samba - Oct 2018 - Unable to add additional domain controller - uncaught exception - LDAP error 10 on join

hi, I'm trying to add secondary samba4 dc (stretch with samba 4.5 from 
official repository) to samba4 pdc (stretch also this), I did this other 
times few years ago with older debian and samba (4.0 and 4.1 if I 
remember good).
This time always following this howto 
(https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory)
failed all time, first time because I removed tdb and ldb, redone 
without remove them and still showing error, based on a fast search I 
removed smb.conf but still give error that I'm unable to solve even with 
some search:
samba-tool domain join m2r.local DC -Uadministrator --realm=m2r.local 
--dns-backend=SAMBA_INTERNAL --option='idmap_ldb:use rfc2307 = yes'
Finding a writeable DC for domain 'm2r.local'
Found DC DUO-ADD-DC.m2r.local
Password for [WORKGROUP\administrator]:
workgroup is M2R
realm is m2r.local
Adding CN=D9DC,OU=Domain Controllers,DC=m2r,DC=local
Adding 
CN=D9DC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=m2r,DC=local
Adding CN=NTDS 
Settings,CN=D9DC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=m2r,DC=local
Join failed - cleaning up
Deleted CN=D9DC,OU=Domain Controllers,DC=m2r,DC=local
Deleted CN=NTDS 
Settings,CN=D9DC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=m2r,DC=local
Deleted 
CN=D9DC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=m2r,DC=local
ERROR(ldb): uncaught exception - LDAP error 10 LDAP_REFERRAL - 
<0000202B: RefErr: DSID-030A0B09, data 0, 1 access points
         ref 1: 'a45ce9be-c350-4429-964b-a10c1dd92af5._msdcs.m2r.local'
 > <ldap://a45ce9be-c350-4429-964b-a10c1dd92af5._msdcs.m2r.local>
   File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", 
line 176, in _run
     return self.run(*args, **kwargs)
   File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain.py",
line
652, in run
     machinepass=machinepass, use_ntvfs=use_ntvfs, dns_backend=dns_backend)
   File "/usr/lib/python2.7/dist-packages/samba/join.py", line 1253,
in
join_DC
     ctx.do_join()
   File "/usr/lib/python2.7/dist-packages/samba/join.py", line 1151,
in
do_join
     ctx.join_add_objects()
   File "/usr/lib/python2.7/dist-packages/samba/join.py", line 630, in
join_add_objects
     ctx.samdb.modify(m)
Can someone help me please?

Thanks for any reply and sorry for my bad english.



---
Questa e-mail è stata controllata per individuare virus con Avast antivirus.
https://www.avast.com/antivirus

Hai Fabio, 

We dont mind crappy english...
At least not me, I'm the same, lots of typos. You will learn it, the more
you type it. ;-)

https://lists.samba.org/archive/samba/2018-February/214118.html 
Shows exact the same, but not solution.

Looks like a left over from an other DC. 
> ERROR(ldb): uncaught exception - LDAP error 10 LDAP_REFERRAL - 
> <0000202B: RefErr: DSID-030A0B09, data 0, 1 access points
>          ref 1: 
> 'a45ce9be-c350-4429-964b-a10c1dd92af5._msdcs.m2r.local'
>  > <ldap://a45ce9be-c350-4429-964b-a10c1dd92af5._msdcs.m2r.local>
Try to find : a45ce9be-c350-4429-964b-a10c1dd92af5._msdcs.m2r.local 
And check what that is, any old server, a running one? 



Greetz, 

Louis

On Mon, 1 Oct 2018 17:14:09 +0200
"L.P.H. van Belle via samba" <samba at lists.samba.org> wrote:
> Hai Fabio, 
> 
> We dont mind crappy english...
> At least not me, I'm the same, lots of typos. You will learn it, the
> more you type it. ;-) 
> 
> https://lists.samba.org/archive/samba/2018-February/214118.html 
> Shows exact the same, but not solution.
> 
> Looks like a left over from an other DC. 
> 
> > ERROR(ldb): uncaught exception - LDAP error 10 LDAP_REFERRAL - 
> > <0000202B: RefErr: DSID-030A0B09, data 0, 1 access points
> >          ref 1: 
> > 'a45ce9be-c350-4429-964b-a10c1dd92af5._msdcs.m2r.local'
> >  >
<ldap://a45ce9be-c350-4429-964b-a10c1dd92af5._msdcs.m2r.local>
> 
> Try to find : a45ce9be-c350-4429-964b-a10c1dd92af5._msdcs.m2r.local 
> And check what that is, any old server, a running one? 
> 
> 
> 
> Greetz, 
> 
> Louis
> 
> 
I wonder if this is sort of self inflicted ?
The OP tried to join as a second DC, but this failed, he then tried
again. I wonder if the first try set up something (and didn't remove
it) that the second attempt doesn't like ?

Rowland

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Rowland Penny via samba
> Verzonden: maandag 1 oktober 2018 17:34
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] Unable to add additional domain 
> controller - uncaught exception - LDAP error 10 on join
> 
> On Mon, 1 Oct 2018 17:14:09 +0200
> "L.P.H. van Belle via samba" <samba at lists.samba.org>
wrote:
> 
> > Hai Fabio, 
> > 
> > We dont mind crappy english...
> > At least not me, I'm the same, lots of typos. You will learn it,
the
> > more you type it. ;-) 
> > 
> > https://lists.samba.org/archive/samba/2018-February/214118.html 
> > Shows exact the same, but not solution.
> > 
> > Looks like a left over from an other DC. 
> > 
> > > ERROR(ldb): uncaught exception - LDAP error 10 LDAP_REFERRAL - 
> > > <0000202B: RefErr: DSID-030A0B09, data 0, 1 access points
> > >          ref 1: 
> > > 'a45ce9be-c350-4429-964b-a10c1dd92af5._msdcs.m2r.local'
> > >  >
<ldap://a45ce9be-c350-4429-964b-a10c1dd92af5._msdcs.m2r.local>
> > 
> > Try to find : a45ce9be-c350-4429-964b-a10c1dd92af5._msdcs.m2r.local 
> > And check what that is, any old server, a running one? 
> > 
> > 
> > 
> > Greetz, 
> > 
> > Louis
> > 
> > 
> 
> I wonder if this is sort of self inflicted ?
> The OP tried to join as a second DC, but this failed, he then tried
> again. I wonder if the first try set up something (and didn't remove
> it) that the second attempt doesn't like ?
Yes, something like that. Testing it on an other pc might give more insight. 
Also, he is using the debian 4.5 packages, thats a big list of changes to go
through but i'll bet its fixed somewhere if its a bug and a .local domain so
if avahi daemon is install you might get errors also.
Depending on the nsswich settings. 

Few tips i would to look at.

Greetz, 

Louis