thr3ads.net - samba - [Samba] Second DC won't start LDAP daemon [May 2017]

If this information is useful, please help other people find it:
Share via:

Andrea Venturoli

2017-May-08 09:17 UTC

[Samba] Second DC won't start LDAP daemon

Hello.

I've got a network of FreeBSD servers which traditionally hosted a 
classic domain.
I upgraded some months ago, removing the old PDC and BDC and migrating 
to an AD DC controller in a jail.
This is working fine with Samba 4.4.13.

Now I'm trying to add a second DC, so I created a new jail on another 
physical server and went on with the setup, following:>
https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory


Replication works fine (i.e. kerberos ticket, user replication, etc...), 
but the second DC won't answer LDAP queries; in fact it's not binding to
the LDAP port!
I.e. on the new DC:> # samba-tool drs showrepl
> Failed to connect to ldap URL 'ldap://dc2.xxxxx.xxxxxxxx.xx' - LDAP
client internal error: NT_STATUS_CONNECTION_REFUSED
> Failed to connect to 'ldap://dc2.xxxxx.xxxxxxxxx.xx' with backend
'ldap': (null)
> ERROR(ldb): LDAP connection to dc2.xxxxx.xxxxxxxxx.xx failed - None
Obviously the same command works on the first DC.



Such a different behaviour puzzles me, as the host OSes are identical, 
the two jails are identical, with the same package set built the same 
way; the config files are identical too (with the obvious difference of 
the IP on the "interfaces" line):> global]
> 	log level=1
> 	netbios name = DC2
> 	realm = XXXXX.XXXXXXXX.XX
> 	workgroup = XXXXX
> 	server role = active directory domain controller
> 	idmap_ldb:use rfc2307 = yes
>         dns forwarder=x.y.z.15
>         interfaces=re0 x.y.z.41/24
>         bind interfaces only=yes


I've waded through the logs, but was not able to sort this out.
I'm attacching a level 3 log in case anyone is willing to give me a hint.

TIA.

