Project

General

Profile

Scénario #31728

Stacktrace pendant gpo-tool sur Seth 2.7.2

Added by Gilles Grandgérard 3 months ago. Updated about 1 month ago.

Status:
Terminé (Sprint)
Priority:
Normal
Category:
-
Start date:
02/22/2021
Due date:
03/12/2021
% Done:

100%

Story points:
1.0
Velocity based estimate:
Release:
Release relationship:
Auto

Description

Objet

Constaté sur 1 DC du CD73 (avec full_audit actif)

Panic stacktrace samba pendant le reconfigure

En 1ere analyse

c'est dans le code gpo-tool permettant d'éviter les erreurs d'acl sysvol (self.conn peut être None après smb_connection !)

        if self.conn is None:
            self.conn = self.smb_connection(self.dc_hostname, SYSVOL_SERVICE, lp=self.lp, creds=self.creds, sign=True)

        self.conn.set_acl(smb_path, self.fs_sd, security.SECINFO_OWNER |
                                              security.SECINFO_GROUP |
                                              security.SECINFO_DACL |
                                              security.SECINFO_PROTECTED_DACL )


correction : le pb n'est pas ici. C'est une autre GPO (imprimante) qui perturbe Sysvol.

Voir https://gitlab.com/samba-team/samba/-/merge_requests/1381

2nd point le reconfigure est planté

==> enlever le 'exit 1' dans 30-gpo-script si l'install eole_script ne se fait pas bien.

Stack
GPO 'eole_script' created as {1978B823-379C-4BE4-A3B4-C95DE5AE69CF}
* Register 'WaitNetwork'
* Add 'WaitNetwork' to GPO EOLE "eole_script" 
* updatePolicy: Machine Registry /usr/share/eole/gpo/reg/Machine/Registry.xml Machine/Preferences/Registry/Registry.xml * updatePolicy: User Scripts /usr/share/eole/gpo/script/User/scripts.ini User/Scripts/scripts.ini
* updatePolicy: User Scripts /usr/share/eole/gpo/script/User/psscripts.ini User/Scripts/psscripts.ini
* updatePolicy: User Scripts /usr/share/eole/gpo/script/User/ps.ps1 User/Scripts/Logon/ps.ps1
* updatePolicy: Machine Scripts /usr/share/eole/gpo/script/Machine/scripts.ini Machine/Scripts/scripts.ini
* updatePolicy: Machine Scripts /usr/share/eole/gpo/script/Machine/psscripts.ini Machine/Scripts/psscripts.ini
* updatePolicy: Machine Scripts /usr/share/eole/gpo/script/Machine/installMinion.ps1 Machine/Scripts/StartUp/installMinion.ps1
* set extensions gPCMachineExtensionNames [{00000000-0000-0000-0000-000000000000}{BEE07A6A-EC9F-4659-B8C9-0B1937907C83}][{42B5FAAE-6536-11D2-AE5A-0000F87571E3}{40B6664F-4972-11D1-A7CA-0000F87571E3}][{B087BE9D-ED37-454F-AF9C-04291E351182}{BEE07A6A-EC9F-4659-B8C9-0B1937907C83}]
* set extensions gPCUserExtensionNames [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{D02B1F73-3407-48AE-BA88-E8213C6761F1}][{42B5FAAE-6536-11D2-AE5A-0000F87571E3}{40B66650-4972-11D1-A7CA-0000F87571E3}]
Linked to container 'DC=savoie-colleges,DC=fr'
* check_gpos_acl ...
* Correction acl savoie-colleges.fr\Policies\{1978B823-379C-4BE4-A3B4-C95DE5AE69CF}\User
* Correction acl savoie-colleges.fr\Policies\{1978B823-379C-4BE4-A3B4-C95DE5AE69CF}\Machine
===============================================================
INTERNAL ERROR: Signal 11 in pid 22954 (4.11.6-Ubuntu)
If you are running a recent Samba version, and if you think this problem is not yet fixed in the latest versions, please consider reporting this bug, see https://wiki.samba.org/index.php/Bug_Reporting
===============================================================
PANIC (pid 22954): internal error
BACKTRACE: 50 stack frames:
#0 /usr/lib/x86_64-linux-gnu/libsamba-util.so.0(log_stack_trace+0x30) [0x7efd0a39cf80]
#1 /usr/lib/x86_64-linux-gnu/libsmbconf.so.0(smb_panic_s3+0x18) [0x7efcf770a2e8]
#2 /usr/lib/x86_64-linux-gnu/libsamba-util.so.0(smb_panic+0x2d) [0x7efd0a39d07d]
#3 /usr/lib/x86_64-linux-gnu/libsamba-util.so.0(+0x1f2dd) [0x7efd0a39d2dd]
#4 /lib/x86_64-linux-gnu/libc.so.6(+0x3f040) [0x7efd0d077040]
#5 /usr/lib/x86_64-linux-gnu/samba/vfs/full_audit.so(+0x5be0) [0x7efce0b6dbe0]
#6 /usr/lib/x86_64-linux-gnu/samba/vfs/full_audit.so(+0x95e4) [0x7efce0b715e4]
#7 /usr/lib/x86_64-linux-gnu/samba/vfs/acl_xattr.so(+0x1524) [0x7efce0965524]
#8 /usr/lib/x86_64-linux-gnu/samba/vfs/dfs_samba4.so(+0xfb2) [0x7efce0761fb2]
#9 /usr/lib/x86_64-linux-gnu/samba/libsmbd-base.so.0(create_conn_struct_tos+0x366) [0x7efcf22fd316]
#10 /usr/lib/python3/dist-packages/samba/samba3/smbd.cpython-36m-x86_64-linux-gnu.so(+0x1f2f) [0x7efcf26f5f2f]
#11 /usr/lib/python3/dist-packages/samba/samba3/smbd.cpython-36m-x86_64-linux-gnu.so(+0x3994) [0x7efcf26f7994]
#12 python3() [0x50a4a5]
#13 python3(_PyEval_EvalFrameDefault+0x1226) [0x50cc96]
#14 python3() [0x507be4]
#15 python3() [0x509900]
#16 python3() [0x50a2fd]
#17 python3(_PyEval_EvalFrameDefault+0x1226) [0x50cc96]
#18 python3() [0x5095c8]
#19 python3() [0x50a2fd]
#20 python3(_PyEval_EvalFrameDefault+0x444) [0x50beb4]
#21 python3() [0x507be4]
#22 python3(_PyFunction_FastCallDict+0x2e2) [0x508ec2]
#23 python3() [0x594a01]
#24 python3(PyObject_Call+0x3e) [0x59fd0e]
#25 python3(_PyEval_EvalFrameDefault+0x17e6) [0x50d256]
#26 python3() [0x507be4]
#27 python3(_PyFunction_FastCallDict+0x2e2) [0x508ec2]
#28 python3() [0x594a01]
#29 python3(PyObject_Call+0x3e) [0x59fd0e]
#30 python3(_PyEval_EvalFrameDefault+0x17e6) [0x50d256]
#31 python3() [0x507be4]
#32 python3(_PyFunction_FastCallDict+0x357) [0x508f37]
#33 python3() [0x594a01]
#34 python3(PyObject_Call+0x3e) [0x59fd0e]
#35 python3(_PyEval_EvalFrameDefault+0x17e6) [0x50d256]
#36 python3() [0x507be4]
#37 python3(_PyFunction_FastCallDict+0x357) [0x508f37]
#38 python3() [0x594a01]
#39 python3(PyObject_Call+0x3e) [0x59fd0e]
#40 python3(_PyEval_EvalFrameDefault+0x17e6) [0x50d256]
#41 python3() [0x507be4]
#42 python3(PyEval_EvalCode+0x23) [0x50ad03]
#43 python3() [0x634e72]
#44 python3(PyRun_FileExFlags+0x97) [0x634f27]
#45 python3(PyRun_SimpleFileExFlags+0x17f) [0x6386df]
#46 python3(Py_Main+0x591) [0x639281]
#47 python3(main+0xe0) [0x4b0dc0]
#48 /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xe7) [0x7efd0d059bf7]
#49 python3(_start+0x2a) [0x5b259a]
Can not dump core: corepath not set up

