/usr/lib/libndr-krb5pac.so.0: version `NDR_KRB5PAC_0.0.1' not found (required by /usr/lib/sssd/sssd/sssd_pac

[Itsuka1984]

SSSD reports error: Arch sssd[7251]: /usr/lib/sssd/sssd/sssd_pac: /usr/lib/libndr-krb5pac.so.0: version `NDR_KRB5PAC_0.0.1' not found (required by /usr/lib/sssd/sssd/sssd_pac)

Does anyone know how to fix this error message?

use Archlinux SSSD ver:sssd 2.9.5-1

[alexey-tikhonov]

Hi,

could you please show output of nm -D /usr/lib64/libndr-krb5pac.so.0.0.1 | grep NDR_KRB5PAC or objdump -T /usr/lib64/libndr-krb5pac.so.0.0.1 | grep NDR_KRB5PAC on your system?

[itouchdennis]

I have the same issue on my debian trixie installation:

It seems like the version string searches for "...0.0.1" instead of "0_0_1":

nm -D libndr-krb5pac.so.0.0.1 | grep NDR_KRB5PAC
000000000000fea0 T lzxpress_compress@@NDR_KRB5PAC_0_0_1
0000000000010440 T lzxpress_decompress@@NDR_KRB5PAC_0_0_1
0000000000011780 T lzxpress_huffman_compress@@NDR_KRB5PAC_0_0_1
0000000000012c10 T lzxpress_huffman_compress_talloc@@NDR_KRB5PAC_0_0_1
0000000000012d20 T lzxpress_huffman_decompress@@NDR_KRB5PAC_0_0_1
0000000000012de0 T lzxpress_huffman_decompress_talloc@@NDR_KRB5PAC_0_0_1
0000000000011760 T lzxpress_huffman_max_compressed_size@@NDR_KRB5PAC_0_0_1
0000000000016ef0 T ndr_claims_actual_wire_compression_alg@@NDR_KRB5PAC_0_0_1
0000000000016f10 T ndr_claims_compressed_size@@NDR_KRB5PAC_0_0_1
0000000000016ed0 T ndr_claims_compression_alg@@NDR_KRB5PAC_0_0_1
0000000000000000 A NDR_KRB5PAC_0_0_1
00000000000163a0 T ndr_print_CLAIM_ENTRY@@NDR_KRB5PAC_0_0_1
00000000000162c0 T ndr_print_CLAIM_ENTRY_VALUES@@NDR_KRB5PAC_0_0_1
0000000000015fc0 T ndr_print_CLAIM_INT64@@NDR_KRB5PAC_0_0_1
0000000000016460 T ndr_print_CLAIMS_ARRAY@@NDR_KRB5PAC_0_0_1
0000000000015f60 T ndr_print_CLAIMS_COMPRESSION_FORMAT@@NDR_KRB5PAC_0_0_1
0000000000016570 T ndr_print_CLAIMS_SET@@NDR_KRB5PAC_0_0_1
00000000000166c0 T ndr_print_CLAIMS_SET_CTR@@NDR_KRB5PAC_0_0_1
0000000000016c40 T ndr_print_CLAIMS_SET_METADATA@@NDR_KRB5PAC_0_0_1
0000000000016dd0 T ndr_print_CLAIMS_SET_METADATA_CTR@@NDR_KRB5PAC_0_0_1
0000000000016e50 T ndr_print_CLAIMS_SET_METADATA_NDR@@NDR_KRB5PAC_0_0_1
0000000000016750 T ndr_print_CLAIMS_SET_NDR@@NDR_KRB5PAC_0_0_1
0000000000015f20 T ndr_print_CLAIMS_SOURCE_TYPE@@NDR_KRB5PAC_0_0_1
00000000000161a0 T ndr_print_CLAIM_STRING@@NDR_KRB5PAC_0_0_1
0000000000015ec0 T ndr_print_CLAIM_TYPE@@NDR_KRB5PAC_0_0_1
00000000000160b0 T ndr_print_CLAIM_UINT64@@NDR_KRB5PAC_0_0_1
000000000000c620 T ndr_print_DATA_BLOB_REM@@NDR_KRB5PAC_0_0_1
000000000000e320 T ndr_print_netsamlogoncache_entry@@NDR_KRB5PAC_0_0_1
000000000000b660 T ndr_print_PAC_ATTRIBUTE_INFO_FLAGS@@NDR_KRB5PAC_0_0_1
000000000000b6c0 T ndr_print_PAC_ATTRIBUTES_INFO@@NDR_KRB5PAC_0_0_1
000000000000de20 T ndr_print_PAC_BUFFER@@NDR_KRB5PAC_0_0_1
000000000000e050 T ndr_print_PAC_BUFFER_RAW@@NDR_KRB5PAC_0_0_1
