue with the ipasam module where if I use samba 4.9.X everything works as
> expected while upgrading to 4.10.X, samba fails to load ipasam. Since the
> ipasam.so comes from ipa-server-trust-ad, I'm linking it to the samba
> modules folder.
> Error loading module '/usr/local/samba/lib/pdb/ipasam.so': /usr
>
> /local/samba/lib/pdb/ipasam.so: undefined symbol: DEBUGLEVEL_CLASS
>
> Is there a way of compiling a compatible version of ipasam with samba
> 4.10.X?
>
> I'm running CentOS 7.6.1810 with FreeIPA 4.6.4.
>
> Thanks!
> JB

[João Baúto]

Thanks for the reply Alexander & Rob.

I'm only considering a mismatch between samba and FreeIPA compatible
versions because the current version of samba in CentOS 7.6 still has a bug
in the clustering feature that wasn't backported.
Given that I'm using FreeIPA 4.6.4, which version of samba would
you recommend since I can't use 4.8.3?

Samba 4.9.12 seems to work without issues (I need to do further testing)

Thanks!
JB

Alexander Bokovoy  escreveu no dia terça, 27/08/2019
à(s) 18:26:
> Please don't do that.
>
> There are many patches required. They are in ipa-4-6 branch upstream.
>
> But I'd recommend to avoid messing up between samba and FreeIPA versions.
> Until FreeIPA 4.8.1, there are few issues that prevent file server
> operations. And there's still an issue on samba side that I haven't fixed
> yet for domain member operation. Finally, only in very recent samba version
> I fixed 12 year old bug that prevented resolving is users from Windows side.
>
> There are so many fragile points if you'd deviate from tried and tested
> packaged versions.
>
> ----- João Baúto via FreeIPA-users 
> wrote:
> > Hi all,
> >
> > I'm setting FreeIPA along with Samba and currently I'm running into an
> > issue with the ipasam module where if I use samba 4.9.X everything works
>
> as
> > expected while upgrading to 4.10.X, samba fails to load ipasam. Since the
> > ipasam.so comes from ipa-server-trust-ad, I'm linking it to the samba
> > modules folder.
> > Error loading module '/usr/local/samba/lib/pdb/ipasam.so': /usr
> >
> > /local/samba/lib/pdb/ipasam.so: undefined symbol: DEBUGLEVEL_CLASS
> >
> > Is there a way of compiling a compatible version of ipasam with samba
> > 4.10.X?
> >
> > I'm running CentOS 7.6.1810 with FreeIPA 4.6.4.
> >
> > Thanks!
> > JB
>
> --
> / Alexander Bokovoy