Failed to update to Samba DC 4.16

dnutan · November 27, 2022, 9:02pm

The file /usr/libexec/nsdc-run-worker does not exist?

yum reinstall nethserver-dc

hector · November 27, 2022, 9:16pm

Reinstalled but the paths are these

/usr/libexec/nethserver/nsdc-run-worker
/usr/libexec/nethserver/ptrack-nsdc-install
/usr/libexec/nethserver/read-nssamba-version

Full rpm -ql nethserver-dc

/etc/backup-config.d/nethserver-dc.exclude
/etc/backup-config.d/nethserver-dc.include
/etc/e-smith/db/configuration/defaults/nsdc
/etc/e-smith/db/configuration/defaults/nsdc/IpAddress
/etc/e-smith/db/configuration/defaults/nsdc/ProvisionType
/etc/e-smith/db/configuration/defaults/nsdc/bridge
/etc/e-smith/db/configuration/defaults/nsdc/status
/etc/e-smith/db/configuration/defaults/nsdc/type
/etc/e-smith/events/actions/nethserver-dc-autoupdate
/etc/e-smith/events/actions/nethserver-dc-change-ip
/etc/e-smith/events/actions/nethserver-dc-condrestart
/etc/e-smith/events/actions/nethserver-dc-create-bridge
/etc/e-smith/events/actions/nethserver-dc-createadmins
/etc/e-smith/events/actions/nethserver-dc-createldapservice
/etc/e-smith/events/actions/nethserver-dc-factory-reset
/etc/e-smith/events/actions/nethserver-dc-firststart
/etc/e-smith/events/actions/nethserver-dc-fixchroot
/etc/e-smith/events/actions/nethserver-dc-fixinclude
/etc/e-smith/events/actions/nethserver-dc-group-create
/etc/e-smith/events/actions/nethserver-dc-group-delete
/etc/e-smith/events/actions/nethserver-dc-group-modify
/etc/e-smith/events/actions/nethserver-dc-install
/etc/e-smith/events/actions/nethserver-dc-join
/etc/e-smith/events/actions/nethserver-dc-ldbfixes
/etc/e-smith/events/actions/nethserver-dc-machine-grants
/etc/e-smith/events/actions/nethserver-dc-migrate
/etc/e-smith/events/actions/nethserver-dc-network-reset
/etc/e-smith/events/actions/nethserver-dc-password-policy
/etc/e-smith/events/actions/nethserver-dc-password-set
/etc/e-smith/events/actions/nethserver-dc-post-backup
/etc/e-smith/events/actions/nethserver-dc-post-restore
/etc/e-smith/events/actions/nethserver-dc-pre-backup
/etc/e-smith/events/actions/nethserver-dc-pre-restore
/etc/e-smith/events/actions/nethserver-dc-provision
/etc/e-smith/events/actions/nethserver-dc-set-upn
/etc/e-smith/events/actions/nethserver-dc-sync-upn
/etc/e-smith/events/actions/nethserver-dc-sysvolreset
/etc/e-smith/events/actions/nethserver-dc-upgrade
/etc/e-smith/events/actions/nethserver-dc-user-create
/etc/e-smith/events/actions/nethserver-dc-user-delete
/etc/e-smith/events/actions/nethserver-dc-user-lock
/etc/e-smith/events/actions/nethserver-dc-user-modify
/etc/e-smith/events/actions/nethserver-dc-user-unlock
/etc/e-smith/events/actions/nethserver-dc-waitstart
/etc/e-smith/events/group-create/S40nethserver-dc-group-create
/etc/e-smith/events/group-delete/S40nethserver-dc-group-delete
/etc/e-smith/events/group-modify/S40nethserver-dc-group-modify
/etc/e-smith/events/interface-update/S71nethserver-dc-condrestart
/etc/e-smith/events/interface-update/services2adjust/nsdc
