[Freeipa] [Bug 1543230] Re: After installing freeipa-server-trust-ad ipa tries to start smb.service which doesn't exist
This bug was fixed in the package freeipa - 4.3.1-0ubuntu1
---
freeipa (4.3.1-0ubuntu1) xenial; urgency=medium
* Sync from Debian.
freeipa (4.3.1-1) unstable; urgency=medium
* New upstream release. (Closes: #781607, #786411) (LP: #1449304)
- drop no-test-lang.diff, obsolete
* fix-match-hostname.diff, control: Drop the patch and python-openssl
deps, not needed anymore
* rules, platform, server.dirs, server.install:
Add support for DNSSEC.
* control, rules: Add support for kdcproxy.
* control, server: Migrate to mod-auth-gssapi.
* control, rules, fix-ipa-conf.diff: Add support for custodia.
* control:
- Add python-cryptography to build-deps and python-freeipa deps.
- Add libp11-kit-dev to build-deps, p11-kit to server deps.
- Depend on python-gssapi instead of python-kerberos/-krbV.
- Add libini-config-dev and python-dbus to build-deps, replace wget
with curl.
- Bump libkrb5-dev build-dep.
- Add pki-base to build-deps and pki-kra to server deps, bump pki-ca
version.
- Drop python-m2crypto from deps, obsolete.
- Bump sssd deps to 1.13.1.
- Add python-six to build-deps and python-freeipa deps.
- Split python stuff from server, client, tests to python-
ipa{server,client,tests}, rename python-freeipa to match and move
translations to freeipa-common. Mark them Arch:all where possible,
and add Breaks/Replaces.
- Add oddjob to server and oddjob-mkhomedir to client deps.
- Add python-setuptools to python-ipalib deps.
- Bump 389-ds-base* deps.
- Bump server and python-ipaserver dependency on python-ldap to 2.4.22
to fix a bug on ipa-server-upgrade.
- Add pki-tools to python-ipaserver deps.
- Add zip to python-ipaserver depends.
- Add python-systemd to server depends.
- Add opendnssec to freeipa-server-dns depends.
- Add python-cffi to python-ipalib depends.
- Bump dep on bind9-dyndb-ldap.
- Bump certmonger dependency to version that has helpers in the correct
place.
* patches:
- prefix.patch: Fix ipalib install too.
- Drop bits of platform.diff and other patches that are now upstream.
- fix-kdcproxy-paths.diff: Fix paths in kdcproxy configs.
- fix-oddjobs.diff: Fix paths and uids in oddjob configs.
- fix-replicainstall.diff: Use ldap instead of ldaps for conncheck.
- fix-dnssec-services.diff: Debianize ipa-dnskeysyncd & ipa-ods-
exporter units.
- create-sysconfig-ods.diff: Create an empty file for opendnssec
daemons, until opendnssec itself is fixed.
- purge-firefox-extension.diff: Clean obsolete kerberosauth.xpi.
- enable-mod-nss-during-setup.diff: Split from platform.diff, call
a2enmod/a2dismod from httpinstance.py.
- fix-memcached.diff: Split from platform.diff, debianize memcached
conf & unit.
- hack-libarch.diff: Don't use fedora libpaths.
* add-debian-platform.diff:
- Update paths.py to include all variables, comment out ones we don't
modify.
- Use systemwide certificate store; put ipa-ca.crt in
/usr/local/share/ca-certificates, and run update-ca-certificates
- Map smb service to smbd (LP: #1543230)
- Don't ship /var/cache/bind/data, fix named.conf a bit.
- Use DebianNoService() for dbus. (LP: #1564981)
- Add more constants
* Split freeipa-server-dns from freeipa-server, add -dns to -server
Recommends.
* server.postinst: Use ipa-server-upgrade.
* admintools: Use the new location for bash completions.
* rules: Remove obsolete configure.jar, preferences.html.
* platform: Fix ipautil.run stdout handling, add support for systemd.
* server.postinst, tmpfile: Create state directories for
mod_auth_gssapi.
* rules, server.install: Install scripts under /usr/lib instead of
multiarch path to avoid hacking the code too much.
* fix-ipa-otpd-install.diff, rules, server.install: Put ipa-otpd in
/usr/lib/ipa instead of directly under multiarch lib path.
* control, server*.install: Move dirsrv plugins from server-trust-ad
to server, needed on upgrades even if trust-ad isn't set up.
* server: Enable mod_proxy_ajp and mod_proxy_http on postinst, disable
on postrm.
* rules: Add SKIP_API_VERSION_CHECK, and adjust directories to clean.
* rules: Don't enable systemd units on install.
* client: Don't create /etc/pki/nssdb on postinst, it's not used
anymore.
* platform.diff, rules, server.install: Drop generate-rndc-key.sh, bind
already generates the keyfile.