  bye
	av.
-------------- next part --------------
[2017/05/08 10:39:06.794685,  0] ../source4/smbd/server.c:372(binary_smbd_main)
  samba version 4.4.13 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2016
[2017/05/08 10:39:06.795056,  3] ../source4/smbd/server.c:383(binary_smbd_main)
  Becoming a daemon.
[2017/05/08 10:39:06.837109,  3]
../auth/gensec/gensec_start.c:907(gensec_register)
  GENSEC backend 'gssapi_spnego' registered
[2017/05/08 10:39:06.837132,  3]
../auth/gensec/gensec_start.c:907(gensec_register)
  GENSEC backend 'gssapi_krb5' registered
[2017/05/08 10:39:06.837140,  3]
../auth/gensec/gensec_start.c:907(gensec_register)
  GENSEC backend 'gssapi_krb5_sasl' registered
[2017/05/08 10:39:06.849347,  3]
../auth/gensec/gensec_start.c:907(gensec_register)
  GENSEC backend 'spnego' registered
[2017/05/08 10:39:06.849365,  3]
../auth/gensec/gensec_start.c:907(gensec_register)
  GENSEC backend 'schannel' registered
[2017/05/08 10:39:06.849374,  3]
../auth/gensec/gensec_start.c:907(gensec_register)
  GENSEC backend 'naclrpc_as_system' registered
[2017/05/08 10:39:06.849381,  3]
../auth/gensec/gensec_start.c:907(gensec_register)
  GENSEC backend 'sasl-EXTERNAL' registered
[2017/05/08 10:39:06.855780,  3]
../auth/gensec/gensec_start.c:907(gensec_register)
  GENSEC backend 'ntlmssp' registered
[2017/05/08 10:39:06.855798,  3]
../auth/gensec/gensec_start.c:907(gensec_register)
  GENSEC backend 'ntlmssp_resume_ccache' registered
[2017/05/08 10:39:06.855806,  3]
../auth/gensec/gensec_start.c:907(gensec_register)
  GENSEC backend 'http_basic' registered
[2017/05/08 10:39:06.857173,  3]
../auth/gensec/gensec_start.c:907(gensec_register)
  GENSEC backend 'http_ntlm' registered
[2017/05/08 10:39:06.857194,  3]
../auth/gensec/gensec_start.c:907(gensec_register)
  GENSEC backend 'krb5' registered
[2017/05/08 10:39:06.857217,  3]
../auth/gensec/gensec_start.c:907(gensec_register)
  GENSEC backend 'fake_gssapi_krb5' registered
[2017/05/08 10:39:06.857259,  3]
../source4/ntptr/ntptr_base.c:67(ntptr_register)
  NTPTR backend 'simple_ldb'
[2017/05/08 10:39:06.865588,  3]
../source4/smbd/process_model.c:97(register_process_model)
  PROCESS_MODEL 'single' registered
[2017/05/08 10:39:06.865605,  3]
../source4/smbd/process_model.c:97(register_process_model)
  PROCESS_MODEL 'standard' registered
[2017/05/08 10:39:07.161475,  3] ../source4/auth/ntlm/auth.c:675(auth_register)
  AUTH backend 'sam' registered
[2017/05/08 10:39:07.161496,  3] ../source4/auth/ntlm/auth.c:675(auth_register)
  AUTH backend 'sam_ignoredomain' registered
[2017/05/08 10:39:07.161504,  3] ../source4/auth/ntlm/auth.c:675(auth_register)
  AUTH backend 'anonymous' registered
[2017/05/08 10:39:07.161512,  3] ../source4/auth/ntlm/auth.c:675(auth_register)
  AUTH backend 'winbind' registered
[2017/05/08 10:39:07.161519,  3] ../source4/auth/ntlm/auth.c:675(auth_register)
  AUTH backend 'winbind_wbclient' registered
[2017/05/08 10:39:07.161526,  3] ../source4/auth/ntlm/auth.c:675(auth_register)
  AUTH backend 'name_to_ntstatus' registered
[2017/05/08 10:39:07.161533,  3] ../source4/auth/ntlm/auth.c:675(auth_register)
  AUTH backend 'unix' registered
[2017/05/08 10:39:07.389962,  3]
../lib/ldb-samba/ldb_wrap.c:325(ldb_wrap_connect)
  ldb_wrap open of privilege.ldb
[2017/05/08 10:39:07.411759,  0] ../source4/smbd/server.c:481(binary_smbd_main)
  samba: using 'standard' process model
[2017/05/08 10:39:07.439655,  0] ../lib/util/become_daemon.c:124(daemon_ready)
  STATUS=daemon 'samba' finished starting up and ready to serve
connections
[2017/05/08 10:39:07.464964,  3]
../source4/rpc_server/dcerpc_server.c:1725(dcerpc_register_ep_server)
  DCERPC endpoint server 'rpcecho' registered
[2017/05/08 10:39:07.464993,  3]
../source4/rpc_server/dcerpc_server.c:1725(dcerpc_register_ep_server)
  DCERPC endpoint server 'epmapper' registered
[2017/05/08 10:39:07.466176,  2]
../source4/lib/socket/interface.c:286(interpret_interface)
  interpret_interface: Adding interface x.y.z.41/24
[2017/05/08 10:39:07.466200,  3]
../source4/lib/socket/interface.c:86(add_interface)
  add_interface: not adding duplicate interface x.y.z.41
[2017/05/08 10:39:07.466261,  0]
../source4/nbt_server/interfaces.c:228(nbtd_add_socket)
  Failed to bind to x.y.z.41:137 - NT_STATUS_ADDRESS_ALREADY_ASSOCIATED
[2017/05/08 10:39:07.479576,  0]
../source4/smbd/service_task.c:35(task_server_terminate)
  task_server_terminate: [nbtd failed to setup interfaces]
[2017/05/08 10:39:07.486233,  3]
../source4/rpc_server/dcerpc_server.c:1725(dcerpc_register_ep_server)
  DCERPC endpoint server 'remote' registered
[2017/05/08 10:39:07.499846,  2]
../source4/lib/socket/interface.c:286(interpret_interface)
  interpret_interface: Adding interface x.y.z.41/24
[2017/05/08 10:39:07.499870,  3]
../source4/lib/socket/interface.c:86(add_interface)
  add_interface: not adding duplicate interface x.y.z.41
[2017/05/08 10:39:07.499908,  0]
../source4/lib/tls/tlscert.c:72(tls_cert_generate)
  Attempting to autogenerate TLS self-signed keys for https for hostname
'DC2.xxxxx.xxxxxxxx.xx'
[2017/05/08 10:39:07.499968,  3]
../source4/lib/tls/tlscert.c:79(tls_cert_generate)
  Generating private key
[2017/05/08 10:39:07.553857,  3]
../source4/rpc_server/dcerpc_server.c:1725(dcerpc_register_ep_server)
  DCERPC endpoint server 'wkssvc' registered
[2017/05/08 10:39:07.553876,  3]
../source4/rpc_server/dcerpc_server.c:1725(dcerpc_register_ep_server)
  DCERPC endpoint server 'unixinfo' registered
[2017/05/08 10:39:07.560729,  2]
../source4/dsdb/repl/drepl_partitions.c:116(dreplsrv_load_partitions)
  dreplsrv_partition[CN=Configuration,dc=xxxxx,dc=xxxxxxxx,dc=xx] loaded
[2017/05/08 10:39:07.560771,  2]
../source4/dsdb/repl/drepl_partitions.c:116(dreplsrv_load_partitions)
  dreplsrv_partition[CN=Schema,CN=Configuration,dc=xxxxx,dc=xxxxxxxx,dc=xx]
loaded
[2017/05/08 10:39:07.560797,  2]
../source4/dsdb/repl/drepl_partitions.c:116(dreplsrv_load_partitions)
  dreplsrv_partition[dc=xxxxx,dc=xxxxxxxx,dc=xx] loaded
[2017/05/08 10:39:07.560848,  2]
../source4/dsdb/repl/drepl_partitions.c:116(dreplsrv_load_partitions)
  dreplsrv_partition[DC=ForestDnsZones,dc=xxxxx,dc=xxxxxxxx,dc=xx] loaded
[2017/05/08 10:39:07.560880,  2]
../source4/dsdb/repl/drepl_partitions.c:116(dreplsrv_load_partitions)
  dreplsrv_partition[DC=DomainDnsZones,dc=xxxxx,dc=xxxxxxxx,dc=xx] loaded
[2017/05/08 10:39:07.592855,  3]
../source4/rpc_server/dcerpc_server.c:1725(dcerpc_register_ep_server)
  DCERPC endpoint server 'samr' registered
[2017/05/08 10:39:07.610479,  3]
../source4/rpc_server/dcerpc_server.c:1725(dcerpc_register_ep_server)
  DCERPC endpoint server 'netlogon' registered
[2017/05/08 10:39:07.614260,  3]
../source4/rpc_server/dcerpc_server.c:1725(dcerpc_register_ep_server)
  DCERPC endpoint server 'dssetup' registered
[2017/05/08 10:39:07.614280,  3]
../source4/rpc_server/dcerpc_server.c:1725(dcerpc_register_ep_server)
  DCERPC endpoint server 'lsarpc' registered
[2017/05/08 10:39:07.614289,  3]
../source4/rpc_server/dcerpc_server.c:1725(dcerpc_register_ep_server)
  DCERPC endpoint server 'backupkey' registered
[2017/05/08 10:39:07.614298,  3]
../source4/rpc_server/dcerpc_server.c:1725(dcerpc_register_ep_server)
  DCERPC endpoint server 'drsuapi' registered
[2017/05/08 10:39:07.614306,  3]
../source4/rpc_server/dcerpc_server.c:1725(dcerpc_register_ep_server)
  DCERPC endpoint server 'browser' registered
[2017/05/08 10:39:07.620895,  2]
../source4/lib/socket/interface.c:286(interpret_interface)
  interpret_interface: Adding interface x.y.z.41/24
[2017/05/08 10:39:07.620925,  3]
../source4/lib/socket/interface.c:86(add_interface)
  add_interface: not adding duplicate interface x.y.z.41
[2017/05/08 10:39:07.621386,  2]
../source4/dsdb/kcc/kcc_service.c:128(kccsrv_load_partitions)
  kccsrv_partition[CN=Schema,CN=Configuration,dc=xxxxx,dc=xxxxxxxx,dc=xx] loaded
[2017/05/08 10:39:07.621415,  2]
../source4/dsdb/kcc/kcc_service.c:128(kccsrv_load_partitions)
  kccsrv_partition[CN=Configuration,dc=xxxxx,dc=xxxxxxxx,dc=xx] loaded
[2017/05/08 10:39:07.621426,  2]
../source4/dsdb/kcc/kcc_service.c:128(kccsrv_load_partitions)
  kccsrv_partition[dc=xxxxx,dc=xxxxxxxx,dc=xx] loaded
[2017/05/08 10:39:07.621435,  2]
../source4/dsdb/kcc/kcc_service.c:128(kccsrv_load_partitions)
  kccsrv_partition[DC=DomainDnsZones,dc=xxxxx,dc=xxxxxxxx,dc=xx] loaded
[2017/05/08 10:39:07.621444,  2]
../source4/dsdb/kcc/kcc_service.c:128(kccsrv_load_partitions)
  kccsrv_partition[DC=ForestDnsZones,dc=xxxxx,dc=xxxxxxxx,dc=xx] loaded
[2017/05/08 10:39:07.632889,  2]
../source4/lib/socket/interface.c:286(interpret_interface)
  interpret_interface: Adding interface x.y.z.41/24
[2017/05/08 10:39:07.632913,  3]
../source4/lib/socket/interface.c:86(add_interface)
  add_interface: not adding duplicate interface x.y.z.41
[2017/05/08 10:39:07.633529,  3]
../lib/ldb-samba/ldb_wrap.c:325(ldb_wrap_connect)
  ldb_wrap open of secrets.ldb
[2017/05/08 10:39:07.633661,  3]
../source4/dsdb/dns/dns_update.c:341(dnsupdate_check_names)
  Calling DNS name update script
[2017/05/08 10:39:07.636623,  3]
../source4/dsdb/dns/dns_update.c:356(dnsupdate_check_names)
  Calling SPN name update script
[2017/05/08 10:39:07.646938,  3]
../source4/rpc_server/dcerpc_server.c:1725(dcerpc_register_ep_server)
  DCERPC endpoint server 'eventlog6' registered
[2017/05/08 10:39:07.646969,  3]
../source4/rpc_server/dcerpc_server.c:1725(dcerpc_register_ep_server)
  DCERPC endpoint server 'dnsserver' registered
[2017/05/08 10:39:07.695049,  2]
