Hi,
We were using samba_backup from 4.4.5 and after upgrade to 4.10.5 we
are trying to configure new method, but is not working, tried:
offline with samba stopped:
# samba-tool domain backup offline --targetdir=/local/test/
INFO: Current debug levels:
all: 5
tdb: 5
printdrivers: 5
lanman: 5
smb: 5
rpc_parse: 5
rpc_srv: 5
rpc_cli: 5
passdb: 5
sam: 5
auth: 5
winbind: 5
vfs: 5
idmap: 5
quota: 5
acls: 5
locking: 5
msdfs: 5
dmapi: 5
registry: 5
scavenger: 5
dns: 5
ldb: 5
tevent: 5
auth_audit: 5
auth_json_audit: 5
kerberos: 5
drs_repl: 5
smb2: 5
smb2_credits: 5
dsdb_audit: 5
dsdb_json_audit: 5
dsdb_password_audit: 5
dsdb_password_json_audit: 5
dsdb_transaction_audit: 5
dsdb_transaction_json_audit: 5
dsdb_group_audit: 5
dsdb_group_json_audit: 5
Processing section "[netlogon]"
Processing section "[sysvol]"
pm_process() returned Yes
schema_fsmo_init: we are master[yes] updates allowed[no]
schema_fsmo_init: we are master[yes] updates allowed[no]
running backup on dirs: /usr/local/samba/private
/usr/local/samba/var/locks /usr/local/samba/etc
Starting transaction on /usr/local/samba/private/secrets
Starting transaction on /usr/local/samba/private/sam.ldb
schema_fsmo_init: we are master[yes] updates allowed[no]
backing up /usr/local/samba/private/sam.ldb
backing up locked/related file
/usr/local/samba/private/sam.ldb.d/CN%3DCONFIGURATION,DC%3DDOMAIN,DC%3DCAT.ldb
backing up locked/related file
/usr/local/samba/private/sam.ldb.d/DC%3DDOMAIN,DC%3DCAT.ldb
backing up locked/related file
/usr/local/samba/private/sam.ldb.d/DC%3DDOMAINDNSZONES,DC%3DDOMAIN,DC%3DCAT.ldb
backing up locked/related file
/usr/local/samba/private/sam.ldb.d/DC%3DFORESTDNSZONES,DC%3DDOMAIN,DC%3DCAT.ldb
copying locked/related file /usr/local/samba/private/sam.ldb.d/metadata.tdb
backing up locked/related file
/usr/local/samba/private/sam.ldb.d/CN%3DSCHEMA,CN%3DCONFIGURATION,DC%3DDOMAIN,DC%3DCAT.ldb
DSDB Transaction [rollback] at [Thu, 04 Jul 2019 09:43:55.250310 CEST]
duration [355670]
{"dsdbTransaction": {"version": {"major": 1,
"minor": 0}, "action":
"rollback", "transactionId":
"6794551c-fc12-4bbf-9dfd-9f7d78b0953a",
"duration": 355670}, "timestamp":
"2019-07-04T09:43:55.250581+0200",
"type": "dsdbTransaction"}
schema_fsmo_init: we are master[yes] updates allowed[no]
DSDB Change [Modify] at [Thu, 04 Jul 2019 09:43:55.416239 CEST] status
[Success] remote host [Unknown] SID [(NULL SID)] DN [@SAMBA_DSDB]
attributes [add: backupDate [2019-07-04T09-43-55.413999]]
{"timestamp": "2019-07-04T09:43:55.416491+0200",
"type": "dsdbChange",
"dsdbChange": {"remoteAddress": null, "version":
{"major": 1, "minor":
0}, "operation": "Modify", "statusCode": 0,
"sessionId":
"bbfe57a0-da36-4bc8-8863-995ad1ea25c7", "dn":
"@SAMBA_DSDB", "status":
"Success", "performedAsSystem": false, "userSid":
"S-1-5-18",
"transactionId": "6f67143f-9add-47b8-bfa7-2d6c68a19ea9",
"attributes":
{"backupDate": {"actions": [{"action":
"add", "values": [{"value":
"2019-07-04T09-43-55.413999"}]}]}}}}
DSDB Change [Modify] at [Thu, 04 Jul 2019 09:43:55.431208 CEST] status
[Success] remote host [Unknown] SID [(NULL SID)] DN [@SAMBA_DSDB]