/etc/e-smith/events/migration-import/S25nethserver-dc-migrate
/etc/e-smith/events/nethserver-dc-change-ip/S30nethserver-dc-change-ip
/etc/e-smith/events/nethserver-dc-factory-reset/S30nethserver-dc-factory-reset
/etc/e-smith/events/nethserver-dc-save/S01nethserver-dc-create-bridge
/etc/e-smith/events/nethserver-dc-save/S02nethserver-dc-install
/etc/e-smith/events/nethserver-dc-save/S10nethserver-dc-provision
/etc/e-smith/events/nethserver-dc-save/S95nethserver-dc-waitstart
/etc/e-smith/events/nethserver-dc-save/S96nethserver-dc-createldapservice
/etc/e-smith/events/nethserver-dc-save/S96nethserver-dc-join
/etc/e-smith/events/nethserver-dc-save/S97nethserver-dc-password-policy
/etc/e-smith/events/nethserver-dc-save/S97nethserver-dc-set-upn
/etc/e-smith/events/nethserver-dc-save/S98nethserver-dc-createadmins
/etc/e-smith/events/nethserver-dc-save/S98nethserver-dc-machine-grants
/etc/e-smith/events/nethserver-dc-save/services2adjust/dnsmasq
/etc/e-smith/events/nethserver-dc-save/services2adjust/nsdc
/etc/e-smith/events/nethserver-dc-save/templates2expand/etc/hosts
/etc/e-smith/events/nethserver-dc-save/templates2expand/etc/krb5.conf
/etc/e-smith/events/nethserver-dc-save/templates2expand/etc/sysconfig/nsdc
/etc/e-smith/events/nethserver-dc-save/templates2expand/var/lib/machines/nsdc/etc/hostname
/etc/e-smith/events/nethserver-dc-save/templates2expand/var/lib/machines/nsdc/etc/hosts
/etc/e-smith/events/nethserver-dc-save/templates2expand/var/lib/machines/nsdc/etc/ntp.conf
/etc/e-smith/events/nethserver-dc-save/templates2expand/var/lib/machines/nsdc/etc/resolv.conf
/etc/e-smith/events/nethserver-dc-save/templates2expand/var/lib/machines/nsdc/etc/samba/smb.conf.include
/etc/e-smith/events/nethserver-dc-save/templates2expand/var/lib/machines/nsdc/etc/systemd/network/green.network
/etc/e-smith/events/nethserver-dc-save/templates2expand/var/lib/machines/nsdc/etc/systemd/system/nsdc-run.socket
/etc/e-smith/events/nethserver-dc-save/templates2expand/var/lib/machines/nsdc/etc/systemd/system/nsdc-run@.service
/etc/e-smith/events/nethserver-dc-save/templates2expand/var/lib/machines/nsdc/etc/systemd/system/samba-provision.service
/etc/e-smith/events/nethserver-dc-save/templates2expand/var/lib/machines/nsdc/srv/post-provision.sh
/etc/e-smith/events/nethserver-dc-save/templates2expand/var/lib/machines/nsdc/srv/smb.ns6upgrade.conf
/etc/e-smith/events/nethserver-dc-update
/etc/e-smith/events/nethserver-dc-update/S00initialize-default-databases
/etc/e-smith/events/nethserver-dc-update/S50nethserver-dc-autoupdate
/etc/e-smith/events/nethserver-dc-update/S94nethserver-dc-firststart
/etc/e-smith/events/nethserver-dc-update/S95nethserver-dc-fixchroot
/etc/e-smith/events/nethserver-dc-update/S96nethserver-dc-createldapservice
/etc/e-smith/events/nethserver-dc-update/S96nethserver-dc-machine-grants
/etc/e-smith/events/nethserver-dc-update/templates2expand/etc/sysconfig/nsdc
/etc/e-smith/events/nethserver-dc-upgrade/S20nethserver-dc-fixinclude
/etc/e-smith/events/nethserver-dc-upgrade/S30nethserver-dc-upgrade