../source4/lib/socket/interface.c:286(interpret_interface)
  interpret_interface: Adding interface x.y.z.41/24
[2017/05/08 10:39:07.695071,  3]
../source4/lib/socket/interface.c:86(add_interface)
  add_interface: not adding duplicate interface x.y.z.41
[2017/05/08 10:39:07.695271,  2]
../source4/lib/socket/interface.c:286(interpret_interface)
  interpret_interface: Adding interface x.y.z.41/24
[2017/05/08 10:39:07.695281,  3]
../source4/lib/socket/interface.c:86(add_interface)
  add_interface: not adding duplicate interface x.y.z.41
[2017/05/08 10:39:07.703316,  0] ../source4/smbd/server.c:211(samba_terminate)
  samba_terminate: nbtd failed to setup interfaces
[2017/05/08 10:39:07.717331,  2]
../source4/smbd/process_standard.c:123(standard_child_pipe_handler)
  Child 79950 (nbt) exited with status 1
[2017/05/08 10:39:07.777663,  0]
../lib/util/util_runcmd.c:328(samba_runcmd_io_handler)
  /usr/local/sbin/samba_dnsupdate: interpret_interface: Adding interface
x.y.z.41/24
[2017/05/08 10:39:07.777871,  0]
../lib/util/util_runcmd.c:328(samba_runcmd_io_handler)
  /usr/local/sbin/samba_dnsupdate: add_interface: not adding duplicate interface
x.y.z.41
[2017/05/08 10:39:08.201320,  3]
../lib/util/util_runcmd.c:308(samba_runcmd_io_handler)
  Child /usr/local/sbin/samba_spnupdate exited with status 0 - No error: 0
[2017/05/08 10:39:08.201738,  3]
../source4/dsdb/dns/dns_update.c:326(dnsupdate_spnupdate_done)
  Completed SPN update check OK
[2017/05/08 10:39:08.261183,  0]
../lib/util/util_runcmd.c:328(samba_runcmd_io_handler)
  /usr/local/sbin/samba_dnsupdate: ldb_wrap open of secrets.ldb
[2017/05/08 10:39:08.634399,  3]
../source4/smbd/service_stream.c:66(stream_terminate_connection)
  Terminating connection - 'dcesrv: NT_STATUS_CONNECTION_DISCONNECTED'
[2017/05/08 10:39:08.634418,  3]
../source4/smbd/process_single.c:114(single_terminate)
  single_terminate: reason[dcesrv: NT_STATUS_CONNECTION_DISCONNECTED]
[2017/05/08 10:39:08.692729,  3]
../source4/smbd/service_stream.c:66(stream_terminate_connection)
  Terminating connection - 'dcesrv: NT_STATUS_CONNECTION_DISCONNECTED'
[2017/05/08 10:39:08.692745,  3]
../source4/smbd/process_single.c:114(single_terminate)
  single_terminate: reason[dcesrv: NT_STATUS_CONNECTION_DISCONNECTED]
[2017/05/08 10:39:08.696140,  3]
../source4/smbd/service_stream.c:66(stream_terminate_connection)
  Terminating connection - 'dcesrv: NT_STATUS_CONNECTION_DISCONNECTED'
[2017/05/08 10:39:08.696157,  3]
../source4/smbd/process_single.c:114(single_terminate)
  single_terminate: reason[dcesrv: NT_STATUS_CONNECTION_DISCONNECTED]
[2017/05/08 10:39:09.472476,  2]
../lib/util/util_runcmd.c:328(samba_runcmd_io_handler)
  /usr/local/sbin/samba_dnsupdate: Failed update of 23 entries
[2017/05/08 10:39:09.493090,  3]
../lib/util/util_runcmd.c:308(samba_runcmd_io_handler)
  Child /usr/local/sbin/samba_dnsupdate exited with status 23 - Too many open
files in system
[2017/05/08 10:39:09.493134,  0]
../source4/dsdb/dns/dns_update.c:295(dnsupdate_nameupdate_done)
  ../source4/dsdb/dns/dns_update.c:294: Failed DNS update -
NT_STATUS_TOO_MANY_OPENED_FILES
[2017/05/08 10:39:10.809508,  3]
../source4/smbd/service_stream.c:66(stream_terminate_connection)
  Terminating connection - 'dcesrv: NT_STATUS_CONNECTION_DISCONNECTED'
[2017/05/08 10:39:10.809529,  3]
../source4/smbd/process_single.c:114(single_terminate)
  single_terminate: reason[dcesrv: NT_STATUS_CONNECTION_DISCONNECTED]
[2017/05/08 10:39:10.875815,  3]
../lib/ldb-samba/ldb_wrap.c:325(ldb_wrap_connect)
  ldb_wrap open of secrets.ldb
[2017/05/08 10:39:10.984157,  3]
../source4/rpc_server/drsuapi/dcesrv_drsuapi.c:82(dcesrv_drsuapi_DsBind)
  ../source4/rpc_server/drsuapi/dcesrv_drsuapi.c:82: doing DsBind with
system_session
[2017/05/08 10:39:10.985573,  3]
../source4/dsdb/repl/drepl_service.c:203(_drepl_schedule_replication)
  _drepl_schedule_replication: forcing sync of partition
(xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx,
DC=ForestDnsZones,dc=xxxxx,dc=xxxxxxxx,dc=xx,
xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx._msdcs.xxxxx.xxxxxxxx.xx)
[2017/05/08 10:39:11.019670,  3]
../source4/dsdb/repl/drepl_service.c:203(_drepl_schedule_replication)
  _drepl_schedule_replication: forcing sync of partition
(xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx,
DC=DomainDnsZones,dc=xxxxx,dc=xxxxxxxx,dc=xx,
xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx._msdcs.xxxxx.xxxxxxxx.xx)
[2017/05/08 10:39:11.053834,  3]
../source4/dsdb/repl/drepl_service.c:203(_drepl_schedule_replication)
  _drepl_schedule_replication: forcing sync of partition
(xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx, dc=xxxxx,dc=xxxxxxxx,dc=xx,
xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx._msdcs.xxxxx.xxxxxxxx.xx)
