# Issue running samba-ad-dc on RL8 with the NIST 800-171 policy enabled

**URL:** <https://forums.rockylinux.org/t/issue-running-samba-ad-dc-on-rl8-with-the-nist-800-171-policy-enabled/12068>\
**Category:** Rocky Linux Help & Support\
**Created:** [December 4, 2023, 5:33pm UTC](https://forums.rockylinux.org/t/issue-running-samba-ad-dc-on-rl8-with-the-nist-800-171-policy-enabled/12068 "2023-12-04T17:33:32Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![moosemaimer](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/moosemaimer/32/3639_2.png) [@moosemaimer](https://forums.rockylinux.org/u/moosemaimer)\
**Post date:** [December 4, 2023, 5:33pm UTC](https://forums.rockylinux.org/t/issue-running-samba-ad-dc-on-rl8-with-the-nist-800-171-policy-enabled/12068/1 "2023-12-04T17:33:32Z")

</div>

I’m having an issue trying to get the Samba DC running with a security policy enabled. Fresh minimal VM install from the DVD image, I download and unzip the .tar, run the bootstrap.sh for Centos8S, `./configure make make install` the source (default settings), set up the systemd service, and try to run it; but I hit the following error:

```auto
Nov 30 14:26:03 171-dc-test systemd[1]: Starting Samba Active Directory Domain Controller...
-- Subject: Unit samba-ad-dc.service has begun start-up
-- Defined-By: systemd
-- Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit samba-ad-dc.service has begun starting up.
Nov 30 14:26:03 171-dc-test samba[1449]: /usr/local/samba/sbin/samba: error while loading shared libraries: libevents-samba4.so: cannot open shared object file: No such file or directory
Nov 30 14:26:03 171-dc-test systemd[1]: samba-ad-dc.service: Control process exited, code=exited status=127
Nov 30 14:26:03 171-dc-test systemd[1]: samba-ad-dc.service: Failed with result 'exit-code'.
-- Subject: Unit failed
-- Defined-By: systemd
-- Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- The unit samba-ad-dc.service has entered the 'failed' state with result 'exit-code'.
Nov 30 14:26:03 171-dc-test systemd[1]: Failed to start Samba Active Directory Domain Controller.
-- Subject: Unit samba-ad-dc.service has failed
-- Defined-By: systemd
-- Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit samba-ad-dc.service has failed.
--
-- The result is failed.

```

The file it’s looking for exists, where it should be:  
`-rwxr-xr-x. 1 root root 8192 Nov 30 14:09 /usr/local/samba/lib/private/libevents-samba4.so`

Performing this exact procedure on another VM with no security policy enabled works perfectly. Setting `selinux` to permissive, stopping `fapolicyd`, and disabling FIPS mode & rebooting does not affect the results. Anybody know where I need to look to find out why this isn’t working? I’m assuming something is blocking access to that folder but I’m not sure what it would be. Thanks.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex020/uploads/rockylinux/original/1X/91b7219eec10e30013422e4df76c1d898711a5d5.svg) [@system](https://forums.rockylinux.org/u/system)\
**Post date:** [February 2, 2024, 5:34pm UTC](https://forums.rockylinux.org/t/issue-running-samba-ad-dc-on-rl8-with-the-nist-800-171-policy-enabled/12068/2 "2024-02-02T17:34:31Z")

</div>

Closed on February 2, 2024, 5:34pm UTC

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.