Hi, I'm looking for a bit of help with my Clearos install. I recently installed a few various items from the marketplace, however after using the new features for a bit I decided to uninstall them as they weren't working as I was hoping. These include:
2FA for Webconfig
Directory Server
After uninstalling these I've noticed that Samba is now refusing to start. When I click the start button from within the UI I receive no error message, it just doesn't start. I've ran the command "service smb status" and the results are below:
Server Version: 7.5
● smb.service - Samba SMB Daemon
Loaded: loaded (/usr/lib/systemd/system/smb.service; enabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Fri 2018-12-07 13:54:12 CST; 5min ago
Process: 10644 ExecStart=/usr/sbin/smbd --foreground --no-process-group $SMBDOPTIONS (code=exited, status=1/FAILURE)
Main PID: 10644 (code=exited, status=1/FAILURE)
Dec 07 13:54:12 server.domain.com smbd[10644]: [2018/12/07 13:54:12.342288, 0] ../source3/passdb/secrets.c:362(fetch_ldap_pw)
Dec 07 13:54:12 server.domain.com smbd[10644]: fetch_ldap_pw: neither ldap secret retrieved!
Dec 07 13:54:12 server.domain.com smbd[10644]: [2018/12/07 13:54:12.342372, 0] ../source3/passdb/pdb_ldap.c:6542(pdb_init_ldapsam_common)
Dec 07 13:54:12 server.domain.com smbd[10644]: pdb_init_ldapsam_common: Failed to retrieve LDAP password from secrets.tdb
Dec 07 13:54:12 server.domain.com smbd[10644]: [2018/12/07 13:54:12.342404, 0] ../source3/passdb/pdb_interface.c:180(make_pdb_method_name)
Dec 07 13:54:12 server.domain.com smbd[10644]: pdb backend ldapsam:ldap://127.0.0.1 did not correctly init (error was NT_STATUS_NO_MEMORY)
Dec 07 13:54:12 server.domain.com systemd[1]: smb.service: main process exited, code=exited, status=1/FAILURE
Dec 07 13:54:12 server.domain.com systemd[1]: Failed to start Samba SMB Daemon.
Dec 07 13:54:12 server.domain.com systemd[1]: Unit smb.service entered failed state.
Dec 07 13:54:12 server.domain.com systemd[1]: smb.service failed.
It appears that it's a password issue. Which password needs to be corrected and how would I correct this? The root password hasn't been changed and I can still successfully login via ssh and the UI.
Note: the server name has been replaced with server.domain.com for privacy.
Thank you,
Toasty
2FA for Webconfig
Directory Server
After uninstalling these I've noticed that Samba is now refusing to start. When I click the start button from within the UI I receive no error message, it just doesn't start. I've ran the command "service smb status" and the results are below:
Server Version: 7.5
● smb.service - Samba SMB Daemon
Loaded: loaded (/usr/lib/systemd/system/smb.service; enabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Fri 2018-12-07 13:54:12 CST; 5min ago
Process: 10644 ExecStart=/usr/sbin/smbd --foreground --no-process-group $SMBDOPTIONS (code=exited, status=1/FAILURE)
Main PID: 10644 (code=exited, status=1/FAILURE)
Dec 07 13:54:12 server.domain.com smbd[10644]: [2018/12/07 13:54:12.342288, 0] ../source3/passdb/secrets.c:362(fetch_ldap_pw)
Dec 07 13:54:12 server.domain.com smbd[10644]: fetch_ldap_pw: neither ldap secret retrieved!
Dec 07 13:54:12 server.domain.com smbd[10644]: [2018/12/07 13:54:12.342372, 0] ../source3/passdb/pdb_ldap.c:6542(pdb_init_ldapsam_common)
Dec 07 13:54:12 server.domain.com smbd[10644]: pdb_init_ldapsam_common: Failed to retrieve LDAP password from secrets.tdb
Dec 07 13:54:12 server.domain.com smbd[10644]: [2018/12/07 13:54:12.342404, 0] ../source3/passdb/pdb_interface.c:180(make_pdb_method_name)
Dec 07 13:54:12 server.domain.com smbd[10644]: pdb backend ldapsam:ldap://127.0.0.1 did not correctly init (error was NT_STATUS_NO_MEMORY)
Dec 07 13:54:12 server.domain.com systemd[1]: smb.service: main process exited, code=exited, status=1/FAILURE
Dec 07 13:54:12 server.domain.com systemd[1]: Failed to start Samba SMB Daemon.
Dec 07 13:54:12 server.domain.com systemd[1]: Unit smb.service entered failed state.
Dec 07 13:54:12 server.domain.com systemd[1]: smb.service failed.
It appears that it's a password issue. Which password needs to be corrected and how would I correct this? The root password hasn't been changed and I can still successfully login via ssh and the UI.
Note: the server name has been replaced with server.domain.com for privacy.
Thank you,
Toasty
Share this post:
Accepted Answer
It does not make sense to have Samba without a directory server of some sort. Currently that must be either OpenLDAP or the AD Connector. If you've already had OpenLDAP you can't switch, so I'd suggest reinstalling it.
If you used yum to uninstall, you could be heading for trouble. Avoid it if at all possible. You can look in your yum log to see what was uninstalled.
As far as I saw a couple of weeks ago 2FA is broken. Apparently there is some initialisation not being done with groups and the devs are looking at it. If you do log in, you get a blank screen. You can edit the url at that point to remove everything after the :81 and you're in. I only installed it to try and write up the documentation so I removed it again.
I'm not sure about Password Policies, but it is probably removing OpenLDAP - the directory server - which had broken Radius. It uses LDAP to authenticate all regular users. root is a system user rather than a regular user so authenticates outside LDAP.
If you used yum to uninstall, you could be heading for trouble. Avoid it if at all possible. You can look in your yum log to see what was uninstalled.
As far as I saw a couple of weeks ago 2FA is broken. Apparently there is some initialisation not being done with groups and the devs are looking at it. If you do log in, you get a blank screen. You can edit the url at that point to remove everything after the :81 and you're in. I only installed it to try and write up the documentation so I removed it again.
I'm not sure about Password Policies, but it is probably removing OpenLDAP - the directory server - which had broken Radius. It uses LDAP to authenticate all regular users. root is a system user rather than a regular user so authenticates outside LDAP.
Responses (4)
-
Accepted Answer
-
Accepted Answer
Hi Nick,
Thank you very much for the reply. The odd thing is that I just installed directory server yesterday. I'm pretty sure that I was using OpenLDAP earlier, but it doesn't seem to be in marketplace to install. So I've rebooted the machine a few times just hoping that something will fix itself when it boots, but it should come at no surprise that it's not working. I really don't want to re-install ClearOS again as I just did that a few months ago and things were finally working again without any issues.
Any guidance on reinstalling OpenLDAP would be greatly appreciated. -
Accepted Answer
-
Accepted Answer
Can you have a look at your yum.log to see what was removed when you uninstalled the directory server app. Perhaps post it here.
You can install the directory server app with "yum install app-openldap-directory". As you indicate you should not need it as it is only an extra front end, but it may pill in missing depencencies.
Also check openldap is running with a "service slapd status"
Please login to post a reply
You will need to be logged in to be able to post a reply. Login using the form on the right or register an account if you are new here.
Register Here »