[2017/05/08 10:39:11.063342,  3]
../source4/dsdb/repl/drepl_service.c:203(_drepl_schedule_replication)
  _drepl_schedule_replication: forcing sync of partition
(xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx,
CN=Schema,CN=Configuration,dc=xxxxx,dc=xxxxxxxx,dc=xx,
xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx._msdcs.xxxxx.xxxxxxxx.xx)
[2017/05/08 10:39:11.071959,  3]
../source4/dsdb/repl/drepl_service.c:203(_drepl_schedule_replication)
  _drepl_schedule_replication: forcing sync of partition
(xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx,
CN=Configuration,dc=xxxxx,dc=xxxxxxxx,dc=xx,
xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx._msdcs.xxxxx.xxxxxxxx.xx)
[2017/05/08 10:39:12.009418,  2]
../source4/lib/socket/interface.c:286(interpret_interface)
  interpret_interface: Adding interface x.y.z.41/24
[2017/05/08 10:39:12.009439,  3]
../source4/lib/socket/interface.c:86(add_interface)
  add_interface: not adding duplicate interface x.y.z.41
[2017/05/08 10:39:12.009474,  2]
../source4/lib/socket/interface.c:286(interpret_interface)
  interpret_interface: Adding interface x.y.z.41/24
[2017/05/08 10:39:12.009482,  3]
../source4/lib/socket/interface.c:86(add_interface)
  add_interface: not adding duplicate interface x.y.z.41
[2017/05/08 10:39:12.009503,  3]
../libcli/nbt/lmhosts.c:185(resolve_lmhosts_file_as_sockaddr)
  resolve_lmhosts: Attempting lmhosts lookup for name
xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx._msdcs.xxxxx.xxxxxxxx.xx<0x20>
[2017/05/08 10:39:12.016999,  2]
../source4/lib/socket/interface.c:286(interpret_interface)
  interpret_interface: Adding interface x.y.z.41/24
[2017/05/08 10:39:12.017020,  3]
../source4/lib/socket/interface.c:86(add_interface)
  add_interface: not adding duplicate interface x.y.z.41
[2017/05/08 10:39:12.017056,  2]
../source4/lib/socket/interface.c:286(interpret_interface)
  interpret_interface: Adding interface x.y.z.41/24
[2017/05/08 10:39:12.017064,  3]
../source4/lib/socket/interface.c:86(add_interface)
  add_interface: not adding duplicate interface x.y.z.41
[2017/05/08 10:39:12.017082,  3]
../libcli/nbt/lmhosts.c:185(resolve_lmhosts_file_as_sockaddr)
  resolve_lmhosts: Attempting lmhosts lookup for name
xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx._msdcs.xxxxx.xxxxxxxx.xx<0x20>
[2017/05/08 10:39:12.023382,  3]
../lib/ldb-samba/ldb_wrap.c:325(ldb_wrap_connect)
  ldb_wrap open of secrets.ldb
[2017/05/08 10:39:12.396588,  2]
../source4/dsdb/repl/replicated_objects.c:1008(dsdb_replicated_objects_commit)
  Replicated 0 objects (0 linked attributes) for
DC=ForestDnsZones,dc=xxxxx,dc=xxxxxxxx,dc=xx
[2017/05/08 10:39:12.510154,  2]
../source4/dsdb/repl/replicated_objects.c:1008(dsdb_replicated_objects_commit)
  Replicated 0 objects (0 linked attributes) for
DC=DomainDnsZones,dc=xxxxx,dc=xxxxxxxx,dc=xx
[2017/05/08 10:39:12.693991,  2]
../source4/dsdb/repl/replicated_objects.c:1008(dsdb_replicated_objects_commit)
  Replicated 0 objects (0 linked attributes) for dc=xxxxx,dc=xxxxxxxx,dc=xx
[2017/05/08 10:39:12.828776,  2]
../source4/dsdb/repl/replicated_objects.c:1008(dsdb_replicated_objects_commit)
  Replicated 0 objects (0 linked attributes) for
CN=Schema,CN=Configuration,dc=xxxxx,dc=xxxxxxxx,dc=xx
[2017/05/08 10:39:12.942473,  2]
../source4/dsdb/repl/replicated_objects.c:1008(dsdb_replicated_objects_commit)
  Replicated 0 objects (0 linked attributes) for
CN=Configuration,dc=xxxxx,dc=xxxxxxxx,dc=xx
[2017/05/08 10:39:13.040983,  2]
../source4/dsdb/repl/drepl_notify.c:199(dreplsrv_notify_op_callback)
  dreplsrv_notify: DsReplicaSync successfuly sent to
xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx._msdcs.xxxxx.xxxxxxxx.xx
[2017/05/08 10:39:13.127085,  2]
../source4/dsdb/repl/drepl_notify.c:199(dreplsrv_notify_op_callback)
  dreplsrv_notify: DsReplicaSync successfuly sent to
xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx._msdcs.xxxxx.xxxxxxxx.xx
[2017/05/08 10:39:13.187651,  2]
../source4/dsdb/repl/drepl_notify.c:199(dreplsrv_notify_op_callback)
  dreplsrv_notify: DsReplicaSync successfuly sent to
xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx._msdcs.xxxxx.xxxxxxxx.xx
[2017/05/08 10:39:13.205981,  2]
../source4/dsdb/repl/drepl_notify.c:199(dreplsrv_notify_op_callback)
  dreplsrv_notify: DsReplicaSync successfuly sent to
xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx._msdcs.xxxxx.xxxxxxxx.xx
[2017/05/08 10:39:13.279243,  2]
../source4/dsdb/repl/drepl_notify.c:199(dreplsrv_notify_op_callback)
  dreplsrv_notify: DsReplicaSync successfuly sent to
xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx._msdcs.xxxxx.xxxxxxxx.xx
[2017/05/08 10:39:14.054196,  2]
../source4/rpc_server/drsuapi/getncchanges.c:1438(getncchanges_collect_objects)
