Author Topic: Problem bei der Einrichtung von Mail: The following modules failed while saving  (Read 5173 times)

ccs

  • Zen Apprentice
  • *
  • Posts: 1
  • Karma: +0/-0
    • View Profile
Guten Morgen,

ich habe folgendes Problem bei der Konfiguration des Mail-Servers:

Einige Module meldeten ein Fehler beim Sichern der Änderungen. Weitere Informationen finden Sie in den Logs in /var/log/zentyal/
The following modules failed while saving their changes, their state is unknown: mailfilter mail

Zur Umgebung. Der Zentyal ist Zusätzlicher Domaincontroller in einer 2008_R2 Domain, er läuft im Hyper-V.

Folgendes steht im Zentyal.log:

08:15:16 INFO> GlobalImpl.pm:616 EBox::GlobalImpl::saveAllModules - Saving config and restarting services: firewall mailfilter mail logs sogo
2019/04/11 08:15:16 INFO> Base.pm:231 EBox::Module::Base::save - Restarting service for module: firewall
2019/04/11 08:15:17 INFO> Base.pm:231 EBox::Module::Base::save - Restarting service for module: mailfilter
2019/04/11 08:15:19 ERROR> AuthKrbHelper.pm:172 EBox::Samba::AuthKrbHelper::_getTicketUsingKeytab - Could not get ticket: could not acquire credentials using an initial credentials context: Clients credentials have been revoked
 at Could not get ticket: could not acquire credentials using an initial credentials context: Clients credentials have been revoked
 at /usr/share/perl5/EBox/Samba/AuthKrbHelper.pm line 172
EBox::Samba::AuthKrbHelper::_getTicketUsingKeytab('EBox::Samba::AuthKrbHelper=HASH(0x55ae9521e900)', 'Administrator', 'OFRATECH.LOCAL', '/var/lib/zentyal/conf/samba.keytab') called at /usr/share/perl5/EBox/Samba/AuthKrbHelper.pm line 116
EBox::Samba::AuthKrbHelper::new('EBox::Samba::AuthKrbHelper', 'RID', 500) called at /usr/share/perl5/EBox/Module/LDAP.pm line 172
EBox::Module::LDAP::_connectToSchemaMaster('EBox::MailFilter=HASH(0x55ae94db0c28)') called at /usr/share/perl5/EBox/Module/LDAP.pm line 275
EBox::Module::LDAP::_loadSchemasFiles('EBox::MailFilter=HASH(0x55ae94db0c28)', 'ARRAY(0x55ae94b93d00)') called at /usr/share/perl5/EBox/Module/LDAP.pm line 267
EBox::Module::LDAP::_loadSchemas('EBox::MailFilter=HASH(0x55ae94db0c28)') called at /usr/share/perl5/EBox/Module/LDAP.pm line 341
EBox::Module::LDAP::_performSetup('EBox::MailFilter=HASH(0x55ae94db0c28)') called at /usr/share/perl5/EBox/Module/LDAP.pm line 331
EBox::Module::LDAP::_regenConfig('EBox::MailFilter=HASH(0x55ae94db0c28)') called at /usr/share/perl5/EBox/Module/Kerberos.pm line 378
EBox::Module::Kerberos::_regenConfig('EBox::MailFilter=HASH(0x55ae94db0c28)') called at /usr/share/perl5/EBox/Module/Base.pm line 234
eval {...} at /usr/share/perl5/EBox/Module/Base.pm line 233
EBox::Module::Base::save('EBox::MailFilter=HASH(0x55ae94db0c28)') called at /usr/share/perl5/EBox/GlobalImpl.pm line 648
eval {...} at /usr/share/perl5/EBox/GlobalImpl.pm line 647
EBox::GlobalImpl::saveAllModules('EBox::GlobalImpl=HASH(0x55ae8f166540)', 'progress', 'EBox::ProgressIndicator=HASH(0x55ae8e74a180)') called at /usr/share/perl5/EBox/Global.pm line 95
EBox::Global::AUTOLOAD('EBox::Global=HASH(0x55ae8e74a138)', 'progress', 'EBox::ProgressIndicator=HASH(0x55ae8e74a180)') called at /usr/share/zentyal/global-action line 32
eval {...} at /usr/share/zentyal/global-action line 30
2019/04/11 08:15:19 ERROR> GlobalImpl.pm:652 EBox::GlobalImpl::saveAllModules - Failed to save changes in module mailfilter: Could not get ticket: could not acquire credentials using an initial credentials context: Clients credentials have been revoked