attributes [add: sidForRestore
[S-1-5-21-2329230797-1186182137-2997319902-1207]]
{"timestamp": "2019-07-04T09:43:55.431477+0200",
"type": "dsdbChange",
"dsdbChange": {"remoteAddress": null, "version":
{"major": 1, "minor":
0}, "operation": "Modify", "statusCode": 0,
"sessionId":
"bbfe57a0-da36-4bc8-8863-995ad1ea25c7", "dn":
"@SAMBA_DSDB", "status":
"Success", "performedAsSystem": false, "userSid":
"S-1-5-18",
"transactionId": "58e89a76-1f9d-433a-b172-04f44c9f9bfd",
"attributes":
{"sidForRestore": {"actions": [{"action":
"add", "values": [{"value":
"S-1-5-21-2329230797-1186182137-2997319902-1207"}]}]}}}}
DSDB Change [Modify] at [Thu, 04 Jul 2019 09:43:55.434911 CEST] status
[Success] remote host [Unknown] SID [(NULL SID)] DN [@SAMBA_DSDB]
attributes [add: backupType [offline]]
{"timestamp": "2019-07-04T09:43:55.435085+0200",
"type": "dsdbChange",
"dsdbChange": {"remoteAddress": null, "version":
{"major": 1, "minor":
0}, "operation": "Modify", "statusCode": 0,
"sessionId":
"bbfe57a0-da36-4bc8-8863-995ad1ea25c7", "dn":
"@SAMBA_DSDB", "status":
"Success", "performedAsSystem": false, "userSid":
"S-1-5-18",
"transactionId": "87f71a95-faf7-493a-8057-d38278747099",
"attributes":
{"backupType": {"actions": [{"action":
"add", "values": [{"value":
"offline"}]}]}}}}
running tdbbackup on lone tdb file /usr/local/samba/private/schannel_store.tdb
Starting transaction on solo db: /usr/local/samba/private/hklm.ldb
running tdbbackup on the same file
running tdbbackup on lone tdb file
/usr/local/samba/private/netlogon_creds_cli.tdb
tdb_mutex_open_ok[/usr/local/samba/private/netlogon_creds_cli.tdb]:
Can use mutexes only with MUTEX_LOCKING or NOLOCK
Failed to open /usr/local/samba/private/netlogon_creds_cli.tdb
Starting transaction on solo db: /usr/local/samba/private/share.ldb
running tdbbackup on the same file
Starting transaction on solo db: /usr/local/samba/private/privilege.ldb
running tdbbackup on the same file
Starting transaction on solo db: /usr/local/samba/private/idmap.ldb
running tdbbackup on the same file
Starting transaction on solo db: /usr/local/samba/private/dns/sam.ldb
tdb(/usr/local/samba/private/dns/sam.ldb.d/metadata.tdb): tdb_open_ex:
/usr/local/samba/private/dns/sam.ldb.d/metadata.tdb (2049,673298) is
already open in this process
partition_metadata: Migrating partition metadata: open of metadata.tdb
gave: partition_metadata: Unable to open
/usr/local/samba/private/dns/sam.ldb.d/metadata.tdb: Device or
resource busy
tdb(/usr/local/samba/private/dns/sam.ldb.d/metadata.tdb): tdb_open_ex:
/usr/local/samba/private/dns/sam.ldb.d/metadata.tdb (2049,673298) is
already open in this process
module partition initialization failed : Operations error
module show_deleted initialization failed : Operations error
module dns_notify initialization failed : Operations error
module extended_dn_out_ldb initialization failed : Operations error
module linked_attributes initialization failed : Operations error
module unique_object_sids initialization failed : Operations error
module operational initialization failed : Operations error
