Can't disable AD service after upgrade from CORE -> SCALE

techie456 · November 16, 2024, 4:03pm

Hi all,

Just upgraded from CORE to SCALE (ElectricEel-24.10.0.2).

All went smoothly and re-imported config and all datasets/shares etc have been restored correctly, however, AD is faulted.

Whilst trying to disable the AD service (unchecking the box and hitting save) I get this error and therefore can’t disable the AD service to re-enter the credentials and attempt to re-join AD again so get rid of the faulted issue.

Also get the same error if I go into AD advanced settings to try and delete the Kerberos Keytab manually.

Thanks.

Traceback (most recent call last):
File “/usr/lib/python3/dist-packages/middlewared/plugins/activedirectory.py”, line 357, in do_update
await self.update_netbios_data(old, new)
File “/usr/lib/python3/dist-packages/middlewared/plugins/activedirectory.py”, line 128, in update_netbios_data
raise ValidationError(
middlewared.service_exception.ValidationError: [EINVAL] activedirectory.netbiosname: NetBIOS names may not be changed while service is enabled.

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File “/usr/lib/python3/dist-packages/middlewared/job.py”, line 488, in run
await self.future
File “/usr/lib/python3/dist-packages/middlewared/job.py”, line 533, in __run_body
rv = await self.method(*args)
^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/middlewared/schema/processor.py”, line 179, in nf
return await func(*args, **kwargs)
^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/middlewared/schema/processor.py”, line 49, in nf
res = await f(*args, **kwargs)
^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/middlewared/plugins/activedirectory.py”, line 359, in do_update
raise ValidationError(‘activedirectory_update.netbiosname’, str(e))
middlewared.service_exception.ValidationError: [EINVAL] activedirectory_update.netbiosname: [EINVAL] activedirectory.netbiosname: NetBIOS names may not be changed while service is enabled.

rhuntsman · November 18, 2024, 8:42pm

I am having this same issue.

techie456 · November 18, 2024, 9:19pm

In the end I just reinstalled and then didn’t import the config.

Manually recreated the shares and permissions - seemed quicker than trying to resolve the issues I was having.

Depends on how many shares/permissions etc you need to recreate I guess.

Good luck!

awalkerix · November 18, 2024, 9:22pm

I need to see a debug where this issue is manifested.

richard321 · November 19, 2024, 10:41am

I also have the same problem. I get the the following

========================8<============================

Error: Traceback (most recent call last):
File “/usr/lib/python3/dist-packages/middlewared/plugins/activedirectory.py”, line 357, in do_update
await self.update_netbios_data(old, new)
File “/usr/lib/python3/dist-packages/middlewared/plugins/activedirectory.py”, line 128, in update_netbios_data
raise ValidationError(
middlewared.service_exception.ValidationError: [EINVAL] activedirectory.netbiosname: NetBIOS names may not be changed while service is enabled.

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File “/usr/lib/python3/dist-packages/middlewared/job.py”, line 488, in run
await self.future
File “/usr/lib/python3/dist-packages/middlewared/job.py”, line 533, in __run_body
rv = await self.method(*args)
^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/middlewared/schema/processor.py”, line 179, in nf
return await func(*args, **kwargs)
^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/middlewared/schema/processor.py”, line 49, in nf
res = await f(*args, **kwargs)
^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/middlewared/plugins/activedirectory.py”, line 359, in do_update
raise ValidationError(‘activedirectory_update.netbiosname’, str(e))
middlewared.service_exception.ValidationError: [EINVAL] activedirectory_update.netbiosname: [EINVAL] activedirectory.netbiosname: NetBIOS names may not be changed while service is enabled.

awalkerix · November 19, 2024, 11:09am

I meant system debug, not a backtrace.

rhuntsman · November 21, 2024, 12:16am

I have a system debug, but I am unsure how to share it here. I cannot post a link, and it is not an allowed filetype for upload.