2019/04/11 08:15:19 INFO> Base.pm:231 EBox::Module::Base::save - Restarting service for module: mail
2019/04/11 08:15:25 ERROR> AuthKrbHelper.pm:172 EBox::Samba::AuthKrbHelper::_getTicketUsingKeytab - Could not get ticket: could not acquire credentials using an initial credentials context: Clients credentials have been revoked
 at Could not get ticket: could not acquire credentials using an initial credentials context: Clients credentials have been revoked
 at /usr/share/perl5/EBox/Samba/AuthKrbHelper.pm line 172
EBox::Samba::AuthKrbHelper::_getTicketUsingKeytab('EBox::Samba::AuthKrbHelper=HASH(0x55ae9530c768)', 'Administrator', 'OFRATECH.LOCAL', '/var/lib/zentyal/conf/samba.keytab') called at /usr/share/perl5/EBox/Samba/AuthKrbHelper.pm line 116
EBox::Samba::AuthKrbHelper::new('EBox::Samba::AuthKrbHelper', 'RID', 500) called at /usr/share/perl5/EBox/Module/LDAP.pm line 172
EBox::Module::LDAP::_connectToSchemaMaster('EBox::Mail=HASH(0x55ae93b2d270)') called at /usr/share/perl5/EBox/Module/LDAP.pm line 275
EBox::Module::LDAP::_loadSchemasFiles('EBox::Mail=HASH(0x55ae93b2d270)', 'ARRAY(0x55ae95286388)') called at /usr/share/perl5/EBox/Module/LDAP.pm line 267
EBox::Module::LDAP::_loadSchemas('EBox::Mail=HASH(0x55ae93b2d270)') called at /usr/share/perl5/EBox/Module/LDAP.pm line 341
EBox::Module::LDAP::_performSetup('EBox::Mail=HASH(0x55ae93b2d270)') called at /usr/share/perl5/EBox/Module/LDAP.pm line 331
EBox::Module::LDAP::_regenConfig('EBox::Mail=HASH(0x55ae93b2d270)') called at /usr/share/perl5/EBox/Module/Kerberos.pm line 378
EBox::Module::Kerberos::_regenConfig('EBox::Mail=HASH(0x55ae93b2d270)') called at /usr/share/perl5/EBox/Module/Base.pm line 234
eval {...} at /usr/share/perl5/EBox/Module/Base.pm line 233
EBox::Module::Base::save('EBox::Mail=HASH(0x55ae93b2d270)') called at /usr/share/perl5/EBox/GlobalImpl.pm line 648
eval {...} at /usr/share/perl5/EBox/GlobalImpl.pm line 647
EBox::GlobalImpl::saveAllModules('EBox::GlobalImpl=HASH(0x55ae8f166540)', 'progress', 'EBox::ProgressIndicator=HASH(0x55ae8e74a180)') called at /usr/share/perl5/EBox/Global.pm line 95
EBox::Global::AUTOLOAD('EBox::Global=HASH(0x55ae8e74a138)', 'progress', 'EBox::ProgressIndicator=HASH(0x55ae8e74a180)') called at /usr/share/zentyal/global-action line 32
eval {...} at /usr/share/zentyal/global-action line 30
2019/04/11 08:15:25 ERROR> GlobalImpl.pm:652 EBox::GlobalImpl::saveAllModules - Failed to save changes in module mail: Could not get ticket: could not acquire credentials using an initial credentials context: Clients credentials have been revoked
2019/04/11 08:15:25 INFO> Base.pm:231 EBox::Module::Base::save - Restarting service for module: logs
2019/04/11 08:15:26 INFO> Base.pm:231 EBox::Module::Base::save - Restarting service for module: sogo
2019/04/11 08:15:31 ERROR> GlobalImpl.pm:727 EBox::GlobalImpl::saveAllModules - The following modules failed while saving their changes, their state is unknown: mailfilter mail  at The following modules failed while saving their changes, their state is unknown: mailfilter mail  at /usr/share/perl5/EBox/GlobalImpl.pm line 727
EBox::GlobalImpl::saveAllModules('EBox::GlobalImpl=HASH(0x55ae8f166540)', 'progress', 'EBox::ProgressIndicator=HASH(0x55ae8e74a180)') called at /usr/share/perl5/EBox/Global.pm line 95
EBox::Global::AUTOLOAD('EBox::Global=HASH(0x55ae8e74a138)', 'progress', 'EBox::ProgressIndicator=HASH(0x55ae8e74a180)') called at /usr/share/zentyal/global-action line 32
eval {...} at /usr/share/zentyal/global-action line 30

