[samba-jp:22809] samba 4.5.3 on FreeBSD 11.0R で 2台目DC

[KUNIYOSHI]

初めまして。KUNIYOSHIと申します。

　現在、FreeBSD 11.0R 2台で、sambaのAD環境を構築しております。

　1台目(bsd11r)でADドメインまでは構築済ですが、2台目(bsd12r)を、DCとして追加
　しようとしている所でつまづいております。

　インストールは、pkg/portsではなくソースからです。
　バージョンは4.4.5/4.4.6/4.4.7/4.4.8/4.5.3全部試し同様の結果でした。

  # rm -f /usr/local/samba/etc/smb.conf
  # rm -Rf /usr/local/samba/private/*
  # rm -Rf /var/lib/samba/*

　# /usr/local/samba/bin/samba-tool domain join xxx.local DC --use-ntvfs --dns-backend=BIND9_DLZ --username=administrator --debuglevel=3

　を実行すると、

  # tail -f /var/log/messages
Jan 17 11:24:38 bsd12r kernel: Failed to write core file for process python2.7 (error 14)
Jan 17 11:24:38 bsd12r kernel: pid 44026 (python2.7), uid 0: exited on signal 6

　とPythonが処理途中でcore dumpしています。

　Linux(debian/Oracle Linux等)では構築・運用実績が一応ある為、同様の手順で
　/etc/resolv.conf のnameserverは、1台目指定済
　/etc/krb5.conf も、kdcは、1台目指定済
　で、kinit/klistも動作しています。

　実際のコンソールのdebuglevel=3のログは、下記の通りです。
　4にしても、問題なさそうなところが詳細表示されているだけで、Abort trap直前の
　3行は同じでした。

　解決策、ヒント等なにか情報があればよろしくお願いします。

　pkg/portsは、4.4.5で止まっているので、4.4.5では動くと思っていたのですが
　FreeBSD 11.0Rでの2台目DCの実績はまだ無いのでしょうか？


　# /usr/local/samba/bin/samba-tool domain join xxx.local DC --use-ntvfs --dns-backend=BIND9_DLZ --username=administrator --debuglevel=3
lpcfg_load: refreshing parameters from /usr/local/samba/etc/smb.conf
GENSEC backend 'gssapi_spnego' registered
GENSEC backend 'gssapi_krb5' registered
GENSEC backend 'gssapi_krb5_sasl' registered
GENSEC backend 'spnego' registered
GENSEC backend 'schannel' registered
GENSEC backend 'naclrpc_as_system' registered
GENSEC backend 'sasl-EXTERNAL' registered
GENSEC backend 'ntlmssp' registered
GENSEC backend 'ntlmssp_resume_ccache' registered
GENSEC backend 'http_basic' registered
GENSEC backend 'http_ntlm' registered
GENSEC backend 'krb5' registered
GENSEC backend 'fake_gssapi_krb5' registered
Finding a writeable DC for domain 'XXX.local'
resolve_lmhosts: Attempting lmhosts lookup for name _ldap._tcp.XXX.local<0x0>
Found DC bsd11r.XXX.local
resolve_lmhosts: Attempting lmhosts lookup for name bsd11r.XXX.local<0x20>
Password for [XXX\administrator]:
workgroup is XXX
realm is XXX.local
ldb_wrap open of secrets.ldb
Could not find machine account in secrets database: Failed to fetch machine account password for XXX from both secrets.ldb (Could not find entry to match filter: '(&(flatname=XXX)(objectclass=primaryDomain))' base: 'cn=Primary Domains': No such object: dsdb_search at ../source4/dsdb/common/util.c:4575) and from /usr/local/samba/private/secrets.tdb: NT_STATUS_CANT_ACCESS_DOMAIN_INFO
Deleted CN=BSD12R,OU=Domain Controllers,DC=xxx,DC=local
Deleted CN=NTDS Settings,CN=BSD12R,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=xxx,DC=local
Deleted CN=BSD12R,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=xxx,DC=local
Adding CN=BSD12R,OU=Domain Controllers,DC=xxx,DC=local
Adding CN=BSD12R,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=xxx,DC=local
Adding CN=NTDS Settings,CN=BSD12R,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=xxx,DC=local
Using binding ncacn_ip_tcp:bsd11r.XXX.local[,seal]
resolve_lmhosts: Attempting lmhosts lookup for name bsd11r.XXX.local<0x20>
resolve_lmhosts: Attempting lmhosts lookup for name bsd11r.XXX.local<0x20>
Adding SPNs to CN=BSD12R,OU=Domain Controllers,DC=xxx,DC=local
Setting account password for BSD12R$
Enabling account
Calling bare provision
lpcfg_load: refreshing parameters from /usr/local/samba/etc/smb.conf
Looking up IPv4 addresses
Looking up IPv6 addresses
Setting up secrets.ldb
Setting up the registry
ldb_wrap open of hklm.ldb
Setting up the privileges database
Setting up idmap db
Setting up SAM db
Setting up sam.ldb partitions and settings
Setting up sam.ldb rootDSE
Pre-loading the Samba 4 and AD schema
partition_metadata: Migrating partition metadata: open of metadata.tdb gave: (null)
A Kerberos configuration suitable for Samba 4 has been generated at /usr/local/samba/private/krb5.conf
Provision OK for domain DN DC=xxx,DC=local
Starting replication
Using binding ncacn_ip_tcp:bsd11r.XXX.local[,seal]
resolve_lmhosts: Attempting lmhosts lookup for name bsd11r.XXX.local<0x20>
resolve_lmhosts: Attempting lmhosts lookup for name bsd11r.XXX.local<0x20>
Schema-DN[CN=Schema,CN=Configuration,DC=xxx,DC=local] objects[402/1550] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=xxx,DC=local] objects[804/1550] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=xxx,DC=local] objects[1206/1550] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=xxx,DC=local] objects[1550/1550] linked_values[0/0]
Analyze and apply schema objects
Replicated 1550 objects (0 linked attributes) for CN=Schema,CN=Configuration,DC=xxx,DC=local
Partition[CN=Configuration,DC=xxx,DC=local] objects[402/1680] linked_values[0/0]
Replicated 402 objects (0 linked attributes) for CN=Configuration,DC=xxx,DC=local
Partition[CN=Configuration,DC=xxx,DC=local] objects[804/1680] linked_values[0/0]
Replicated 402 objects (0 linked attributes) for CN=Configuration,DC=xxx,DC=local
Partition[CN=Configuration,DC=xxx,DC=local] objects[1206/1680] linked_values[0/0]
Replicated 402 objects (0 linked attributes) for CN=Configuration,DC=xxx,DC=local
Partition[CN=Configuration,DC=xxx,DC=local] objects[1608/1680] linked_values[0/0]
Replicated 402 objects (0 linked attributes) for CN=Configuration,DC=xxx,DC=local
Partition[CN=Configuration,DC=xxx,DC=local] objects[1680/1680] linked_values[34/0]
Replicated 72 objects (34 linked attributes) for CN=Configuration,DC=xxx,DC=local
Replicating critical objects from the base DN of the domain
Partition[DC=xxx,DC=local] objects[98/98] linked_values[23/0]
Abort trap


　よろしくお願いいたします。

-- 
KUNIYOSHI <nao_k ＠ din.or.jp>