  ../source4/rpc_server/drsuapi/getncchanges.c:1437: getncchanges on
DC=DomainDnsZones,dc=xxxxx,dc=xxxxxxxx,dc=xx using filter (uSNChanged>=3696)
[2017/05/08 10:39:14.056390,  3]
../source4/rpc_server/drsuapi/getncchanges.c:2018(dcesrv_drsuapi_DsGetNCChanges)
  UpdateRefs on getncchanges for xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
[2017/05/08 10:39:14.057589,  2]
../source4/rpc_server/drsuapi/getncchanges.c:2125(dcesrv_drsuapi_DsGetNCChanges)
  DsGetNCChanges with uSNChanged >= 3696 flags 0x00000074 on
<GUID=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx>;DC=DomainDnsZones,dc=xxxxx,dc=xxxxxxxx,dc=xx
gave 0 objects (done 0/0) 0 links (done 0/0 (as
S-1-5-21-xxxxxxxxxx-xxxxxxxxxx-xxxxxxxxx-xxxx))
[2017/05/08 10:39:14.127400,  2]
../source4/rpc_server/drsuapi/getncchanges.c:1438(getncchanges_collect_objects)
  ../source4/rpc_server/drsuapi/getncchanges.c:1437: getncchanges on
DC=ForestDnsZones,dc=xxxxx,dc=xxxxxxxx,dc=xx using filter (uSNChanged>=3689)
[2017/05/08 10:39:14.128828,  3]
../source4/rpc_server/drsuapi/getncchanges.c:2018(dcesrv_drsuapi_DsGetNCChanges)
  UpdateRefs on getncchanges for xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
[2017/05/08 10:39:14.129525,  2]
../source4/rpc_server/drsuapi/getncchanges.c:2125(dcesrv_drsuapi_DsGetNCChanges)
  DsGetNCChanges with uSNChanged >= 3689 flags 0x00000074 on
<GUID=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx>;DC=ForestDnsZones,dc=xxxxx,dc=xxxxxxxx,dc=xx
gave 0 objects (done 0/0) 0 links (done 0/0 (as
S-1-5-21-xxxxxxxxxx-xxxxxxxxxx-xxxxxxxxx-xxxx))
[2017/05/08 10:39:14.210939,  2]
../source4/rpc_server/drsuapi/getncchanges.c:1438(getncchanges_collect_objects)
  ../source4/rpc_server/drsuapi/getncchanges.c:1437: getncchanges on
dc=xxxxx,dc=xxxxxxxx,dc=xx using filter (uSNChanged>=3701)
[2017/05/08 10:39:14.222267,  3]
../source4/rpc_server/drsuapi/getncchanges.c:2018(dcesrv_drsuapi_DsGetNCChanges)
  UpdateRefs on getncchanges for xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
[2017/05/08 10:39:14.223059,  2]
../source4/rpc_server/drsuapi/getncchanges.c:2125(dcesrv_drsuapi_DsGetNCChanges)
  DsGetNCChanges with uSNChanged >= 3701 flags 0x00000074 on
<GUID=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx>;<SID=S-1-5-21-xxxxxxxxxx-xxxxxxxxxx-xxxxxxxxx>;dc=xxxxx,dc=xxxxxxxx,dc=xx
gave 0 objects (done 0/0) 0 links (done 0/0 (as
S-1-5-21-xxxxxxxxxx-xxxxxxxxxx-xxxxxxxxx-xxxx))
[2017/05/08 10:39:14.332754,  2]
../source4/rpc_server/drsuapi/getncchanges.c:1438(getncchanges_collect_objects)
  ../source4/rpc_server/drsuapi/getncchanges.c:1437: getncchanges on
CN=Schema,CN=Configuration,dc=xxxxx,dc=xxxxxxxx,dc=xx using filter
(uSNChanged>=1558)
[2017/05/08 10:39:14.383998,  3]
../source4/rpc_server/drsuapi/getncchanges.c:2018(dcesrv_drsuapi_DsGetNCChanges)
  UpdateRefs on getncchanges for xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
[2017/05/08 10:39:14.385990,  2]
../source4/rpc_server/drsuapi/getncchanges.c:2125(dcesrv_drsuapi_DsGetNCChanges)
  DsGetNCChanges with uSNChanged >= 1558 flags 0x00000074 on
<GUID=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx>;CN=Schema,CN=Configuration,dc=xxxxx,dc=xxxxxxxx,dc=xx
gave 0 objects (done 0/0) 0 links (done 0/0 (as
S-1-5-21-xxxxxxxxxx-xxxxxxxxxx-xxxxxxxxx-xxxx))
[2017/05/08 10:39:14.510782,  2]
../source4/rpc_server/drsuapi/getncchanges.c:1438(getncchanges_collect_objects)
  ../source4/rpc_server/drsuapi/getncchanges.c:1437: getncchanges on
CN=Configuration,dc=xxxxx,dc=xxxxxxxx,dc=xx using filter (uSNChanged>=3692)
[2017/05/08 10:39:14.549158,  3]
../source4/rpc_server/drsuapi/getncchanges.c:2018(dcesrv_drsuapi_DsGetNCChanges)
  UpdateRefs on getncchanges for xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
[2017/05/08 10:39:14.550244,  2]
../source4/rpc_server/drsuapi/getncchanges.c:2125(dcesrv_drsuapi_DsGetNCChanges)
  DsGetNCChanges with uSNChanged >= 3692 flags 0x00000074 on
<GUID=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx>;CN=Configuration,dc=xxxxx,dc=xxxxxxxx,dc=xx
gave 0 objects (done 0/0) 0 links (done 0/0 (as
S-1-5-21-xxxxxxxxxx-xxxxxxxxxx-xxxxxxxxx-xxxx))
[2017/05/08 10:39:20.732081,  2]
../source4/rpc_server/drsuapi/getncchanges.c:1438(getncchanges_collect_objects)
  ../source4/rpc_server/drsuapi/getncchanges.c:1437: getncchanges on
DC=ForestDnsZones,dc=xxxxx,dc=xxxxxxxx,dc=xx using filter (uSNChanged>=3689)
[2017/05/08 10:39:20.734300,  3]
../source4/rpc_server/drsuapi/getncchanges.c:2018(dcesrv_drsuapi_DsGetNCChanges)
  UpdateRefs on getncchanges for xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
[2017/05/08 10:39:20.735416,  2]
../source4/rpc_server/drsuapi/getncchanges.c:2125(dcesrv_drsuapi_DsGetNCChanges)
  DsGetNCChanges with uSNChanged >= 3689 flags 0x00000074 on