000000000000b190 T ndr_print_PAC_CONSTRAINED_DELEGATION@@NDR_KRB5PAC_0_0_1
000000000000b820 T ndr_print_PAC_CONSTRAINED_DELEGATION_CTR@@NDR_KRB5PAC_0_0_1
000000000000aef0 T ndr_print_PAC_CREDENTIAL_DATA@@NDR_KRB5PAC_0_0_1
000000000000afe0 T ndr_print_PAC_CREDENTIAL_DATA_CTR@@NDR_KRB5PAC_0_0_1
000000000000b070 T ndr_print_PAC_CREDENTIAL_DATA_NDR@@NDR_KRB5PAC_0_0_1
000000000000b0e0 T ndr_print_PAC_CREDENTIAL_INFO@@NDR_KRB5PAC_0_0_1
000000000000ad90 T ndr_print_PAC_CREDENTIAL_NTLM_FLAGS@@NDR_KRB5PAC_0_0_1
000000000000adf0 T ndr_print_PAC_CREDENTIAL_NTLM_SECPKG@@NDR_KRB5PAC_0_0_1
000000000000ae70 T ndr_print_PAC_CREDENTIAL_SUPPLEMENTAL_SECPKG@@NDR_KRB5PAC_0_0_1
000000000000df50 T ndr_print_PAC_DATA@@NDR_KRB5PAC_0_0_1
000000000000e150 T ndr_print_PAC_DATA_RAW@@NDR_KRB5PAC_0_0_1
000000000000b8b0 T ndr_print_PAC_DEVICE_INFO@@NDR_KRB5PAC_0_0_1
000000000000baa0 T ndr_print_PAC_DEVICE_INFO_CTR@@NDR_KRB5PAC_0_0_1
000000000000ac90 T ndr_print_PAC_DOMAIN_GROUP_MEMBERSHIP@@NDR_KRB5PAC_0_0_1
000000000000dc20 T ndr_print_PAC_INFO@@NDR_KRB5PAC_0_0_1
000000000000ad20 T ndr_print_PAC_LOGON_INFO@@NDR_KRB5PAC_0_0_1
000000000000b790 T ndr_print_PAC_LOGON_INFO_CTR@@NDR_KRB5PAC_0_0_1
000000000000ab50 T ndr_print_PAC_LOGON_NAME@@NDR_KRB5PAC_0_0_1
000000000000b730 T ndr_print_PAC_REQUESTER_SID@@NDR_KRB5PAC_0_0_1
000000000000abf0 T ndr_print_PAC_SIGNATURE_DATA@@NDR_KRB5PAC_0_0_1
000000000000c510 T ndr_print_PAC_TYPE@@NDR_KRB5PAC_0_0_1
000000000000b2a0 T ndr_print_PAC_UPN_DNS_FLAGS@@NDR_KRB5PAC_0_0_1
000000000000b4c0 T ndr_print_PAC_UPN_DNS_INFO@@NDR_KRB5PAC_0_0_1
000000000000b450 T ndr_print_PAC_UPN_DNS_INFO_EX@@NDR_KRB5PAC_0_0_1
000000000000b300 T ndr_print_PAC_UPN_DNS_INFO_SAM_NAME_AND_SID@@NDR_KRB5PAC_0_0_1
000000000000e250 T ndr_print_PAC_Validate@@NDR_KRB5PAC_0_0_1
0000000000013bf0 T ndr_pull_CLAIMS_SET@@NDR_KRB5PAC_0_0_1
0000000000015690 T ndr_pull_CLAIMS_SET_METADATA@@NDR_KRB5PAC_0_0_1
0000000000015c10 T ndr_pull_CLAIMS_SET_METADATA_NDR@@NDR_KRB5PAC_0_0_1
00000000000153e0 T ndr_pull_CLAIMS_SET_NDR@@NDR_KRB5PAC_0_0_1
000000000000f0f0 T ndr_pull_compression_end@@NDR_KRB5PAC_0_0_1
000000000000e460 T ndr_pull_compression_start@@NDR_KRB5PAC_0_0_1
000000000000fc10 T ndr_pull_compression_state_init@@NDR_KRB5PAC_0_0_1
00000000000090e0 T ndr_pull_netsamlogoncache_entry@@NDR_KRB5PAC_0_0_1
00000000000071c0 T ndr_pull_PAC_BUFFER@@NDR_KRB5PAC_0_0_1
000000000000bec0 T ndr_pull_PAC_BUFFER_RAW@@NDR_KRB5PAC_0_0_1
0000000000009280 T ndr_pull_PAC_CONSTRAINED_DELEGATION_CTR@@NDR_KRB5PAC_0_0_1
0000000000008010 T ndr_pull_PAC_CREDENTIAL_DATA@@NDR_KRB5PAC_0_0_1
0000000000008370 T ndr_pull_PAC_CREDENTIAL_DATA_CTR@@NDR_KRB5PAC_0_0_1
00000000000086e0 T ndr_pull_PAC_CREDENTIAL_DATA_NDR@@NDR_KRB5PAC_0_0_1
00000000000077b0 T ndr_pull_PAC_CREDENTIAL_INFO@@NDR_KRB5PAC_0_0_1
0000000000009d20 T ndr_pull_PAC_CREDENTIAL_NTLM_SECPKG@@NDR_KRB5PAC_0_0_1
0000000000007c90 T ndr_pull_PAC_CREDENTIAL_SUPPLEMENTAL_SECPKG@@NDR_KRB5PAC_0_0_1
