View Issue Details

IDProjectCategoryView StatusLast Update
0000110Rocky-Linux-8sambapublic2022-06-02 18:23
ReporterArris Ser Lev Assigned ToRelease Engineering  
PriorityurgentSeverityblockReproducibilityalways
Status closedResolutionnot fixable 
Platformlxc containerOSRockyOS Version8.6
Summary0000110: Samba, setup as domaincontroller
Descriptionthe samba-tool is not usable:

[root@ad ~]# samba-tool --help
ERROR(<class 'ImportError'>): uncaught exception - cannot import name 'dnsserver'
  File "/usr/bin/samba-tool", line 44, in <module>
    retval = cmd._run("samba-tool", subcommand, *args)
  File "/usr/lib64/python3.6/site-packages/samba/netcmd/__init__.py", line 259, in _run
    cmd = self.subcommands[cmd_name]
  File "/usr/lib64/python3.6/site-packages/samba/netcmd/main.py", line 36, in __getitem__
    fromlist=['cmd_%s' % attr]),
  File "/usr/lib64/python3.6/site-packages/samba/netcmd/computer.py", line 31, in <module>
    from samba.dcerpc import dnsserver, dnsp, security
Steps To ReproduceInstall Rocky-Linux 8.6
install samba packages (dnf install samba)
try to setup the machine as domaincontroller (samba-tool --help)
Tagssamba-tool

Activities

Skip Grube

Skip Grube

2022-05-28 12:47

manager   ~0000193

I can replicate this same behavior in RHEL 8.6, we should definitely report this to them.

I'm still looking at a possible workaround. I noticed previous Samba versions were based on the 4.14 release and don't appear to have samba-tool. Is it possible to (temporarily) use the traditional "net" command to achieve what you want? I think we will look at the various 4.15 versions of Samba out there and figure out exactly where this broke upstream.
Arris Ser Lev

Arris Ser Lev

2022-05-28 13:02

reporter   ~0000194

hi,

no, i guess the net command can't help me. all documentation i have found are written for the samba-tool

[root@ad ~]# samba-tool domain provision --server-role=dc --use-rfc2307 --dns-backend=SAMBA_INTERNAL --realm=SAMDOM.EXAMPLE.COM --domain=SAMDOM --adminpass=Passw0rd
ERROR(<class 'ModuleNotFoundError'>): uncaught exception - No module named 'samba.samdb'
  File "/usr/bin/samba-tool", line 44, in <module>
    retval = cmd._run("samba-tool", subcommand, *args)
  File "/usr/lib64/python3.6/site-packages/samba/netcmd/__init__.py", line 235, in _run
    return self.subcommands[subcommand]._run(
  File "/usr/lib64/python3.6/site-packages/samba/netcmd/main.py", line 36, in __getitem__
    fromlist=['cmd_%s' % attr]),
  File "/usr/lib64/python3.6/site-packages/samba/netcmd/domain.py", line 43, in <module>
    from samba.join import join_RODC, join_DC
  File "/usr/lib64/python3.6/site-packages/samba/join.py", line 22, in <module>
    from samba.samdb import SamDB
Skip Grube

Skip Grube

2022-05-28 14:54

manager   ~0000195

Ah, figured this out. RHEL 8 (and thus Rocky 8) don't support running Samba as a domain controller: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/deploying_different_types_of_servers/assembly_using-samba-as-a-server_deploying-different-types-of-servers

Rocky's Samba package will be identical to the RHEL one, as they're built from the same sources. I notice previous versions of Samba in the distro didn't even include "samba-tool", I'm honestly not sure why it's included in this version.

The recommended course if you want a domain controller is FreeIPA with a trust relationship to your existing Windows domain. Failing that, it's possible to build Samba from source code with the feature enabled.

Thanks,
-Skip
Arris Ser Lev

Arris Ser Lev

2022-05-28 18:57

reporter   ~0000196

thanx for the info, i will give fedora a try...

Issue History

Date Modified Username Field Change
2022-05-28 09:48 Arris Ser Lev New Issue
2022-05-28 09:48 Arris Ser Lev Tag Attached: samba-tool
2022-05-28 12:43 Skip Grube Assigned To => Skip Grube
2022-05-28 12:43 Skip Grube Status new => assigned
2022-05-28 12:43 Skip Grube Assigned To Skip Grube => Release Engineering
2022-05-28 12:47 Skip Grube Note Added: 0000193
2022-05-28 13:02 Arris Ser Lev Note Added: 0000194
2022-05-28 14:54 Skip Grube Note Added: 0000195
2022-05-28 18:57 Arris Ser Lev Note Added: 0000196
2022-06-02 18:23 Louis Abel Status assigned => closed
2022-06-02 18:23 Louis Abel Resolution open => not fixable