Update 'eole_script' Erreur
run-parts: /usr/share/eole/postservice/30-gposcript exited with return code 1
Erreur : postservice

Associated revisions

Revision 22ccaa37 (diff)
Added by Gilles Grandgérard 3 months ago

pas de sortie en erreur si Gpo-tool plante

REF #31728

Revision e15a2eef (diff)
Added by Gilles Grandgérard 3 months ago

Quand une ACL GPO n'est pas OK, gpo-tool plante. Effectue un sysvolcheck
/ reset si besoin

REF #31728

Revision e1fce8d7 (diff)
Added by Gilles Grandgérard 3 months ago

typo test répertoire + désactive débug gpo-tool

REF #31728

History

#1 Updated by Gilles Grandgérard 3 months ago

Point 1 : problème corrigé sur l'env de prod cd73.

Il semble que la présence d'une erreur ACL dans le Sysvol d'une autre GPO soit à l'origine de la stack panic Samba

Pour contourner le pb : 'samba-tool ntacl sysvolreset' ... et attendre !

A faire:
- tous les jours, tester 'samba-tool ntacl sysvolcheck', si Erreur appliquer 'samba-tool ntacl sysvolreset'
- dans le reconfigure, avant l'application de GPO

Point 2 : paquet diffusé depuis 2.7.2

#2 Updated by Gilles Grandgérard 3 months ago

  • Status changed from Nouveau to En cours

#3 Updated by Gilles Grandgérard 3 months ago

  • Due date set to 03/12/2021
  • Target version set to sprint 2021 08-10 Equipe MENSR
  • Start date set to 02/22/2021
  • Release set to EOLE 2.7.2

#4 Updated by Gilles Grandgérard 3 months ago

  • Description updated (diff)

#5 Updated by Gilles Grandgérard 2 months ago

  • Status changed from En cours to Résolu

#6 Updated by Gilles Grandgérard 2 months ago

  • Project changed from Distribution EOLE to EOLE AD DC

#7 Updated by Joël Cuissinat 2 months ago

  • Assigned To set to Gilles Grandgérard
  • Story points set to 1.0

#8 Updated by Gilles Grandgérard about 1 month ago

  • Status changed from Résolu to Terminé (Sprint)

#9 Updated by Joël Cuissinat about 1 month ago

  • % Done changed from 0 to 100

Also available in: Atom PDF