/etc/e-smith/events/nethserver-dc-upgrade/S80nethserver-dc-ldbfixes
/etc/e-smith/events/nethserver-dc-upgrade/templates2expand/etc/hosts
/etc/e-smith/events/nethserver-dc-upgrade/templates2expand/etc/krb5.conf
/etc/e-smith/events/nethserver-dc-upgrade/templates2expand/etc/sysconfig/nsdc
/etc/e-smith/events/nethserver-dc-upgrade/templates2expand/var/lib/machines/nsdc/etc/hostname
/etc/e-smith/events/nethserver-dc-upgrade/templates2expand/var/lib/machines/nsdc/etc/hosts
/etc/e-smith/events/nethserver-dc-upgrade/templates2expand/var/lib/machines/nsdc/etc/ntp.conf
/etc/e-smith/events/nethserver-dc-upgrade/templates2expand/var/lib/machines/nsdc/etc/resolv.conf
/etc/e-smith/events/nethserver-dc-upgrade/templates2expand/var/lib/machines/nsdc/etc/samba/smb.conf.include
/etc/e-smith/events/nethserver-dc-upgrade/templates2expand/var/lib/machines/nsdc/etc/systemd/network/green.network
/etc/e-smith/events/nethserver-dc-upgrade/templates2expand/var/lib/machines/nsdc/etc/systemd/system/nsdc-run.socket
/etc/e-smith/events/nethserver-dc-upgrade/templates2expand/var/lib/machines/nsdc/etc/systemd/system/nsdc-run@.service
/etc/e-smith/events/nethserver-dc-upgrade/templates2expand/var/lib/machines/nsdc/etc/systemd/system/samba-provision.service
/etc/e-smith/events/nethserver-dc-upgrade/templates2expand/var/lib/machines/nsdc/srv/post-provision.sh
/etc/e-smith/events/nethserver-dc-upgrade/templates2expand/var/lib/machines/nsdc/srv/smb.ns6upgrade.conf
/etc/e-smith/events/password-modify/S30nethserver-dc-password-set
/etc/e-smith/events/password-modify/S40nethserver-dc-user-unlock
/etc/e-smith/events/password-policy-update/S30nethserver-dc-password-policy
/etc/e-smith/events/post-backup-config/S40nethserver-dc-post-backup
/etc/e-smith/events/post-restore-config/S01nethserver-dc-install
/etc/e-smith/events/post-restore-config/S03nethserver-dc-network-reset
/etc/e-smith/events/post-restore-config/S40nethserver-dc-post-restore
/etc/e-smith/events/post-restore-config/S80nethserver-dc-ldbfixes
/etc/e-smith/events/post-restore-config/S80nethserver-dc-sysvolreset
/etc/e-smith/events/post-restore-config/templates2expand/etc/hosts
/etc/e-smith/events/post-restore-config/templates2expand/etc/krb5.conf
/etc/e-smith/events/post-restore-config/templates2expand/etc/sysconfig/nsdc
/etc/e-smith/events/post-restore-config/templates2expand/var/lib/machines/nsdc/etc/hostname
/etc/e-smith/events/post-restore-config/templates2expand/var/lib/machines/nsdc/etc/hosts
/etc/e-smith/events/post-restore-config/templates2expand/var/lib/machines/nsdc/etc/ntp.conf
/etc/e-smith/events/post-restore-config/templates2expand/var/lib/machines/nsdc/etc/resolv.conf
/etc/e-smith/events/post-restore-config/templates2expand/var/lib/machines/nsdc/etc/samba/smb.conf.include
/etc/e-smith/events/post-restore-config/templates2expand/var/lib/machines/nsdc/etc/systemd/network/green.network
/etc/e-smith/events/post-restore-config/templates2expand/var/lib/machines/nsdc/etc/systemd/system/nsdc-run.socket