module encrypted_secrets initialization failed : Operations error
module group_audit_log initialization failed : Operations error
module repl_meta_data initialization failed : Operations error
module subtree_delete initialization failed : Operations error
module aclread initialization failed : Operations error
module acl initialization failed : Operations error
module descriptor initialization failed : Operations error
module objectclass initialization failed : Operations error
module audit_log initialization failed : Operations error
module asq initialization failed : Operations error
module server_sort initialization failed : Operations error
module vlv initialization failed : Operations error
module dsdb_paged_results initialization failed : Operations error
module dirsync initialization failed : Operations error
module schema_load initialization failed : Operations error
module dsdb_notification initialization failed : Operations error
module rootdse initialization failed : Operations error
module samba_dsdb initialization failed : Operations error
Unable to load modules for /usr/local/samba/private/dns/sam.ldb:
partition_metadata: Migrating partition metadata: create of
metadata.tdb gave: partition_metadata: Unable to create
/usr/local/samba/private/dns/sam.ldb.d/metadata.tdb: Device or
resource busy
ERROR(ldb): uncaught exception - partition_metadata: Migrating
partition metadata: create of metadata.tdb gave: partition_metadata:
Unable to create /usr/local/samba/private/dns/sam.ldb.d/metadata.tdb:
Device or resource busy
File
"/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/__init__.py",
line 185, in _run
return self.run(*args, **kwargs)
File
"/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/domain_backup.py",
line 1072, in run
ldb_obj = Ldb(path, lp=lp)
File
"/usr/local/samba/lib/python3.4/site-packages/samba/__init__.py",
line 115, in __init__
self.connect(url, flags, options)
offline with samba started
# samba-tool domain backup offline --targetdir=/local/test/
INFO: Current debug levels:
all: 5
tdb: 5
printdrivers: 5
lanman: 5
smb: 5
rpc_parse: 5
rpc_srv: 5
rpc_cli: 5
passdb: 5
sam: 5
auth: 5
winbind: 5
vfs: 5
idmap: 5
quota: 5
acls: 5
locking: 5
msdfs: 5
dmapi: 5
registry: 5
scavenger: 5
dns: 5
ldb: 5
tevent: 5
auth_audit: 5
auth_json_audit: 5
kerberos: 5
drs_repl: 5
smb2: 5
smb2_credits: 5
dsdb_audit: 5
dsdb_json_audit: 5
dsdb_password_audit: 5
dsdb_password_json_audit: 5
dsdb_transaction_audit: 5
dsdb_transaction_json_audit: 5
dsdb_group_audit: 5
dsdb_group_json_audit: 5
Processing section "[netlogon]"
Processing section "[sysvol]"
pm_process() returned Yes
schema_fsmo_init: we are master[yes] updates allowed[no]
schema_fsmo_init: we are master[yes] updates allowed[no]
running backup on dirs: /usr/local/samba/private
/usr/local/samba/var/locks /usr/local/samba/etc
Starting transaction on /usr/local/samba/private/secrets
Starting transaction on /usr/local/samba/private/sam.ldb
schema_fsmo_init: we are master[yes] updates allowed[no]
backing up /usr/local/samba/private/sam.ldb