<GUID=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx>;DC=ForestDnsZones,dc=xxxxx,dc=xxxxxxxx,dc=xx
gave 0 objects (done 0/0) 0 links (done 0/0 (as
S-1-5-21-xxxxxxxxxx-xxxxxxxxxx-xxxxxxxxx-xxxx))
[2017/05/08 10:39:20.838495,  2]
../source4/rpc_server/drsuapi/getncchanges.c:1438(getncchanges_collect_objects)
  ../source4/rpc_server/drsuapi/getncchanges.c:1437: getncchanges on
DC=DomainDnsZones,dc=xxxxx,dc=xxxxxxxx,dc=xx using filter (uSNChanged>=3696)
[2017/05/08 10:39:20.841741,  3]
../source4/rpc_server/drsuapi/getncchanges.c:2018(dcesrv_drsuapi_DsGetNCChanges)
  UpdateRefs on getncchanges for xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
[2017/05/08 10:39:20.848697,  2]
../source4/rpc_server/drsuapi/getncchanges.c:2125(dcesrv_drsuapi_DsGetNCChanges)
  DsGetNCChanges with uSNChanged >= 3696 flags 0x00000074 on
<GUID=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx>;DC=DomainDnsZones,dc=xxxxx,dc=xxxxxxxx,dc=xx
gave 0 objects (done 0/0) 0 links (done 0/0 (as
S-1-5-21-xxxxxxxxxx-xxxxxxxxxx-xxxxxxxxx-xxxx))
[2017/05/08 10:39:20.921518,  2]
../source4/rpc_server/drsuapi/getncchanges.c:1438(getncchanges_collect_objects)
  ../source4/rpc_server/drsuapi/getncchanges.c:1437: getncchanges on
dc=xxxxx,dc=xxxxxxxx,dc=xx using filter (uSNChanged>=3701)
[2017/05/08 10:39:20.938811,  3]
../source4/rpc_server/drsuapi/getncchanges.c:2018(dcesrv_drsuapi_DsGetNCChanges)
  UpdateRefs on getncchanges for xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
[2017/05/08 10:39:20.947504,  2]
../source4/rpc_server/drsuapi/getncchanges.c:2125(dcesrv_drsuapi_DsGetNCChanges)
  DsGetNCChanges with uSNChanged >= 3701 flags 0x00000074 on
<GUID=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx>;<SID=S-1-5-xx-xxxxxxxxxx-xxxxxxxxxx-xxxxxxxxx>;dc=xxxxx,dc=xxxxxxxx,dc=xx
gave 0 objects (done 0/0) 0 links (done 0/0 (as
S-1-5-21-xxxxxxxxxx-xxxxxxxxxx-xxxxxxxxx-xxxx))
[2017/05/08 10:39:21.031778,  2]
../source4/rpc_server/drsuapi/getncchanges.c:1438(getncchanges_collect_objects)
  ../source4/rpc_server/drsuapi/getncchanges.c:1437: getncchanges on
CN=Schema,CN=Configuration,dc=xxxxx,dc=xxxxxxxx,dc=xx using filter
(uSNChanged>=1558)
[2017/05/08 10:39:21.109107,  3]
../source4/rpc_server/drsuapi/getncchanges.c:2018(dcesrv_drsuapi_DsGetNCChanges)
  UpdateRefs on getncchanges for xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
[2017/05/08 10:39:21.111409,  2]
../source4/rpc_server/drsuapi/getncchanges.c:2125(dcesrv_drsuapi_DsGetNCChanges)
  DsGetNCChanges with uSNChanged >= 1558 flags 0x00000074 on
<GUID=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx>;CN=Schema,CN=Configuration,dc=xxxxx,dc=xxxxxxxx,dc=xx
gave 0 objects (done 0/0) 0 links (done 0/0 (as
S-1-5-21-xxxxxxxxxx-xxxxxxxxxx-xxxxxxxxx-xxxx))
[2017/05/08 10:39:21.260198,  2]
../source4/rpc_server/drsuapi/getncchanges.c:1438(getncchanges_collect_objects)
  ../source4/rpc_server/drsuapi/getncchanges.c:1437: getncchanges on
CN=Configuration,dc=xxxxx,dc=xxxxxxxx,dc=xx using filter (uSNChanged>=3692)
[2017/05/08 10:39:21.314613,  3]
../source4/rpc_server/drsuapi/getncchanges.c:2018(dcesrv_drsuapi_DsGetNCChanges)
  UpdateRefs on getncchanges for xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
[2017/05/08 10:39:21.315838,  2]
../source4/rpc_server/drsuapi/getncchanges.c:2125(dcesrv_drsuapi_DsGetNCChanges)
  DsGetNCChanges with uSNChanged >= 3692 flags 0x00000074 on
<GUID=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx>;CN=Configuration,dc=xxxxx,dc=xxxxxxxx,dc=xx
gave 0 objects (done 0/0) 0 links (done 0/0 (as
S-1-5-21-xxxxxxxxxx-xxxxxxxxxx-xxxxxxxxx-xxxx))
[2017/05/08 10:39:22.824918,  2]
../source4/dsdb/repl/replicated_objects.c:1008(dsdb_replicated_objects_commit)
  Replicated 0 objects (0 linked attributes) for
DC=DomainDnsZones,dc=xxxxx,dc=xxxxxxxx,dc=xx
[2017/05/08 10:39:23.004276,  2]
../source4/dsdb/repl/replicated_objects.c:1008(dsdb_replicated_objects_commit)
  Replicated 0 objects (0 linked attributes) for
DC=ForestDnsZones,dc=xxxxx,dc=xxxxxxxx,dc=xx
[2017/05/08 10:39:23.190172,  2]
../source4/dsdb/repl/replicated_objects.c:1008(dsdb_replicated_objects_commit)
  Replicated 0 objects (0 linked attributes) for dc=xxxxx,dc=xxxxxxxx,dc=xx
[2017/05/08 10:39:23.369664,  2]
../source4/dsdb/repl/replicated_objects.c:1008(dsdb_replicated_objects_commit)
  Replicated 0 objects (0 linked attributes) for
CN=Schema,CN=Configuration,dc=xxxxx,dc=xxxxxxxx,dc=xx
[2017/05/08 10:39:23.499373,  2]
../source4/dsdb/repl/replicated_objects.c:1008(dsdb_replicated_objects_commit)
  Replicated 0 objects (0 linked attributes) for
CN=Configuration,dc=xxxxx,dc=xxxxxxxx,dc=xx
[2017/05/08 10:39:54.749113,  0]
../source4/smbd/process_standard.c:127(standard_child_pipe_handler)
  Child 79952 (ldap) terminated with signal 4

Andrea Venturoli

2017-May-15 16:58 UTC

head link

[Samba] Second DC won't start LDAP daemon

On 05/08/17 11:17, Andrea Venturoli wrote:> Hello.
> 
> I've got a network of FreeBSD servers which traditionally hosted a 
> classic domain.
> I upgraded some months ago, removing the old PDC and BDC and migrating 
> to an AD DC controller in a jail.
> This is working fine with Samba 4.4.13.
> 
> Now I'm trying to add a second DC, so I created a new jail on another 
> physical server and went on with the setup, following:
>>
https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory
After spending several hours trying to sort this out, I found that the 
ldap task will work (and bind to port 389) if I put "tls enabled=no"
in
the config file.

With "tls enabled=yes" (or nothing, since it's the default) I get:
"Child 24011 (ldap) terminated with signal 4"

I tried generating a self-signed certificate as per:>
https://wiki.samba.org/index.php/Configuring_LDAP_over_SSL_(LDAPS)_on_a_Samba_AD_DC
Unfortunately, the only effect is that "Attempting to autogenerate TLS 
self-signed keys for https for hostname 'XXX.xxxxx.xxxxxxxx.xx'"
changes
to "TLS autogeneration skipped - some TLS files already exist".
Then I get the same error as above.

Any suggestion?
TIA.

  bye
	av.

Andrew Bartlett

2017-May-17 19:14 UTC

head link

[Samba] Second DC won't start LDAP daemon

On Mon, 2017-05-15 at 18:58 +0200, Andrea Venturoli via samba
wrote:> On 05/08/17 11:17, Andrea Venturoli wrote:
> > Hello.
> > 
> > I've got a network of FreeBSD servers which traditionally hosted a
> > classic domain.
> > I upgraded some months ago, removing the old PDC and BDC and migrating
> > to an AD DC controller in a jail.
> > This is working fine with Samba 4.4.13.
> > 
> > Now I'm trying to add a second DC, so I created a new jail on
another
> > physical server and went on with the setup, following:
> > >
https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory
> 
> After spending several hours trying to sort this out, I found that the 
> ldap task will work (and bind to port 389) if I put "tls
enabled=no" in
> the config file.
> 
> With "tls enabled=yes" (or nothing, since it's the default) I
get:
> "Child 24011 (ldap) terminated with signal 4"
> 
> I tried generating a self-signed certificate as per:
> >
https://wiki.samba.org/index.php/Configuring_LDAP_over_SSL_(LDAPS)_on_a_Samba_AD_DC
> 
> Unfortunately, the only effect is that "Attempting to autogenerate TLS
> self-signed keys for https for hostname
'XXX.xxxxx.xxxxxxxx.xx'" changes
> to "TLS autogeneration skipped - some TLS files already exist".
> Then I get the same error as above.
> 
> 
> Any suggestion?
> TIA.
What is your platform, and what is signal 4 on your platform?  It is
SIGILL on x86_64 linux.

Thanks,

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba

Reasonably Related Threads

Search for more maybe matching threads

samba - May 2017 - Second DC won't start LDAP daemon

[Samba] Second DC won't start LDAP daemon

[Samba] Second DC won't start LDAP daemon

[Samba] Second DC won't start LDAP daemon

Reasonably Related Threads