sssd does not start due to module version missmatch

[kiozen]

I hope anyone can help with that. I am locked out of my user account that is managed by sssd because sssd seems to be broken after a system update. This is what journalctrl is reporting

Apr 06 14:08:05 CLIENT04 systemd[1]: Starting System Security Services Daemon...
Apr 06 14:08:05 CLIENT04 sssd[4594]: ldb: module version mismatch in ../source4/dsdb/samdb/ldb_modules/acl.c : ldb_version=1.2.4 module_version=1.2.3
Apr 06 14:08:05 CLIENT04 sssd[4594]: ldb: failed to initialise module /usr/lib64/ldb/samba/acl.so : Unavailable
Apr 06 14:08:05 CLIENT04 sssd[4594]: ldb: failed to initialise module /usr/lib64/ldb/samba : Unavailable
Apr 06 14:08:05 CLIENT04 sssd[4594]: SSSD couldn't load the configuration database [5]: Input/output error.
Apr 06 14:08:05 CLIENT04 systemd[1]: sssd.service: Main process exited, code=exited, status=4/NOPERMISSION
Apr 06 14:08:05 CLIENT04 systemd[1]: Failed to start System Security Services Daemon.
Apr 06 14:08:05 CLIENT04 systemd[1]: sssd.service: Unit entered failed state.
Apr 06 14:08:05 CLIENT04 systemd[1]: sssd.service: Failed with result 'exit-code'.

Yast says "1.2.3-lp150.7.2" is installed. However in the system I find

 ll /usr/lib64/libldb.so.1*
lrwxrwxrwx 1 root root     15 Mar 28 13:22 /usr/lib64/libldb.so.1 -> libldb.so.1.2.4
-rwxr-xr-x 1 root root 200768 Mar 28 13:22 /usr/lib64/libldb.so.1.2.4

Any clue how to fix this? A quick help is highly appreciated.

[Sauerland]

https://lists.opensuse.org/opensuse-.../msg00931.html

[kiozen]

Hm, great. I am not alone. Looks like someone in packaging made a lot of friends today Thanks for the hint. I will follow the ticket closely.

[eblock]

Just a quick update for everyone encountering that issue, the fix has been released last week.

[tsu2]

So,
It sounds like the fix should be that the User should login as root if User credentials don't work (Yeah, this breaks the rule against logging in as root, but this would be a special case and only as long as it takes to fix the problem).

Once logged in, open a terminal/console and run the following

zypper update

Or, if the above doesn't include an sssd updated package, then

zypper dup

After which you should be able to reboot and login as your normal User.

TSU

[ameijeiras]

Hi:

I fix the problem deleting symlink "/usr/lib64/ldb/samba" and restaring sssd

I hope anyone can help with that. I am locked out of my user account that is managed by sssd because sssd seems to be broken after a system update. This is what journalctrl is reporting

Apr 06 14:08:05 CLIENT04 systemd[1]: Starting System Security Services Daemon...
Apr 06 14:08:05 CLIENT04 sssd[4594]: ldb: module version mismatch in ../source4/dsdb/samdb/ldb_modules/acl.c : ldb_version=1.2.4 module_version=1.2.3
Apr 06 14:08:05 CLIENT04 sssd[4594]: ldb: failed to initialise module /usr/lib64/ldb/samba/acl.so : Unavailable
Apr 06 14:08:05 CLIENT04 sssd[4594]: ldb: failed to initialise module /usr/lib64/ldb/samba : Unavailable
Apr 06 14:08:05 CLIENT04 sssd[4594]: SSSD couldn't load the configuration database [5]: Input/output error.
Apr 06 14:08:05 CLIENT04 systemd[1]: sssd.service: Main process exited, code=exited, status=4/NOPERMISSION
Apr 06 14:08:05 CLIENT04 systemd[1]: Failed to start System Security Services Daemon.
Apr 06 14:08:05 CLIENT04 systemd[1]: sssd.service: Unit entered failed state.
Apr 06 14:08:05 CLIENT04 systemd[1]: sssd.service: Failed with result 'exit-code'.

Yast says "1.2.3-lp150.7.2" is installed. However in the system I find

 ll /usr/lib64/libldb.so.1*
lrwxrwxrwx 1 root root     15 Mar 28 13:22 /usr/lib64/libldb.so.1 -> libldb.so.1.2.4
-rwxr-xr-x 1 root root 200768 Mar 28 13:22 /usr/lib64/libldb.so.1.2.4

Any clue how to fix this? A quick help is highly appreciated.

[mhupfer]

Hi all,

This bug now seems to be back with openSUSE 15.3 and ldb2. Deleting the symlink still solves it, though. As does uninstalling the package "samba-dsdb-modules" which takes "samba-ad-dc" down with it.

Hi:

I fix the problem deleting symlink "/usr/lib64/ldb/samba" and restaring sssd

[mhupfer]

Hi all,

This bug now seems to be back with openSUSE 15.3 and ldb2. Deleting the symlink still solves it, though. As does uninstalling the package "samba-dsdb-modules" which takes "samba-ad-dc" down with it.

To be exact, the symlink to be deleted is "/usr/lib64/ldb2/modules/ldb/samba" now.

[hcvv]

Please start a new thread. Do you really think people are still checking such an old thread as this one for new posts?
(Except of course those poor forum moderators that read everything in their search for spam )