/etc/e-smith/events/post-restore-config/templates2expand/var/lib/machines/nsdc/etc/systemd/system/nsdc-run@.service
/etc/e-smith/events/post-restore-config/templates2expand/var/lib/machines/nsdc/etc/systemd/system/samba-provision.service
/etc/e-smith/events/post-restore-config/templates2expand/var/lib/machines/nsdc/srv/post-provision.sh
/etc/e-smith/events/post-restore-config/templates2expand/var/lib/machines/nsdc/srv/smb.ns6upgrade.conf
/etc/e-smith/events/pre-backup-config/S40nethserver-dc-pre-backup
/etc/e-smith/events/pre-restore-config/S40nethserver-dc-pre-restore
/etc/e-smith/events/user-create/S40nethserver-dc-user-create
/etc/e-smith/events/user-create/S50nethserver-dc-sync-upn
/etc/e-smith/events/user-delete/S40nethserver-dc-user-delete
/etc/e-smith/events/user-lock/S15nethserver-dc-user-lock
/etc/e-smith/events/user-modify/S40nethserver-dc-user-modify
/etc/e-smith/events/user-unlock/S15nethserver-dc-user-unlock
/etc/e-smith/templates/etc/hosts/10dc_realm
/etc/e-smith/templates/etc/sysconfig/nsdc/10base
/etc/e-smith/templates/etc/sysconfig/nsdc/20options
/etc/e-smith/templates/var/lib/machines/nsdc/etc/hostname/00template_vars
/etc/e-smith/templates/var/lib/machines/nsdc/etc/hostname/10base
/etc/e-smith/templates/var/lib/machines/nsdc/etc/hostname/template-begin
/etc/e-smith/templates/var/lib/machines/nsdc/etc/hosts/00template_vars
/etc/e-smith/templates/var/lib/machines/nsdc/etc/hosts/10base
/etc/e-smith/templates/var/lib/machines/nsdc/etc/ntp.conf/10base
/etc/e-smith/templates/var/lib/machines/nsdc/etc/resolv.conf/10base
/etc/e-smith/templates/var/lib/machines/nsdc/etc/samba/smb.conf.include/10base
/etc/e-smith/templates/var/lib/machines/nsdc/etc/systemd/network/green.network/10base
/etc/e-smith/templates/var/lib/machines/nsdc/etc/systemd/system/nsdc-run.socket/10base
/etc/e-smith/templates/var/lib/machines/nsdc/etc/systemd/system/nsdc-run@.service/10base
/etc/e-smith/templates/var/lib/machines/nsdc/etc/systemd/system/samba-provision.service/10unit
/etc/e-smith/templates/var/lib/machines/nsdc/etc/systemd/system/samba-provision.service/20service
/etc/e-smith/templates/var/lib/machines/nsdc/etc/systemd/system/samba-provision.service/30install
/etc/e-smith/templates/var/lib/machines/nsdc/srv/post-provision.sh/20sme8migration
/etc/e-smith/templates/var/lib/machines/nsdc/srv/post-provision.sh/60homeDrive
/etc/e-smith/templates/var/lib/machines/nsdc/srv/smb.ns6upgrade.conf/10base
/etc/sudoers.d/20_nethserver_dc
/etc/sysconfig/nsdc
/usr/bin/nsdc-run
/usr/lib/nethserver-dc/compat-gnutls37-3.7.2-1.el7.x86_64.rpm
/usr/lib/nethserver-dc/compat-nettle37-3.7.3-1.el7.x86_64.rpm
/usr/lib/nethserver-dc/gmp-6.1.2-1.el7.x86_64.rpm
/usr/lib/nethserver-dc/ns-samba-4.16.5-1.ns7.x86_64.rpm
/usr/lib/systemd/system/nsdc.service
/usr/libexec/nethserver/nsdc-run-worker
/usr/libexec/nethserver/ptrack-nsdc-install
/usr/libexec/nethserver/read-nssamba-version
/usr/share/doc/nethserver-dc-1.9.0
/usr/share/doc/nethserver-dc-1.9.0/COPYING
/usr/share/doc/nethserver-dc-1.9.0/README.rst
/var/lib/machines/nsdc/usr/local/sbin/checkpassword.p