0000000000008b50 T ndr_pull_PAC_DATA@@NDR_KRB5PAC_0_0_1
000000000000c250 T ndr_pull_PAC_DATA_RAW@@NDR_KRB5PAC_0_0_1
000000000000c690 T ndr_pull_PAC_INFO@@NDR_KRB5PAC_0_0_1
0000000000009a40 T ndr_pull_PAC_LOGON_INFO_CTR@@NDR_KRB5PAC_0_0_1
00000000000076c0 T ndr_pull_PAC_SIGNATURE_DATA@@NDR_KRB5PAC_0_0_1
000000000000be70 T ndr_pull_PAC_TYPE@@NDR_KRB5PAC_0_0_1
0000000000008f10 T ndr_pull_PAC_Validate@@NDR_KRB5PAC_0_0_1
00000000000132d0 T ndr_push_CLAIMS_SET@@NDR_KRB5PAC_0_0_1
00000000000167d0 T ndr_push_CLAIMS_SET_METADATA@@NDR_KRB5PAC_0_0_1
0000000000016ad0 T ndr_push_CLAIMS_SET_METADATA_NDR@@NDR_KRB5PAC_0_0_1
0000000000013a80 T ndr_push_CLAIMS_SET_NDR@@NDR_KRB5PAC_0_0_1
000000000000f190 T ndr_push_compression_end@@NDR_KRB5PAC_0_0_1
000000000000f100 T ndr_push_compression_start@@NDR_KRB5PAC_0_0_1
000000000000fd30 T ndr_push_compression_state_init@@NDR_KRB5PAC_0_0_1
0000000000009010 T ndr_push_netsamlogoncache_entry@@NDR_KRB5PAC_0_0_1
0000000000006fb0 T ndr_push_PAC_BUFFER@@NDR_KRB5PAC_0_0_1
000000000000bb30 T ndr_push_PAC_BUFFER_RAW@@NDR_KRB5PAC_0_0_1
0000000000009830 T ndr_push_PAC_CONSTRAINED_DELEGATION_CTR@@NDR_KRB5PAC_0_0_1
0000000000007aa0 T ndr_push_PAC_CREDENTIAL_DATA@@NDR_KRB5PAC_0_0_1
0000000000007be0 T ndr_push_PAC_CREDENTIAL_DATA_CTR@@NDR_KRB5PAC_0_0_1
00000000000085b0 T ndr_push_PAC_CREDENTIAL_DATA_NDR@@NDR_KRB5PAC_0_0_1
00000000000075f0 T ndr_push_PAC_CREDENTIAL_INFO@@NDR_KRB5PAC_0_0_1
0000000000007880 T ndr_push_PAC_CREDENTIAL_NTLM_SECPKG@@NDR_KRB5PAC_0_0_1
0000000000007960 T ndr_push_PAC_CREDENTIAL_SUPPLEMENTAL_SECPKG@@NDR_KRB5PAC_0_0_1
0000000000008a10 T ndr_push_PAC_DATA@@NDR_KRB5PAC_0_0_1
000000000000bd30 T ndr_push_PAC_DATA_RAW@@NDR_KRB5PAC_0_0_1
0000000000009fd0 T ndr_push_PAC_INFO@@NDR_KRB5PAC_0_0_1
0000000000009e40 T ndr_push_PAC_LOGON_INFO_CTR@@NDR_KRB5PAC_0_0_1
0000000000007500 T ndr_push_PAC_SIGNATURE_DATA@@NDR_KRB5PAC_0_0_1
000000000000bb20 T ndr_push_PAC_TYPE@@NDR_KRB5PAC_0_0_1
0000000000008e10 T ndr_push_PAC_Validate@@NDR_KRB5PAC_0_0_1
00000000000167c0 T ndr_size_CLAIMS_SET_NDR@@NDR_KRB5PAC_0_0_1
0000000000006f80 T _ndr_size_PAC_INFO@@NDR_KRB5PAC_0_0_1
000000000000de00 T ndr_size_PAC_INFO@@NDR_KRB5PAC_0_0_1
0000000000020200 D ndr_table_claims@@NDR_KRB5PAC_0_0_1
0000000000020160 D ndr_table_krb5pac@@NDR_KRB5PAC_0_0_1

Is there any hotfix I can deploy anyhow?

Edit: Seems to be a smbclient issue as its provides the package.

[alexey-tikhonov]

Similar issue is in Fedora: https://bodhi.fedoraproject.org/updates/FEDORA-2024-e6e22b06ef :

either all those need to be rebuilt and added to the update, or this build needs to be fixed to have the same provides as the previous stable one

Talk to maintainers of SSSD and Samba packages in your distribution.

[cryptomilk]

https://gitlab.com/samba-team/samba/-/merge_requests/3750

[cryptomilk]

You should open an ArchLinux bug that Samba 4.20.3 has a broken ABI.