samba - Feb 2018 - SAMBA failed join domain DC

the first letter sent a journal

как можно 
========== log messages join DC===========....more than a thousand lines of
messages
.....

Replicated 3 objects (0 linked attributes) for
DC=example,DC=ruCommitting SAM databaseDiscarding older DRS linked
attribute update to member on .
.......... 
....more than a thousand lines of messages
......
Applying linked
attribute change:dn: <GUID=9922ff18-fa1f-4781-a126-
de32d26c61b7>;<SID=S-1-5-21-1715567821-920026266-839522115-
4194>;CN=12312,OU=fsdf,OU=Office,DC=example,DC=ruchangetype: modifyadd:
memberOfmemberOf: <GUID=272c834e-48ce-4002-8c95-c41781605d42>;<SID=S-1-
5-21-1715567821 -920026266-839522115-
1109>;CN=Commerce,OU=Security_Groups,OU=Services
Account s,DC=example,DC=ru

......
....more than a thousand lines of messages
..........

added interface eth0 ip=10.2.1.15 bcast=10.2.7.255
netmask=255.255.248.0Adding 1 remote DNS records for SRV-SITE2-
DC1.example.ruUsing binding ncacn_ip_tcp:srv-
dc01.example.ru[,sign]Mapped to DCERPC endpoint 135added interface eth0
ip=10.2.1.15 bcast=10.2.7.255 netmask=255.255.248.0added interface eth0
ip=10.2.1.15 bcast=10.2.7.255 netmask=255.255.248.0resolve_lmhosts:
Attempting lmhosts lookup for name srv-
dc01.example.ru<0x20>getlmhostsent: lmhost entry: 127.0.0.1
localhost Mapped to DCERPC endpoint 52781added interface eth0
ip=10.2.1.15 bcast=10.2.7.255 netmask=255.255.248.0added interface eth0
ip=10.2.1.15 bcast=10.2.7.255 netmask=255.255.248.0resolve_lmhosts:
Attempting lmhosts lookup for name srv-
dc01.example.ru<0x20>getlmhostsent: lmhost entry: 127.0.0.1
localhost Starting GENSEC mechanism spnegoStarting GENSEC submechanism
gssapi_krb5GSSAPI credentials for vas.lah at EXAMPLE.RU will expire in
35645 secsgensec_gssapi: NO credentials were delegatedGSSAPI Connection
will be cryptographically signedAdding DNS A record SRV-SITE2-
DC1.example.ru for IPv4 IP: 10.2.1.15Join failed - cleaning upldb_wrap
open of secrets.ldbCould not find machine account in secrets database:
Failed to fetch machine account password for EXAMPLE from both
secrets.ldb (Could not find entry to match filter:
'(&(f$atname=EXAMPLE)(objectclass=primaryDomain))' base:
'cn=Primary
Domains': No such object: dsdb_search at
../source4/dsdb/common/util.c:4636) and from
/var/lib/samba/private$secrets.tdb:
NT_STATUS_CANT_ACCESS_DOMAIN_INFODeleted CN=RID Set,CN=SRV-SITE2-
DC1,OU=Domain Controllers,DC=example,DC=ruDeleted CN=SRV-SITE2-
DC1,OU=Domain Controllers,DC=example,DC=ruDeleted CN=NTDS
Settings,CN=SRV-SITE2-
DC1,CN=Servers,CN=SITE2,CN=Sites,CN=Configuration,DC=example,DC=ruDelet
ed CN=SRV-SITE2-
DC1,CN=Servers,CN=SITE2,CN=Sites,CN=Configuration,DC=example,DC=ruERROR
(runtime): uncaught exception - (9003,
'WERR_DNS_ERROR_RCODE_NAME_ERROR')  File
"/usr/lib64/python2.7/site-
packages/samba/netcmd/__init__.py", line 176, in _run    return
self.run(*args, **kwargs)  File "/usr/lib64/python2.7/site-
packages/samba/netcmd/domain.py", line 661, in
run    machinepass=machinepass, use_ntvfs=use_ntvfs,
dns_backend=dns_backend)  File "/usr/lib64/python2.7/site-
packages/samba/join.py", line 1474, in join_DC    ctx.do_join()  File
"/usr/lib64/python2.7/site-packages/samba/join.py", line 1384, in
do_join    ctx.join_add_dns_records()  File "/usr/lib64/python2.7/site-
packages/samba/join.py", line 1116, in
join_add_dns_records    dns_partition=domaindns_zone_dn)  File
"/usr/lib64/python2.7/site-packages/samba/samdb.py", line 939, in
dns_lookup    dns_partition=dns_partition)

В Пн, 19/02/2018 в 12:25 +0000, Rowland Penny via samba
пишет:
> Is this the entire output after you run the samba-tool command ?
> 
> If not can you post the entire output, you can send it to me offlist
> if
> you want.
> 
> The problem does seem to be missing dns records.
> 
> Rowland

On Mon, 19 Feb 2018 17:40:25 +0500
"denis.shigapov" <denis.shigapov at stroylandiya.ru> wrote:
> the first letter sent a journal
> 
> как можно 
> ========== log messages join DC===========> ....more than a thousand
lines of messages
OK, run the command again without the '-d7' and post that output, I
am trying to see how far the join gets before failing.

Rowland

samba-tool domain join example.ru DC --server=srv-dc01.example.ru
--username=vas.lah --password=password --realm=EXAMPLE.RU --site=SITE2
-d 1 > /tmp/log.txt 2>&1

--------- config ---------
workgroup is EXAMPLE
realm is example.ru
Looking up IPv4 addresses
Looking up IPv6 addresses
No IPv6 address will be assigned
Setting up secrets.ldb
Setting up the registry
Setting up the privileges database
Setting up idmap db
Setting up SAM db
Setting up sam.ldb partitions and settings
Setting up sam.ldb rootDSE
Pre-loading the Samba 4 and AD schema
The Kerberos KDC configuration for Samba AD is located at
/var/lib/samba/private/kdc.conf
A Kerberos configuration suitable for Samba AD has been generated at
/var/lib/samba/private/krb5.conf
Merge the contents of this file with your system krb5.conf or replace
it with this one. Do not create a symlink!
Schema-DN[CN=Schema,CN=Configuration,DC=example,DC=ru]
objects[402/2684] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=example,DC=ru]
objects[804/2684] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=example,DC=ru]
objects[1206/2684] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=example,DC=ru]
objects[1608/2684] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=example,DC=ru]
objects[2010/2684] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=example,DC=ru]
objects[2412/2684] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=example,DC=ru]
objects[2654/2684] linked_values[0/0]
Analyze and apply schema objects
Partition[CN=Configuration,DC=example,DC=ru] objects[402/7264]
linked_values[0/1969]
Partition[CN=Configuration,DC=example,DC=ru] objects[804/7264]
linked_values[0/1969]
......
Partition[CN=Configuration,DC=example,DC=ru] objects[5903/7264]
linked_values[98/1969]
Partition[CN=Configuration,DC=example,DC=ru] objects[6223/7264]
linked_values[326/1969]
Partition[CN=Configuration,DC=example,DC=ru] objects[6387/7264]
linked_values[427/1969]
Partition[DC=example,DC=ru] objects[165/1306] linked_values[89/25513]
Partition[DC=example,DC=ru] objects[235/1306] linked_values[0/25513]
Partition[DC=example,DC=ru] objects[494/42568] linked_values[28/25513]
Partition[DC=example,DC=ru] objects[744/42568] linked_values[0/25513]
Partition[DC=example,DC=ru] objects[986/42568] linked_values[498/25513]
Partition[DC=example,DC=ru] objects[1182/42568]
linked_values[303/25513]
......
Partition[DC=example,DC=ru] objects[42791/42568] linked_values[1/25513]
Partition[DC=example,DC=ru] objects[42887/42568] linked_values[3/25513]
Partition[DC=example,DC=ru] objects[42984/42568] linked_values[0/25513]
Partition[DC=example,DC=ru] objects[43020/42568] linked_values[0/25513]
Partition[DC=DomainDnsZones,DC=example,DC=ru] objects[402/16777]
linked_values[0/0]
Partition[DC=DomainDnsZones,DC=example,DC=ru] objects[775/16777]
linked_values[0/0]
Partition[DC=DomainDnsZones,DC=example,DC=ru] objects[1144/16777]
linked_values[0/0]
Partition[DC=DomainDnsZones,DC=example,DC=ru] objects[1519/16777]
linked_values[0/0]
......
Partition[DC=DomainDnsZones,DC=example,DC=ru] objects[21170/16777]
linked_values[0/0]
Partition[DC=DomainDnsZones,DC=example,DC=ru] objects[21564/16777]
linked_values[0/0]
Partition[DC=DomainDnsZones,DC=example,DC=ru] objects[21873/16777]
linked_values[0/0]
Partition[DC=DomainDnsZones,DC=example,DC=ru] objects[22275/16777]
linked_values[0/0]
Partition[DC=DomainDnsZones,DC=example,DC=ru] objects[22297/16777]
linked_values[0/0]
Partition[DC=ForestDnsZones,DC=example,DC=ru] objects[402/2041]
linked_values[0/0]
Partition[DC=ForestDnsZones,DC=example,DC=ru] objects[775/2041]
linked_values[0/0]
.......
linked_values[0/0]
Partition[DC=ForestDnsZones,DC=example,DC=ru] objects[2522/2041]
linked_values[0/0]
Exop on[CN=RID Manager$,CN=System,DC=example,DC=ru] objects[3]
linked_values[0]
Adding 1 remote DNS records for SRV-SITE2-DC1.example.ru
Adding DNS A record SRV-SITE2-DC1.example.ru for IPv4 IP: 10.2.1.15
Could not find machine account in secrets database: Failed to fetch
machine account password for EXAMPLE from both secrets.ldb (Could not
find entry to match filter:
'(&(flatname=EXAMPLE)(objectclass=primaryDomain))' base:
'cn=Primary
Domains': No such object: dsdb_search at
../source4/dsdb/common/util.c:4636) and from
/var/lib/samba/private/secrets.tdb: NT_STATUS_CANT_ACCESS_DOMAIN_INFO
ERROR(runtime): uncaught exception - (9003,
'WERR_DNS_ERROR_RCODE_NAME_ERROR')
  File "/usr/lib64/python2.7/site-packages/samba/netcmd/__init__.py",
line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib64/python2.7/site-packages/samba/netcmd/domain.py",
line 661, in run
    machinepass=machinepass, use_ntvfs=use_ntvfs,
dns_backend=dns_backend)
  File "/usr/lib64/python2.7/site-packages/samba/join.py", line 1474,
in join_DC
    ctx.do_join()
  File "/usr/lib64/python2.7/site-packages/samba/join.py", line 1384,
in do_join
    ctx.join_add_dns_records()
  File "/usr/lib64/python2.7/site-packages/samba/join.py", line 1116,
in join_add_dns_records
    dns_partition=domaindns_zone_dn)
  File "/usr/lib64/python2.7/site-packages/samba/samdb.py", line 939,
in dns_lookup
    dns_partition=dns_partition)
Adding CN=SRV-SITE2-DC1,OU=Domain Controllers,DC=example,DC=ru
Adding CN=SRV-SITE2-
DC1,CN=Servers,CN=SITE2,CN=Sites,CN=Configuration,DC=example,DC=ru
Adding CN=NTDS Settings,CN=SRV-SITE2-
DC1,CN=Servers,CN=SITE2,CN=Sites,CN=Configuration,DC=example,DC=ru
Adding SPNs to CN=SRV-SITE2-DC1,OU=Domain Controllers,DC=example,DC=ru
Setting account password for SRV-SITE2-DC1$
Enabling account
Calling bare provision
Provision OK for domain DN DC=example,DC=ru
Starting replication
Replicating critical objects from the base DN of the domain
Done with always replicated NC (base, config, schema)
Replicating DC=DomainDnsZones,DC=example,DC=ru
Replicating DC=ForestDnsZones,DC=example,DC=ru
Committing SAM database
Join failed - cleaning up
Deleted CN=RID Set,CN=SRV-SITE2-DC1,OU=Domain
Controllers,DC=example,DC=ru
Deleted CN=SRV-SITE2-DC1,OU=Domain Controllers,DC=example,DC=ru
Deleted CN=NTDS Settings,CN=SRV-SITE2-
DC1,CN=Servers,CN=SITE2,CN=Sites,CN=Configuration,DC=example,DC=ru
Deleted CN=SRV-SITE2-
DC1,CN=Servers,CN=SITE2,CN=Sites,CN=Configuration,DC=example,DC=ru

В Пн, 19/02/2018 в 12:51 +0000, Rowland Penny via samba
пишет:
> On Mon, 19 Feb 2018 17:40:25 +0500
> "denis.shigapov" <denis.shigapov at stroylandiya.ru> wrote:
> 
> > the first letter sent a journal
> > 
> > как можно 
> > ========== log messages join DC===========> > ....more than a
thousand lines of messages
> 
> OK, run the command again without the '-d7' and post that output, I
> am trying to see how far the join gets before failing.
> 
> Rowland
>  
>