Bug 11573 - Uncaught exception at ldb_modules/password_hash.c:2241 during new domain provision
Uncaught exception at ldb_modules/password_hash.c:2241 during new domain prov...
Product: Samba 4.1 and newer
Classification: Unclassified
All All
: P5 normal
: ---
Assigned To: Andrew Bartlett
Samba QA Contact
Depends on:
  Show dependency treegraph
Reported: 2015-10-26 03:52 UTC by Andrey Cherepanov
Modified: 2017-03-11 18:48 UTC (History)
1 user (show)

See Also:

Build log with TDB_NO_FSYNC=1 make test (1.22 MB, text/x-log)
2015-11-12 15:26 UTC, Andrey Cherepanov
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Andrey Cherepanov 2015-10-26 03:52:32 UTC
Samba 4.3.1, libldb-1.1.21 (as external library). smb.conf is removed, /var/lib/samba is contain only empty /var/lib/samba/sysvol

# samba-tool domain provision 
Realm [OFFICE.ALTLINUX.RU]: office.alt
 Domain [office]: 
 Server Role (dc, member, standalone) [dc]: 
 DNS forwarder IP address (write 'none' to disable forwarding) []: 
Administrator password: 
Retype password: 
Looking up IPv4 addresses
Looking up IPv6 addresses
No IPv6 address will be assigned
Setting up share.ldb
Setting up secrets.ldb
Setting up the registry
Setting up the privileges database
Setting up idmap db
Setting up SAM db
Setting up sam.ldb partitions and settings
Setting up sam.ldb rootDSE
Pre-loading the Samba 4 and AD schema
Adding DomainDN: DC=office,DC=alt
Adding configuration container
Setting up sam.ldb schema
Setting up sam.ldb configuration data
Setting up display specifiers
Modifying display specifiers
Adding users container
Modifying users container
Adding computers container
Modifying computers container
Setting up sam.ldb data
Setting up well known security principals
Setting up sam.ldb users and groups
ERROR(ldb): uncaught exception - operations error at ../source4/dsdb/samdb/ldb_modules/password_hash.c:2241
  File "/usr/lib64/python2.7/site-packages/samba/netcmd/__init__.py", line 175, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib64/python2.7/site-packages/samba/netcmd/domain.py", line 442, in run
    nosync=ldap_backend_nosync, ldap_dryrun_mode=ldap_dryrun_mode)
  File "/usr/lib64/python2.7/site-packages/samba/provision/__init__.py", line 2172, in provision
  File "/usr/lib64/python2.7/site-packages/samba/provision/__init__.py", line 1795, in provision_fill
    next_rid=next_rid, dc_rid=dc_rid)
  File "/usr/lib64/python2.7/site-packages/samba/provision/__init__.py", line 1453, in fill_samdb
    "KRBTGTPASS_B64": b64encode(krbtgtpass.encode('utf-16-le'))
  File "/usr/lib64/python2.7/site-packages/samba/provision/common.py", line 55, in setup_add_ldif
    ldb.add_ldif(data, controls)
  File "/usr/lib64/python2.7/site-packages/samba/__init__.py", line 225, in add_ldif
    self.add(msg, controls)
Comment 1 Andrey Cherepanov 2015-11-11 16:09:40 UTC
I hope it will be useful:

# ldbsearch \* -H /var/lib/samba/private/sam.ldb
dsdb_get_schema: refresh_fn() failed
schema_load_init: dsdb_get_schema failed
module schema_load initialization failed : Operations error
module rootdse initialization failed : Operations error
module samba_dsdb initialization failed : Operations error
Unable to load modules for /var/lib/samba/private/sam.ldb: schema_load_init: dsdb_get_schema failed
Failed to connect to /var/lib/samba/private/sam.ldb - schema_load_init: dsdb_get_schema failed
Comment 2 Andrey Cherepanov 2015-11-11 16:16:20 UTC
ldbsearch with -d 255:

Searching for dsServiceName in rootDSE failed: operations error at ../source4/dsdb/samdb/ldb_modules/rootdse.c:516
Failed to find our own NTDS Settings DN in the ldb!
dsdb_get_schema: refresh_fn() failed
Comment 3 Andrey Cherepanov 2015-11-12 15:26:04 UTC
Created attachment 11593 [details]
Build log with TDB_NO_FSYNC=1 make test

Build package with make test.
Comment 4 Andrey Cherepanov 2015-11-16 10:35:35 UTC
Sorry, it's local misconfiguration in /etc/krb5.conf.
Comment 5 Andrew Bartlett 2017-03-11 18:48:27 UTC
We need to backport: