Re: Samba DC provisioning fails with ACL-enabled NetBSD-current

[Chavdar Ivanov <ci4ic4%gmail.com@localhost>]

I decided to try the same procedure under -current. It failed with the same:

...
 File "/usr/pkg/lib/python3.7/site-packages/samba/provision/__init__.py",
line 1707, in setsysvolacl
    raise ProvisioningError("Samba was compiled without the posix ACL
support that s3fs requires.  "
...

I checked the config.log file of the samba4 build and found in bin/config.log:

# using /usr/pkgsrc/net/samba4/work/samba-4.12.5/buildtools/bin/waf
configure --prefix=/usr/pkg --infodir=/usr/pkg/info
--mandir=/usr/pkg/man --datarootdir=/usr/pkg/share/samba --libdir=
--localedir=/usr/pkg/share/locale --docdir=/usr/pkg/share/doc/samba
--with-statedir=/var/run --with-privatedir=/usr/pkg/etc/samba/private
--with-piddir=/var/run --with-cachedir=/var/run
--with-lockdir=/var/run --with-logfilebase=/var/log
--with-sockets-dir=/var/run --with-modulesdir=/usr/pkg/lib/samba
--with-privatelibdir=/usr/pkg/lib/samba/private
--with-privileged-socket-dir=/var/run
--with-configdir=/usr/pkg/etc/samba --with-libiconv=/usr/pkg
--abi-check-disable --disable-symbol-versions --jobs=4 --without-gpgme
--without-regedit --with-acl-support --with-ads --disable-cups
--without-fam --with-ldap --with-pam
--with-pammodulesdir=/usr/pkg/lib/samba/security --with-winbind
--enable-avahi

So '--with-acl-support' is present. Further down it checks for a
number of other acl related include files, does not find libacl.h, but
finds acl.h; it can't find the library, though I don't know if it
should - I couldn't find any.

The rest of the requirements have been apparently fulfilled; the
samba4 build is from this morning after the latest modifications to
the package; I've modified /etc/fstab to add posix1eacls and ran
tunefs, so I get

➜  xci getfacl .
# file: .
# owner: xci
# group: users
user::rwx
group::r-x
other::r-x

Am I missing something else? I ran the provision command with '-d 10'
and got a 151MB log file, ending with
...
dfs_samba4: connect to service[Unknown Service (snum == -1)]
vfswrap_fs_capabilities: timestamp resolution of sec available on
share (null), directory /
vfs_ChDir to /
vfs_ChDir: vfs_ChDir got /
dfs_samba4_disconnect() connect to service[(null)].
ERROR(<class 'samba.provision.ProvisioningError'>): Provision failed -
ProvisioningError: Samba was compiled without the posix ACL support
that s3fs requires.  Try installing libacl1-dev or libacl-devel, then
re-run configure and make.
  File "/usr/pkg/lib/python3.7/site-packages/samba/netcmd/domain.py",
line 505, in run
    backend_store_size=backend_store_size)
  File "/usr/pkg/lib/python3.7/site-packages/samba/provision/__init__.py",
line 2366, in provision
    backend_store_size=backend_store_size)
  File "/usr/pkg/lib/python3.7/site-packages/samba/provision/__init__.py",
line 1992, in provision_fill
    names.domaindn, lp, use_ntvfs)
  File "/usr/pkg/lib/python3.7/site-packages/samba/provision/__init__.py",
line 1707, in setsysvolacl
    raise ProvisioningError("Samba was compiled without the posix ACL
support that s3fs requires.  "
....


Chavdar



On Mon, 20 Jul 2020 at 17:44, Matthias Petermann <mp%petermann-it.de@localhost> wrote:
>
> Hello Christos and Patrick,
>
> Thank you very much for your quick help. It works with the POSIX.1E ACLs
> and I now seem to have a domain controller running on NetBSD. What a
> great day :-) I will now install a Windows as a Xen guest and try to
> join the domain.
>
> Kind regards
> Matthias



-- 
----