Topic: [SOLVED] no more trust relationship

[globalsi]

Hi,

After an upgrade (sme 9.1 x64) this week-end, we can't open open anymore a domain session on computers : no trust relationship
Here's the log of the update.

May 06 08:59:40 Updated: krb5-libs-1.10.3-42z1.el6_7.x86_64
May 06 08:59:41 Updated: libtalloc-2.1.5-1.el6_7.x86_64
May 06 08:59:42 Updated: nspr-4.11.0-0.1.el6_7.x86_64
May 06 08:59:42 Updated: libtdb-1.3.8-1.el6_7.x86_64
May 06 08:59:43 Updated: libtevent-0.9.26-2.el6_7.x86_64
May 06 08:59:45 Updated: samba-common-3.6.23-30.el6_7.x86_64
May 06 08:59:46 Updated: samba-winbind-clients-3.6.23-30.el6_7.x86_64
May 06 08:59:47 Updated: samba-winbind-3.6.23-30.el6_7.x86_64
May 06 08:59:48 Updated: nss-util-3.21.0-0.3.el6_7.x86_64
May 06 08:59:49 Updated: mysql-libs-5.1.73-5.el6_7.1.x86_64
May 06 08:59:49 Updated: mysql-5.1.73-5.el6_7.1.x86_64
May 06 08:59:51 Updated: nss-sysinit-3.21.0-0.3.el6_7.x86_64
May 06 08:59:52 Updated: nss-3.21.0-0.3.el6_7.x86_64
May 06 08:59:52 Updated: openssh-5.3p1-114.el6_7.x86_64
May 06 08:59:53 Updated: 32:bind-libs-9.8.2-0.37.rc1.el6_7.7.x86_64
May 06 08:59:54 Updated: httpd-tools-2.2.15-47.el6.centos.4.x86_64
May 06 08:59:56 Updated: httpd-2.2.15-47.el6.centos.4.x86_64
May 06 08:59:59 Updated: kernel-firmware-2.6.32-573.26.1.el6.noarch
May 06 09:00:01 Updated: clamav-db-0.99.2-1.el6.sme.x86_64
May 06 09:00:02 Updated: clamav-0.99.2-1.el6.sme.x86_64
May 06 09:00:03 Updated: clamd-0.99.2-1.el6.sme.x86_64
May 06 09:00:09 Installed: kernel-2.6.32-573.26.1.el6.x86_64
May 06 09:00:10 Updated: 1:mod_ssl-2.2.15-47.el6.centos.4.x86_64
May 06 09:00:11 Updated: 32:bind-utils-9.8.2-0.37.rc1.el6_7.7.x86_64
May 06 09:00:11 Updated: openssh-server-5.3p1-114.el6_7.x86_64
May 06 09:00:12 Updated: openssh-clients-5.3p1-114.el6_7.x86_64
May 06 09:00:13 Updated: nss-tools-3.21.0-0.3.el6_7.x86_64
May 06 09:00:15 Updated: mysql-server-5.1.73-5.el6_7.1.x86_64
May 06 09:00:17 Updated: samba-client-3.6.23-30.el6_7.x86_64
May 06 09:00:19 Updated: samba-3.6.23-30.el6_7.x86_64
May 06 09:00:19 Updated: tdb-tools-1.3.8-1.el6_7.x86_64
May 06 09:00:21 Updated: ca-certificates-2015.2.6-65.0.1.el6_7.noarch
May 06 09:00:22 Updated: kernel-headers-2.6.32-573.26.1.el6.x86_64
May 06 09:00:24 Updated: tzdata-2016d-1.el6.noarch
May 06 09:00:24 Updated: libssh2-1.4.2-2.el6_7.1.x86_64
May 06 09:00:26 Updated: e-smith-manager-2.6.0-5.el6.sme.noarch
May 06 09:00:27 Updated: 1:findutils-4.4.2-9.el6.x86_64
May 06 09:00:27 Updated: 1:grub-0.97-94.el6_7.1.x86_64

I've seen this bug for sme8 : https://bugs.contribs.org/show_bug.cgi?id=9448


Should I apply this :

Code: [Select]

yum downgrade samba3x\* libsmbclient
Thank you.

