Samba dumps core if you try to export keytab in trusty

[Rowland Penny]

If you set samba up as an AD controller in trust and then run this command:

sudo samba-tool domain exportkeytab /etc/krb5.keytab -U Administrator

Nothing seems to happen and the keytab is not exported.

Run 'sudo su' and then run the command again, you get:

Illegal instruction (core dumped)

Unlike most of your bug reports, I actually know the cure, firstly the cause, On debian it was found that parts of samba were being built against the wrong libs, this was discovered in version 4.1.3, a patch was developed.

How to cure the problem, very easy, move to debian version 4.1.4 or 4.1.5

I know that you may say that it is a bit late now to upgrade a package, but think about it, do you really want to ship an LTS version with a badly broken major package, if it is a very easy fix???

lsb_release -rd
Description: Ubuntu Trusty Tahr (development branch)
Release: 14.04

 apt-cache policy samba
samba:
  Installed: 2:4.1.3+dfsg-2ubuntu3
  Candidate: 2:4.1.3+dfsg-2ubuntu3
  Version table:
 *** 2:4.1.3+dfsg-2ubuntu3 0
        500 http://gb.archive.ubuntu.com/ubuntu/ trusty/main amd64 Packages
        100 /var/lib/dpkg/status

[Rowland Penny (rpenny241155)]

18th Mar 19:00
OK, just downloaded an update and I am now on 2:4.1.3+dfsg-2ubuntu4, I still cannot get a keytab, same reason. Another user has also reported the same problem on the samba mailing list. I can confirm that this problem is easily repeatable, just install a fresh version of Ubuntu 14.04, install samba and provision as a DC, then try and get a keytab, I can confirm that you will not get it!!!

The only way that I can get a samba AD server to work on Ubuntu 14.04 is to download all the samba packages from debian jessie and install these, then it works, so could I please plead with you to stop messing about, drop version 4.1.3 and update to version 4.1.5 from jessie, Please, I beg you, I am down on my bended knees ;-)

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Stuart Longland (redhatter)]

For the record, my initial report of problems was here:
https://lists.samba.org/archive/samba/2014-March/179844.html

[Rowland Penny (rpenny241155)]

If it helps there is this in dmesg:

[ 86.177156] samba-tool[1643]: segfault at 0 ip (null) sp 00007fff780ce138 error 14 in python2.7[400000+2bd000]

this is after login as normal user, changing to root via 'sudo su' and running 'samba-tool domain exportkeytab /etc/krb5.keytab'

the response on the command line is: Segmentation fault (core dumped)

You only get this response, if you run the command as root, if you run it as a normal user, you get no response.

As I said, this was a known problem with the debian 4.1.3 package and it went away with the debian 4.1.4 package.

[Rowland Penny (rpenny241155)]

You can close this bug now, you have updated samba from version 4.1.3 to version 4.1.6, though it would have been nice to have been informed of this.
I can confirm that with version 4.1.6, you can now export a keytab.
What I cannot understand is just why you went with 4.1.3 in the first place????