SmallBarky · November 21, 2024, 12:39am

Message @awalkerix with your ticket number or Bug info number

awalkerix · November 21, 2024, 2:10am

You can also email the debug to awalker@ixsystems.com. This isn’t a guarantee for software support, but it will help me to see whether what you’re experiencing is an issue already fixed for 24.10.1.

rhuntsman · November 21, 2024, 6:47pm

I just sent you an email with the debug. Thanks for you help!

awalkerix · November 21, 2024, 9:24pm

github.com/truenas/middleware

NAS-132684 / 25.04 / Handle case where netbiosalias is omitted from AD payload

truenas:master ← truenas:fix-netbiosname-alias-ad

opened 09:23PM - 21 Nov 24 UTC

anodos325

+6 -1

When netbiosalias is set in SMB configuration and omitted from the payload in th…e AD form, it gets populated as an empty list causing a ValidationError to be raised (because we don't allow changing netbios configuration while AD is enabled). Unfortunately, some howto guides online have recommended users to set the netbiosname and netbios alias to the same value, and as is the way of such things this advice is both unnecessary and detremental. This means that users who followed such guides are now unable to modify their AD configuration through the webui (which no longer sets the netbiosalias by default). Set the default for netbiosalias to None in the AD plugin so that it does not default to an empty list. None is treated as a special value indicating that the existing netbios aliases should be preserved.

Will be fixed in 24.10.1 (which just entered code freeze).

rhuntsman · November 22, 2024, 12:28am

Thank you. I will wait and give it a test. Will report back here.

rhuntsman · December 31, 2024, 4:57am

After updating to 24.10.1 I am still unable to deactivate Active Directory.

Traceback (most recent call last):
File “/usr/lib/python3/dist-packages/middlewared/plugins/activedirectory.py”, line 376, in do_update
await self.update_netbios_data(old, new)
File “/usr/lib/python3/dist-packages/middlewared/plugins/activedirectory.py”, line 158, in update_netbios_data
await self.middleware.call(‘smb.update’, {
File “/usr/lib/python3/dist-packages/middlewared/main.py”, line 1629, in call
return await self._call(
^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/middlewared/main.py”, line 1460, in _call
return await methodobj(*prepared_call.args)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/middlewared/service/config_service.py”, line 83, in update
rv = await self.middleware._call(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/middlewared/main.py”, line 1460, in _call
return await methodobj(*prepared_call.args)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/middlewared/schema/processor.py”, line 49, in nf
res = await f(*args, **kwargs)
^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/middlewared/schema/processor.py”, line 179, in nf
return await func(*args, **kwargs)
^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/middlewared/plugins/smb.py”, line 689, in do_update
verrors.check()
File “/usr/lib/python3/dist-packages/middlewared/service_exception.py”, line 72, in check
raise self
middlewared.service_exception.ValidationErrors: [EINVAL] smb_update.netbiosname: This parameter may not be changed after joining Active Directory (AD). If it must be changed, the proper procedure is to leave the AD domain and then alter the parameter before re-joining the domain.
[EINVAL] smb_update.netbiosalias: This parameter may not be changed after joining Active Directory (AD). If it must be changed, the proper procedure is to leave the AD domain and then alter the parameter before re-joining the domain.

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File “/usr/lib/python3/dist-packages/middlewared/job.py”, line 509, in run
await self.future
File “/usr/lib/python3/dist-packages/middlewared/job.py”, line 554, in __run_body
rv = await self.method(*args)
^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/middlewared/schema/processor.py”, line 179, in nf
return await func(*args, **kwargs)
^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/middlewared/schema/processor.py”, line 49, in nf
res = await f(*args, **kwargs)
^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/middlewared/plugins/activedirectory.py”, line 378, in do_update
raise ValidationError(‘activedirectory_update.netbiosname’, str(e))
middlewared.service_exception.ValidationError: [EINVAL] activedirectory_update.netbiosname: [EINVAL] smb_update.netbiosname: This parameter may not be changed after joining Active Directory (AD). If it must be changed, the proper procedure is to leave the AD domain and then alter the parameter before re-joining the domain.
[EINVAL] smb_update.netbiosalias: This parameter may not be changed after joining Active Directory (AD). If it must be changed, the proper procedure is to leave the AD domain and then alter the parameter before re-joining the domain.

I sent another Syetem Debug. Any help is appreciated.

Thank You!