[brianr]

Hi,

After an upgrade (sme 9.1 x64) this week-end, we can't open open anymore a domain session on computers : no trust relationship
Here's the log of the update.
I've seen this bug for sme8 : https://bugs.contribs.org/show_bug.cgi?id=9448


Should I apply this :

Code: [Select]

yum downgrade samba3x\* libsmbclient
Thank you.

yes, there is an upstream bug which is not yet fixed.

https://forums.contribs.org/index.php?topic=52399.new;topicseen#new

[globalsi]

This is the (translated) result

[root@mysme ~]# yum downgrade samba3x\* libsmbclient
Complementary modules loaded: fastestmirror, smeserver
Configuration of downgrading process
Loading mirror speeds from cached hostfile
 * base: mirror.plusserver.com
 * smeos: mirrors.rbx.opencare.nl
 * smeupdates: mirrors.rbx.opencare.nl
 * updates: mirrors.ircam.fr
No package samba3x* available.
No correspondence for the available package: libsmbclient-3.6.23-20.el6.i686
No correspondence for the available package: libsmbclient-3.6.23-20.el6.x86_64
Nothing to do

any tips ?
should i try " samba\* " instead of " samba3x\*  "

[byte]

After an upgrade (sme 9.1 x64) this week-end, [...]

An upgrade from 8.x to 9.x is not possible.  Do you mean you took a backup on 8.x then installed 9.x and restored your data?

[byte]

any tips ?
should i try " samba\* " instead of " samba3x\*  "

Yes try using...

Code: [Select]

yum downgrade samba\* libsmbclient

[globalsi]

An upgrade from 8.x to 9.x is not possible.  Do you mean you took a backup on 8.x then installed 9.x and restored your data?

No, I had to say update. The server was already in 9.1

[globalsi]

Yes try using...

Code: [Select]

yum downgrade samba\* libsmbclient

it's work like a charm ! 

thank you alls !

[byte]

Great news

[eastend99]

Tried to update last night because there a few upstream security patches you really want to have installed on your system, especially when you run a website or remote webapps on your server. Unfortunately the downgrade trick did not work this time. The upgrade will force samba libsmbclient packages to version 3.6.23-30, a downgrade will install 3.6.23-25, which gives you the same problem. The last working version is 3.6.23-23.

The fix is to donwgrade twice (may be more in a few weeks time) untill you see version 3.6.23-23 gets installed.
Or use the yum update command and exclude the libclient packages from the update.

Can anyone explain why this is topic is marked solved? I think it should not be, the real problem still exists, hopefully an upstream fix will deal with that. This is just a temporary workaround which is about to fail again somehow any time soon.

[byte]

Can anyone explain why this is topic is marked solved?

Because the OP has fixed their problem with the solution provided.   Please open a new thread with your own issue.  Thanks.

[ReetP]

Eastend99,

FYI Seems your email address is blocking forum notifications - can you check it please.

[TerryF]

Tried to update last night because there a few upstream security patches you really want to have installed on your system, especially when you run a website or remote webapps on your server. Unfortunately the downgrade trick did not work this time. The upgrade will force samba libsmbclient packages to version 3.6.23-30, a downgrade will install 3.6.23-25, which gives you the same problem. The last working version is 3.6.23-23.

The fix is to donwgrade twice (may be more in a few weeks time) untill you see version 3.6.23-23 gets installed.
Or use the yum update command and exclude the libclient packages from the update.

Can anyone explain why this is topic is marked solved? I think it should not be, the real problem still exists, hopefully an upstream fix will deal with that. This is just a temporary workaround which is about to fail again somehow any time soon.

https://forums.contribs.org/index.php/topic,52402.0.html - Announcement now almost 1 month old has procedures to downgrade safely and to safely do updates

[globalsi]

Tried to update last night because there a few upstream security patches you really want to have installed on your system, especially when you run a website or remote webapps on your server. Unfortunately the downgrade trick did not work this time. The upgrade will force samba libsmbclient packages to version 3.6.23-30, a downgrade will install 3.6.23-25, which gives you the same problem. The last working version is 3.6.23-23.

For information I have the version 3.6.23-25 :

Code: [Select]

[root@mysmej ~]# yum list installed | grep samba
e-smith-samba.noarch   2.4.0-22.el6.sme   @anaconda-base-201512091034.x86_64/9.1
samba.x86_64           3.6.23-25.el6_7    @smeupdates                           
samba-client.x86_64    3.6.23-25.el6_7    @smeupdates                           
samba-common.x86_64    3.6.23-25.el6_7    @smeupdates                           
samba-winbind.x86_64   3.6.23-25.el6_7    @smeupdates                           
samba-winbind-clients.x86_64
and it works perfectly.