Description of problem: ipa-client-samba install fails with the output : Continue to configure the system with these values? [no]: yes Cannot set machine account creds in Samba. Error: CalledProcessError(Command ['/usr/bin/net', 'changesecretpw', '-f'] returned non-zero exit status 1: 'secrets_domain_info_kerberos_keys: generation of a des-cbc-md5 key failed: Bad encryption type\nsecrets_fetch_or_upgrade_domain_info: secrets_domain_info_password_create(pw) failed for LINUX - NT_STATUS_UNSUCCESSFUL\nsecrets_prepare_password_change: secrets_fetch_or_upgrade_domain_info(LINUX) failed\nUnable to write the machine account password in the secrets database') Traceback (most recent call last): File "/usr/sbin/ipa-client-samba", line 15, in <module> sys.exit(ipa_client_samba.run()) File "/usr/lib/python3.7/site-packages/ipaclient/install/ipa_client_samba.py", line 724, in run fstore, statestore, options, domains[0], password File "/usr/lib/python3.7/site-packages/ipaclient/install/ipa_client_samba.py", line 358, in populate_samba_databases ipautil.run(args, stdin=password, encoding="utf-8") File "/usr/lib/python3.7/site-packages/ipapython/ipautil.py", line 598, in run p.returncode, arg_string, output_log, error_log ipapython.ipautil.CalledProcessError: CalledProcessError(Command ['/usr/bin/net', 'changesecretpw', '-f'] returned non-zero exit status 1: 'secrets_domain_info_kerberos_keys: generation of a des-cbc-md5 key failed: Bad encryption type\nsecrets_fetch_or_upgrade_domain_info: secrets_domain_info_password_create(pw) failed for LINUX - NT_STATUS_UNSUCCESSFUL\nsecrets_prepare_password_change: secrets_fetch_or_upgrade_domain_info(LINUX) failed\nUnable to write the machine account password in the secrets database') Version-Release number of selected component (if applicable): How reproducible: Steps to Reproduce: 1.Install freeipa-client 2.Install freeipa-client-samba 3. Actual results: The Installation fails Expected results: Installation without any Error. Additional info:
Created attachment 1633238 [details] ipaclientsamba-install.log
*** Bug 1769254 has been marked as a duplicate of this bug. ***
Moving to the right component.
I'm running a new build for Rawhide that includes updated patch from https://gitlab.com/samba-team/samba/merge_requests/829
FEDORA-2019-57d43f3b58 has been submitted as an update to Fedora 31. https://bodhi.fedoraproject.org/updates/FEDORA-2019-57d43f3b58
FEDORA-2019-fba8841170 has been submitted as an update to Fedora 32. https://bodhi.fedoraproject.org/updates/FEDORA-2019-fba8841170
Hi Dirk, what version of samba packages do you have installed ? try enabling update-testing, check what's version there and if you still see the problem, thanks.
Here comes the packages i have installed: [root@ipasamba ~]# rpm -qa | grep freeipa* freeipa-client-common-4.8.1-4.fc31.noarch freeipa-client-4.8.1-4.fc31.x86_64 freeipa-common-4.8.1-4.fc31.noarch freeipa-client-samba-4.8.1-4.fc31.x86_64 [root@ipasamba ~]# rpm -qa | grep samba* samba-client-libs-4.11.0-3.fc31.x86_64 samba-client-4.11.0-3.fc31.x86_64 python3-samba-4.11.0-3.fc31.x86_64 samba-common-4.11.0-3.fc31.noarch samba-common-libs-4.11.0-3.fc31.x86_64 samba-libs-4.11.0-3.fc31.x86_64 samba-common-tools-4.11.0-3.fc31.x86_64 samba-4.11.0-3.fc31.x86_64 samba-winbind-4.11.0-3.fc31.x86_64 samba-winbind-modules-4.11.0-3.fc31.x86_64 freeipa-client-samba-4.8.1-4.fc31.x86_64
Ok, so these (4.11.0-3) are not the builds that have no-DES patches. The patches came in 4.11.1-1 or later.
so,after install Testing Updates everything works fine :) [root@ipasamba ~]# rpm -qa | grep -i freeipa* freeipa-client-common-4.8.1-4.fc31.noarch freeipa-client-samba-4.8.1-4.fc31.x86_64 freeipa-common-4.8.1-4.fc31.noarch freeipa-client-4.8.1-4.fc31.x86_64 [root@ipasamba ~]# rpm -qa | grep -i samab [root@ipasamba ~]# rpm -qa | grep -i samba samba-4.11.2-0.fc31.x86_64 samba-libs-4.11.2-0.fc31.x86_64 samba-winbind-4.11.2-0.fc31.x86_64 freeipa-client-samba-4.8.1-4.fc31.x86_64 samba-client-libs-4.11.2-0.fc31.x86_64 python3-samba-4.11.2-0.fc31.x86_64 samba-common-libs-4.11.2-0.fc31.x86_64 samba-common-tools-4.11.2-0.fc31.x86_64 samba-client-4.11.2-0.fc31.x86_64 samba-common-4.11.2-0.fc31.noarch samba-winbind-modules-4.11.2-0.fc31.x86_64
Note that 4.11.2-0 is the build with previous version of no-DES patches. ;) The update I made as part of this bug should have 4.11.2-1.
Once update https://bodhi.fedoraproject.org/updates/FEDORA-2019-57d43f3b58 is pushed to testing, please test it too and help it with karma
samba-4.11.2-1.fc31 has been pushed to the Fedora 31 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2019-57d43f3b58
samba-4.11.2-1.fc31 has been pushed to the Fedora 31 stable repository. If problems still persist, please make note of it in this bug report.