-- Timo Aaltonen Tue, 19 Apr 2016 00:15:05 +0300
** Changed in: freeipa (Ubuntu)
Status: Triaged => Fix Released
--
You received this bug notification because you are a member of FreeIPA,
which is subscribed to freeipa in Ubuntu.
https://bugs.launchpad.net/bugs/1543230
Title:
After installing freeipa-server-trust-ad ipa tries to start
smb.service which doesn't exist
Status in freeipa package in Ubuntu:
[Freeipa] [Bug 1543230] Re: After installing freeipa-server-trust-ad ipa tries to start smb.service which doesn't exist
https://fedorahosted.org/freeipa/ticket/5687
** Bug watch added: fedorahosted.org/freeipa/ #5687
https://fedorahosted.org/freeipa/ticket/5687
--
You received this bug notification because you are a member of FreeIPA,
which is subscribed to freeipa in Ubuntu.
https://bugs.launchpad.net/bugs/1543230
Title:
After installing freeipa-server-trust-ad ipa tries to start
smb.service which doesn't exist
Status in freeipa package in Ubuntu:
Triaged
Bug description:
Installing freeipa-server-trust-ad (and running ipa-adtrust-install) will
degrade the ipa server and brake the enter system, including dns server
(bind9). The reason is that ipactl tries to start samba by explicitly calling
systemctl start 'smb.service'.
Calling systemctl start 'smb.service' however results in:
Failed to start smb.service: Unit smb.service failed to load: No such file or
directory.
debug output of "ipactl -d start":
[...]
ipa: DEBUG: stderr=
Starting pki-tomcatd Service
ipa: DEBUG: Starting external process
ipa: DEBUG: args='/bin/systemctl' 'start' 'pki-tomcatd.service'
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: Starting external process
ipa: DEBUG: args='/bin/systemctl' 'is-active' 'pki-tomcatd.service'
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: stdout=active
ipa: DEBUG: stderr=
Starting smb Service
ipa: DEBUG: Starting external process
ipa: DEBUG: args='/bin/systemctl' 'start' 'smb.service'
Failed to start smb.service: Unit smb.service failed to load: No such file or
directory.
ipa: DEBUG: Process finished, return code=6
Failed to start smb Service
Shutting down
ipa: DEBUG: Starting external process
ipa: DEBUG: args='/usr/sbin/service' 'krb5-kdc' 'stop' ''
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: Starting external process
ipa: DEBUG: args='/usr/sbin/service' 'krb5-admin-server' 'stop' ''
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: Starting external process
ipa: DEBUG: args='/usr/sbin/service' 'bind9' 'stop' ''
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: Starting external process
ipa: DEBUG: args='/bin/systemctl' 'stop' 'ipa_memcached.service'
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: Starting external process
ipa: DEBUG: args='/usr/sbin/service' 'apache2' 'stop' ''
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: Starting external process
ipa: DEBUG: args='/bin/systemctl' 'stop' 'pki-tomcatd.service'
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: Starting external process
ipa: DEBUG: args='/bin/systemctl' 'stop' 'smb.service'
Failed to stop smb.service: Unit smb.service not loaded.
ipa: DEBUG: Process finished, return code=5
ipa: DEBUG: Starting external process
ipa: DEBUG: args='/bin/systemctl' 'stop' 'winbind.service'
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: Starting external process
ipa: DEBUG: args='/bin/systemctl' 'stop' 'ipa-otpd.socket'
'--ignore-dependencies'
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: Starting external process
ipa: DEBUG: args='/bin/systemctl' 'stop' 'dirsrv@##.service'
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: File
"/usr/lib/python2.7/dist-packages/ipaserver/install/installutils.py", line 642,
in run_script
return_value = main_function()
File "/usr/sbin/ipactl", line 505, in main
ipa_start(options)
File "/usr/sbin/ipactl", line 273, in ipa_start
raise IpactlError("Aborting ipactl")
ipa: DEBUG: The ipactl command failed, exception: IpactlError: Aborting ipactl
Aborting ipactl
This also affects 15.10! I updated to 16.04 to see if it was fixed already.
ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: freeipa-server-trust-ad 4.1.4-1
ProcVersionSignature: Ubuntu 4.4.0-2.16-generic 4.4.0
Uname: Linux 4.4.0-2-generic x86_64
ApportVersion: 2.19.4-0ubuntu2
Architecture: amd64
Date: Mon Feb 8 18:25:11 2016
InstallationDate: Installed on 2016-01-19 (20 days ago)
InstallationMedia: Ubuntu-Server 15.10 "Wily Werewolf" - Release amd64
(20151021)
ProcEnviron:
TERM=xterm-256color
PATH=(custom, no user)
XDG_RUNTIME_DIR=
LANG=de_DE.UTF-8
SHELL=/bin/bash
SourcePackage: freeipa
UpgradeStatus: Upgraded to xenial on 2016-02-05 (3 days ago)
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1543230/+subscriptions
___
Mailing list: https://launchpad.net/~freeipa
Post to : freeipa@lists.launchpad.net
Unsubscribe : https://launchpad.net/~freeipa
More help : https://help.launchpad.net/ListHelp
[Freeipa] [Bug 1543230] Re: After installing freeipa-server-trust-ad ipa tries to start smb.service which doesn't exist
You don't need anything really but a virtual machine. I would actually
hope that you give it a try. I have been trying to set up a free ipa
server based on Ubuntu 15.10/16.04 and it has been a uphill battle all
the way. So match so that I am thinking about giving up and rolling it
in a docker container or just installing a CentOS server. I'm not saying
this as a threat but just to get my level of frustration across.
