Re: Samba DC provisioning fails with ACL-enabled NetBSD-current

[Chavdar Ivanov <ci4ic4%gmail.com@localhost>]

On Thu, 23 Jul 2020 at 15:59, Christos Zoulas <christos%zoulas.com@localhost> wrote:
>
> You are missing:
>
> PKG_OPTIONS.samba4=     acl

Unfortunately not - this is the line:

PKG_OPTIONS.samba4=acl avahi ldap pam winbind

and I get:

#... /net/samba4 ❯ make show-options
Any of the following general options may be selected:
        acl      Enable POSIX ACL support.
        ads      Enable Windows Active Directory support.
        avahi    Enable DNS service discovery and multicast DNS support.
        fam      Support using File Alteration Monitor (FAM).
        ldap     Enable LDAP support.
        pam      Enable PAM support.
        winbind  Enable name-service switch daemon support using
Windows Servers.

These options are enabled by default:
        ads avahi ldap pam winbind

These options are currently enabled:
        acl ads avahi ldap pam winbind

You can select which build options to use by setting PKG_DEFAULT_OPTIONS
or PKG_OPTIONS.samba4.

As I said, configure definitely has --with-acl-support and the log
file indicates attempts to find the bits in question, so it is
something else.

This is a fairly used pkgsrc build host, perhaps something has gone
wrong at some stage; I have another one setup with much less changes
since the original modification, I'll cvs update the whole tree and
after a rolling-replace will try one more to build samba4 with ad
support.

>
> in /etc/mk.conf
>
> christos
>
> > On Jul 23, 2020, at 9:54 AM, Chavdar Ivanov <ci4ic4%gmail.com@localhost> wrote:
> >
> > I decided to try the same procedure under -current. It failed with the same:
> >
> > ...
> > File "/usr/pkg/lib/python3.7/site-packages/samba/provision/__init__.py",
> > line 1707, in setsysvolacl
> >    raise ProvisioningError("Samba was compiled without the posix ACL
> > support that s3fs requires.  "
> > ...
> >
> > I checked the config.log file of the samba4 build and found in bin/config.log:
> >
> > # using /usr/pkgsrc/net/samba4/work/samba-4.12.5/buildtools/bin/waf
> > configure --prefix=/usr/pkg --infodir=/usr/pkg/info
> > --mandir=/usr/pkg/man --datarootdir=/usr/pkg/share/samba --libdir=
> > --localedir=/usr/pkg/share/locale --docdir=/usr/pkg/share/doc/samba
> > --with-statedir=/var/run --with-privatedir=/usr/pkg/etc/samba/private
> > --with-piddir=/var/run --with-cachedir=/var/run
> > --with-lockdir=/var/run --with-logfilebase=/var/log
> > --with-sockets-dir=/var/run --with-modulesdir=/usr/pkg/lib/samba
> > --with-privatelibdir=/usr/pkg/lib/samba/private
> > --with-privileged-socket-dir=/var/run
> > --with-configdir=/usr/pkg/etc/samba --with-libiconv=/usr/pkg
> > --abi-check-disable --disable-symbol-versions --jobs=4 --without-gpgme
> > --without-regedit --with-acl-support --with-ads --disable-cups
> > --without-fam --with-ldap --with-pam
> > --with-pammodulesdir=/usr/pkg/lib/samba/security --with-winbind
> > --enable-avahi
> >
> > So '--with-acl-support' is present. Further down it checks for a
> > number of other acl related include files, does not find libacl.h, but
> > finds acl.h; it can't find the library, though I don't know if it
> > should - I couldn't find any.
> >
> > The rest of the requirements have been apparently fulfilled; the
> > samba4 build is from this morning after the latest modifications to
> > the package; I've modified /etc/fstab to add posix1eacls and ran
> > tunefs, so I get
> >
> > ➜  xci getfacl .
> > # file: .
> > # owner: xci
> > # group: users
> > user::rwx
> > group::r-x
> > other::r-x
> >
> > Am I missing something else? I ran the provision command with '-d 10'
> > and got a 151MB log file, ending with
> > ...
> > dfs_samba4: connect to service[Unknown Service (snum == -1)]
> > vfswrap_fs_capabilities: timestamp resolution of sec available on
> > share (null), directory /
> > vfs_ChDir to /
> > vfs_ChDir: vfs_ChDir got /
> > dfs_samba4_disconnect() connect to service[(null)].
> > ERROR(<class 'samba.provision.ProvisioningError'>): Provision failed -
> > ProvisioningError: Samba was compiled without the posix ACL support
> > that s3fs requires.  Try installing libacl1-dev or libacl-devel, then
> > re-run configure and make.
> >  File "/usr/pkg/lib/python3.7/site-packages/samba/netcmd/domain.py",
> > line 505, in run
> >    backend_store_size=backend_store_size)
> >  File "/usr/pkg/lib/python3.7/site-packages/samba/provision/__init__.py",
> > line 2366, in provision
> >    backend_store_size=backend_store_size)
> >  File "/usr/pkg/lib/python3.7/site-packages/samba/provision/__init__.py",
> > line 1992, in provision_fill
> >    names.domaindn, lp, use_ntvfs)
> >  File "/usr/pkg/lib/python3.7/site-packages/samba/provision/__init__.py",
> > line 1707, in setsysvolacl
> >    raise ProvisioningError("Samba was compiled without the posix ACL
> > support that s3fs requires.  "
> > ....
> >
> >
> > Chavdar
> >
> >
> >
> > On Mon, 20 Jul 2020 at 17:44, Matthias Petermann <mp%petermann-it.de@localhost> wrote:
> >>
> >> Hello Christos and Patrick,
> >>
> >> Thank you very much for your quick help. It works with the POSIX.1E ACLs
> >> and I now seem to have a domain controller running on NetBSD. What a
> >> great day :-) I will now install a Windows as a Xen guest and try to
> >> join the domain.
> >>
> >> Kind regards
> >> Matthias
> >
> >
> >
> > --
> > ----
>


-- 
----