dnutan · November 27, 2022, 9:24pm

yes, you’re right.
But the nethserver scripts, at some point, ~~should copy it to the other referenced path~~ (it seems it does it when the socket is enabled)

right now I don’t have access to a nethserver with active directory…

can you check the status of other nscd* services/sockets

mrmarkuz · November 27, 2022, 9:29pm

The nsdc-run-worker script should exist in /var/lib/machines/nsdc/usr/libexec/nsdc-run-worker

dnutan · November 27, 2022, 9:31pm

yep, Markus is right:

github.com

NethServer/nethserver-dc/blob/5b65852a5835527a976566d5be0d55f63225ef27/root/etc/e-smith/events/actions/nethserver-dc-provision#L23

      
        
            #
            # NethServer is distributed in the hope that it will be useful,
            # but WITHOUT ANY WARRANTY; without even the implied warranty of
            # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
            # GNU General Public License for more details.
            #
            # You should have received a copy of the GNU General Public License
            # along with NethServer.  If not, see COPYING.
            #
            
            
nsroot=/var/lib/machines/nsdc
            
            
systemctl --root=${nsroot} enable samba-provision.service samba.service ntpd.service nsdc-run.socket
            cp -af /usr/libexec/nethserver/nsdc-run-worker ${nsroot}/usr/libexec/nsdc-run-worker
            
            
ProvisionType=$(/sbin/e-smith/config getprop nsdc ProvisionType)
            
            
if [[ "${ProvisionType}" == "ns6upgrade" ]]; then
                rm -f /var/lib/machines/nsdc/srv/secrets.tdb
                tdbrestore /var/lib/machines/nsdc/srv/secrets.tdb </var/lib/nethserver/backup/secrets_tdb.dump
            fi

hector · November 27, 2022, 9:32pm

It is there:look

cp: overwrite ‘/var/lib/machines/nsdc/usr/libexec/nsdc-run-worker’? n
[root@s-xx an.sistemas]# ls /var/lib/machines/nsdc/usr/libexec/
awk getconf gpg2keys_finger gpg-check-pattern grepconf.sh openldap selinux
coreutils gnupg-pcsc-wrapper gpg2keys_hkp gpg-preset-passphrase nsdc-run-worker p11-kit utempter
dbus-1 gpg2keys_curl gpg2keys_ldap gpg-protect-tool ntpdate-wrapper platform-python

The samba service is working with the old samba.

dnutan · November 27, 2022, 9:34pm

but is shows the old samba or now it shows an error?

hector · November 27, 2022, 9:35pm

Same error:

[root@s-xx an.xx]# nsdc-run -e – samba -V
Traceback (most recent call last):
File “/bin/nsdc-run”, line 55, in
buf = so.recv(buf_sz)
socket.error: [Errno 104] Connection reset by pe

mrmarkuz · November 27, 2022, 9:52pm

Let’s check the configuration of nsdc and sssd:

config show nsdc

config show sssd

Do you get this error too when the container is started?

hector · November 27, 2022, 10:17pm

[root@s-xx an.sistemas]# config show nsdc
nsdc=service
IpAddress=192.168.x.4
ProvisionType=newdomain
bridge=br0
status=enabled
[root@s-xx an.sistemas]# config show sssd
sssd=service
AdDns=192.168.X.4
BindDN=ldapservice@AD.XX.COM
BindPassword=XXXXXXX
DiscoverDcType=ldapuri
LdapURI=ldaps://nsdc-s-lsfc.XX
Provider=ad
Realm=AD.XX
ShellOverrideStatus=enabled
Workgroup=LXX
status=enabled
[root@s-xx an.sistemas]# smbd -V
Version 4.10.16
[root@s-lsfc an.sistemas]# nsdc-run -e – samba -V
Traceback (most recent call last):
File “/bin/nsdc-run”, line 55, in
buf = so.recv(buf_sz)
socket.error: [Errno 104] Connection reset by peer
[root@s-xx an.sistemas]#

it happen after the first signal-event nethserver-dc-upgrade

It’s a production server.

dnutan · November 27, 2022, 10:27pm

If we’re unable to fix it in time, one of the last options (if AD users are not listed, there are other AD problems or AD is not working) could be this one:

But it would be nice to understand why samba version didn’t change and why the other error showed up later on.