Steps:
1.) Install freeipa server:
sudo apt-get install freeipa-server
2.) configure ipa:
sudo ipa-server-install
2.a)
Opt to install DNS server
3.)
Dns will not work because AppArmor blocks bind9 from reading the freeipa
domain. ← easy fix.
Also you will hit this bug:
https://bugs.launchpad.net/ubuntu/+source/certmonger/+bug/1509484
4.)
Install freeipa-server-trust-ad
and run ipa-adtrust-install
I'm not sure what options I set exactly, but it shouldn't matter to
match. Is there a log file created by the installer somewhere?
--
You received this bug notification because you are a member of FreeIPA,
which is subscribed to freeipa in Ubuntu.
https://bugs.launchpad.net/bugs/1543230
Title:
After installing freeipa-server-trust-ad ipa tries to start
smb.service which doesn't exist
Status in freeipa package in Ubuntu:
Triaged
Bug description:
Installing freeipa-server-trust-ad (and running ipa-adtrust-install) will
degrade the ipa server and brake the enter system, including dns server
(bind9). The reason is that ipactl tries to start samba by explicitly calling
systemctl start 'smb.service'.
Calling systemctl start 'smb.service' however results in:
Failed to start smb.service: Unit smb.service failed to load: No such file or
directory.
debug output of "ipactl -d start":
[...]
ipa: DEBUG: stderr=
Starting pki-tomcatd Service
ipa: DEBUG: Starting external process
ipa: DEBUG: args='/bin/systemctl' 'start' 'pki-tomcatd.service'
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: Starting external process
ipa: DEBUG: args='/bin/systemctl' 'is-active' 'pki-tomcatd.service'
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: stdout=active
ipa: DEBUG: stderr=
Starting smb Service
ipa: DEBUG: Starting external process
ipa: DEBUG: args='/bin/systemctl' 'start' 'smb.service'
Failed to start smb.service: Unit smb.service failed to load: No such file or
directory.
ipa: DEBUG: Process finished, return code=6
Failed to start smb Service
Shutting down
ipa: DEBUG: Starting external process
ipa: DEBUG: args='/usr/sbin/service' 'krb5-kdc' 'stop' ''
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: Starting external process
ipa: DEBUG: args='/usr/sbin/service' 'krb5-admin-server' 'stop' ''
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: Starting external process
ipa: DEBUG: args='/usr/sbin/service' 'bind9' 'stop' ''
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: Starting external process
ipa: DEBUG: args='/bin/systemctl' 'stop' 'ipa_memcached.service'
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: Starting external process
ipa: DEBUG: args='/usr/sbin/service' 'apache2' 'stop' ''
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: Starting external process
ipa: DEBUG: args='/bin/systemctl' 'stop' 'pki-tomcatd.service'
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: Starting external process
ipa: DEBUG: args='/bin/systemctl' 'stop' 'smb.service'
Failed to stop smb.service: Unit smb.service not loaded.
ipa: DEBUG: Process finished, return code=5
ipa: DEBUG: Starting external process
ipa: DEBUG: args='/bin/systemctl' 'stop' 'winbind.service'
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: Starting external process
ipa: DEBUG: args='/bin/systemctl' 'stop' 'ipa-otpd.socket'
'--ignore-dependencies'
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: Starting external process
ipa: DEBUG: args='/bin/systemctl' 'stop' 'dirsrv@##.service'
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: File
"/usr/lib/python2.7/dist-packages/ipaserver/install/installutils.py", line 642,
in run_script
return_value = main_function()
File "/usr/sbin/ipactl", line 505, in main
ipa_start(options)
File "/usr/sbin/ipactl", line 273, in ipa_start
raise IpactlError("Aborting ipactl")
ipa: DEBUG: The ipactl command failed, exception: IpactlError: Aborting ipactl
Aborting ipactl
This also affects 15.10! I updated to 16.04 to see if it was fixed already.
ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: freeipa-server-trust-ad 4.1.4-1
ProcVersionSignature: Ubuntu 4.4.0-2.16-generic 4.4.0
Uname: Linux 4.4.0-2-generic x86_64
ApportVersion: 2.19.4-0ubuntu2
Architecture: amd64
Date: Mon Feb 8 18:25:11 2016
InstallationDate: Installed on 2016-01-19 (20 days ago)
InstallationMedia: Ubuntu-Server 15.10 "Wily Werewolf" - Release amd64
(20151021)
ProcEnviron:
