samba - May 2018 - LDAP broken after AD DC upgrade from 4.7 to 4.8

Hi *,

I just upgraded my AD DC from 4.7.6 to 4.8.1. (Arch Linux)
After a reboot my LDAP database is almost empty, when accessed from a 
LDAP browser or dsa.msc.

samba-tool dbcheck --fix fails as even LostAndFound isn't there anymore.
ERROR(ldb): uncaught exception - descriptor_modify on 
CN=SERVER,CN=LostAndFound,DC=dschungel,DC=local failed: No such Base DN: 
CN=LostAndFound,DC=dschungel,DC=local
   File "/usr/lib/python2.7/site-packages/samba/netcmd/__init__.py",
line
176, in _run
     return self.run(*args, **kwargs)
   File "/usr/lib/python2.7/site-packages/samba/netcmd/dbcheck.py",
line
157, in run
     controls=controls, attrs=attrs)
   File "/usr/lib/python2.7/site-packages/samba/dbchecker.py", line
218,
in check_database
     error_count += self.check_object(object.dn, attrs=attrs)
   File "/usr/lib/python2.7/site-packages/samba/dbchecker.py", line
2308,
in check_object
     self.err_missing_parent(obj)
   File "/usr/lib/python2.7/site-packages/samba/dbchecker.py", line
817,
in err_missing_parent


Funny thing is, if I do ldbsearch on my files in 
/var/lib/samba/private/sam.ldb.d/ everything still seems to be there.

Did anybody have any similar problems?

Cheers,
Bastian

On Fri, 25 May 2018 22:04:28 +0200
Bastian Machek via samba <samba at lists.samba.org> wrote:
> Hi *,
> 
> I just upgraded my AD DC from 4.7.6 to 4.8.1. (Arch Linux)
Is this using Arch Linux packages ? if so, you might want to tell them
that using 4.8.0 or 4.8.1 to upgrade a DC is a BAD idea.
> After a reboot my LDAP database is almost empty, when accessed from a 
> LDAP browser or dsa.msc.
> 
> samba-tool dbcheck --fix fails as even LostAndFound isn't there
> anymore. ERROR(ldb): uncaught exception - descriptor_modify on 
> CN=SERVER,CN=LostAndFound,DC=dschungel,DC=local failed: No such Base
> DN: CN=LostAndFound,DC=dschungel,DC=local
>    File
"/usr/lib/python2.7/site-packages/samba/netcmd/__init__.py",
> line 176, in _run
>      return self.run(*args, **kwargs)
>    File
"/usr/lib/python2.7/site-packages/samba/netcmd/dbcheck.py",
> line 157, in run
>      controls=controls, attrs=attrs)
>    File "/usr/lib/python2.7/site-packages/samba/dbchecker.py",
line
> 218, in check_database
>      error_count += self.check_object(object.dn, attrs=attrs)
>    File "/usr/lib/python2.7/site-packages/samba/dbchecker.py",
line
> 2308, in check_object
>      self.err_missing_parent(obj)
>    File "/usr/lib/python2.7/site-packages/samba/dbchecker.py",
line
> 817, in err_missing_parent
> 
> 
> Funny thing is, if I do ldbsearch on my files in 
> /var/lib/samba/private/sam.ldb.d/ everything still seems to be there.
> 
> Did anybody have any similar problems?
Oh lots of people, run 'sambaundoguididx' then downgrade Samba again.
You can use 4.8.2 to upgrade after the downgrade.

Rowland