MFG

Christian Kratzer


BerT666

  • Zen Warrior
  • ***
  • Posts: 228
  • Karma: +17/-0
    • View Profile
Sieht so aus, als ob kein Kerberos Ticket erstellt werden kann weil Username / Passwort falsch sind...
Evtl mal mit einem anderen User al dem "allmächtigen" nutzen? Wurde der Admin evtl umbenannt?

Gruß

Thomas

b3it

  • Zen Apprentice
  • *
  • Posts: 2
  • Karma: +0/-0
    • View Profile
Wir haben hier das gleiche Problem.
Wir haben zentyal als zusätzlichen DC zu einer bestehenden Windows Domäne hinzugefügt.
Nun wollen wir das Mailsystem auf dem zentyal-Server aktivieren, was aber mit einem Fehler fehlschlägt:
Code: [Select]
2021/02/18 13:05:48 INFO> Base.pm:231 EBox::Module::Base::save - Restarting service for module: mail
2021/02/18 13:05:54 ERROR> AuthKrbHelper.pm:172 EBox::Samba::AuthKrbHelper::_getTicketUsingKeytab - Could not get ticket: could not acquire credentials using an initial credentials context: Clients credentials have been revoked
 at Could not get ticket: could not acquire credentials using an initial credentials context: Clients credentials have been revoked
 at /usr/share/perl5/EBox/Samba/AuthKrbHelper.pm line 172
EBox::Samba::AuthKrbHelper::_getTicketUsingKeytab('EBox::Samba::AuthKrbHelper=HASH(0x5572e8ee6970)', 'Administrator', 'SOME.DOMAIN', '/var/lib/zentyal/conf/samba.keytab') called at /usr/share/perl5/EBox/Samba/AuthKrbHelper.pm line 116
Der Standardbenutzer "Administrator" ist in unserer Domäne deaktiviert.
Woher nimmt zentyal den User "Administrator"?
Wenn ich die Ldap.pm richtig lese, ist der User "Administrator" dort hardcoded?
https://github.com/zentyal/zentyal/blob/master/main/samba/src/EBox/Module/LDAP.pm#L172
/usr/share/perl5/EBox/Module/LDAP.pm Zeile:172
Code: [Select]
my $krbHelper = new EBox::Samba::AuthKrbHelper(RID => 500);
Warum ist der Account nicht konfigurierbar?
Warum wird nicht zuerst versucht die Aktion mit dem aktuell angemeldeten Nutzer oder mit dem Nutzer der beim Beitritt zur Domäne hinterlegt wurde durchzuführen?

Kann man irgendwie einen anderen Nutzer hinterlegen und komplett auf "Administrator" verzichten?

« Last Edit: February 18, 2021, 02:57:40 pm by b3it »