dnutan · November 27, 2022, 11:02pm

systemctl stop nsdc
systemctl start nsdc
systemctl -M nsdc status samba

hector · November 27, 2022, 11:07pm

[root@s-lsfc an.sistemas]# systemctl -M nsdc status samba
● samba.service - Samba domain controller daemon
Loaded: loaded (/usr/lib/systemd/system/samba.service; enabled; vendor preset: disabled)
Active: active (running) since Sun 2022-11-27 18:07:10 -05; 266ms ago
Main PID: 26 (kworker/3:0H)
CGroup: /machine.slice/nsdc.service/system.slice/samba.service
├─17898 /usr/sbin/samba -i --debug-stderr
├─17902 /usr/sbin/samba -i --debug-stderr
├─17903 /usr/sbin/samba -i --debug-stderr
├─17904 /usr/sbin/samba -i --debug-stderr
├─17905 /usr/sbin/samba -i --debug-stderr
├─17906 /usr/sbin/smbd -D --option=server role check:inhibit=yes --foreground
├─17907 /usr/sbin/samba -i --debug-stderr
├─17908 /usr/sbin/samba -i --debug-stderr
├─17909 /usr/sbin/samba -i --debug-stderr
├─17910 /usr/sbin/samba -i --debug-stderr
├─17911 /usr/sbin/samba -i --debug-stderr
├─17912 /usr/sbin/samba -i --debug-stderr
├─17913 /usr/sbin/samba -i --debug-stderr
├─17914 /usr/sbin/samba -i --debug-stderr
├─17915 /usr/sbin/samba -i --debug-stderr
├─17916 /usr/sbin/winbindd -D --option=server role check:inhibit=yes --foreground
├─17917 /usr/sbin/samba -i --debug-stderr
├─17918 /usr/sbin/samba -i --debug-stderr
├─17919 /usr/sbin/samba -i --debug-stderr
├─17920 python /usr/sbin/samba_dnsupdate
├─17921 /usr/sbin/samba -i --debug-stderr
└─17922 python /usr/sbin/samba_spnupdate
‣ 26 [kworker/3:0H]
[root@s-lsfc an.sistemas]# nsdc-run -e – samba -V
Traceback (most recent call last):
File “/bin/nsdc-run”, line 55, in
buf = so.recv(buf_sz)
socket.error: [Errno 104] Connection reset by peer

hector · November 27, 2022, 11:10pm

It is a production server!!

Can´t make that acrobacy this time, I will try to update a new server, then backup config, then reload the server it self.

60 machines are configured to the NSDC, it is coming vacations time maybe in 20 days I can make it work.

dnutan · November 27, 2022, 11:20pm

 systemctl -M nsdc status -l nsdc-run.socket
 systemctl -M nsdc restart nsdc-run.socket

hector · November 27, 2022, 11:23pm

[quote=“dnutan, post:24, topic:20950”]

systemctl -M nsdc status -l nsdc-run.socket
 systemctl -M nsdc restart nsdc-run.socket

[root@s-XX an.sistemas]# systemctl -M nsdc restart nsdc-run.socket
[root@s-XX an.sistemas]# systemctl -M nsdc status -l nsdc-run.socket
● nsdc-run.socket - NSDC container remote command server
Loaded: loaded (/etc/systemd/system/nsdc-run.socket; enabled; vendor preset: disabled)
Active: active (listening) since Sun 2022-11-27 18:22:35 -05; 5s ago
Docs: nethserver-dc/README.rst at master · NethServer/nethserver-dc · GitHub
Listen: /var/lib/misc/nsdc-run.sock (Stream)
Accepted: 1; Connected: 0
[root@s-XX an.sistemas]# nsdc-run -e – samba -V
Traceback (most recent call last):
File “/bin/nsdc-run”, line 55, in
buf = so.recv(buf_sz)
socket.error: [Errno 104] Connection reset by peer

davidep · November 28, 2022, 3:02pm

If you have a good and recent configuration backup with the DC user database you could evaluate the restore-config procedure in a separate testing environment:

Disaster recovery — NethServer 7 Final

If that works you can run it on the broken server too:

remove the account provider
restore the configuration backup

hector · November 28, 2022, 3:42pm

I’m going to do it in the virtualbox server, if it works I’ll try it in the main server, can’t do it now, but in weekend for sure,

I’ll keep you updated.

hector · December 4, 2022, 12:03am

Hi there Aligators!!!

Making the steps above (remove the account provider, then restore the config backup) the system uploaded the config (feels like You are making damages like sid ejejeje).

Keep this in mind the backup config didn’t work in all the week during the nethserver-dc-1.9.0. failure After the new package nethserver-dc-1.9.1 the backup config it worked again.

The windows 11 is joining the domain, and it works with the RSAT GPO editor.

Thank’s for the help You gave me!!

davidep · December 7, 2022, 7:00am

This topic was automatically closed after 22 hours. New replies are no longer allowed.