backing up locked/related file
/usr/local/samba/private/sam.ldb.d/CN%3DCONFIGURATION,DC%3DDOMAIN,DC%3DCAT.ldb
backing up locked/related file
/usr/local/samba/private/sam.ldb.d/DC%3DDOMAIN,DC%3DCAT.ldb
backing up locked/related file
/usr/local/samba/private/sam.ldb.d/DC%3DDOMAINDNSZONES,DC%3DDOMAIN,DC%3DCAT.ldb
backing up locked/related file
/usr/local/samba/private/sam.ldb.d/DC%3DFORESTDNSZONES,DC%3DDOMAIN,DC%3DCAT.ldb
copying locked/related file /usr/local/samba/private/sam.ldb.d/metadata.tdb
backing up locked/related file
/usr/local/samba/private/sam.ldb.d/CN%3DSCHEMA,CN%3DCONFIGURATION,DC%3DDOMAIN,DC%3DCAT.ldb
DSDB Transaction [rollback] at [Thu, 04 Jul 2019 09:45:47.259639 CEST]
duration [310424]
{"timestamp": "2019-07-04T09:45:47.259733+0200",
"type":
"dsdbTransaction", "dsdbTransaction": {"version":
{"major": 1,
"minor": 0}, "duration": 310424, "transactionId":
"e726216c-1c2a-46dc-9567-e4deaa95b604", "action":
"rollback"}}
schema_fsmo_init: we are master[yes] updates allowed[no]
DSDB Change [Modify] at [Thu, 04 Jul 2019 09:45:47.421669 CEST] status
[Success] remote host [Unknown] SID [(NULL SID)] DN [@SAMBA_DSDB]
attributes [add: backupDate [2019-07-04T09-45-47.419553]]
{"timestamp": "2019-07-04T09:45:47.421771+0200",
"type": "dsdbChange",
"dsdbChange": {"sessionId":
"61a4ab3e-7b32-4d08-83ac-c77067c441b6",
"version": {"major": 1, "minor": 0},
"operation": "Modify",
"statusCode": 0, "dn": "@SAMBA_DSDB",
"performedAsSystem": false,
"userSid": "S-1-5-18", "status":
"Success", "remoteAddress": null,
"transactionId": "9c36e755-92e7-4487-956d-6dd384555e1a",
"attributes":
{"backupDate": {"actions": [{"action":
"add", "values": [{"value":
"2019-07-04T09-45-47.419553"}]}]}}}}
DSDB Change [Modify] at [Thu, 04 Jul 2019 09:45:47.427791 CEST] status
[Success] remote host [Unknown] SID [(NULL SID)] DN [@SAMBA_DSDB]
attributes [add: sidForRestore
[S-1-5-21-2329230797-1186182137-2997319902-1207]]
{"timestamp": "2019-07-04T09:45:47.427873+0200",
"type": "dsdbChange",
"dsdbChange": {"sessionId":
"61a4ab3e-7b32-4d08-83ac-c77067c441b6",
"version": {"major": 1, "minor": 0},
"operation": "Modify",
"statusCode": 0, "dn": "@SAMBA_DSDB",
"performedAsSystem": false,
"userSid": "S-1-5-18", "status":
"Success", "remoteAddress": null,
"transactionId": "a6d5b011-d718-458a-962e-05cc98058ee6",
"attributes":
{"sidForRestore": {"actions": [{"action":
"add", "values": [{"value":
"S-1-5-21-2329230797-1186182137-2997319902-1207"}]}]}}}}
DSDB Change [Modify] at [Thu, 04 Jul 2019 09:45:47.431733 CEST] status
[Success] remote host [Unknown] SID [(NULL SID)] DN [@SAMBA_DSDB]
attributes [add: backupType [offline]]
{"timestamp": "2019-07-04T09:45:47.431809+0200",
"type": "dsdbChange",
"dsdbChange": {"sessionId":
"61a4ab3e-7b32-4d08-83ac-c77067c441b6",
"version": {"major": 1, "minor": 0},
"operation": "Modify",
"statusCode": 0, "dn": "@SAMBA_DSDB",
"performedAsSystem": false,
"userSid": "S-1-5-18", "status":
"Success", "remoteAddress": null,
"transactionId": "8522e328-394e-42e8-a676-a2b40cd5fcca",
"attributes":
{"backupType": {"actions": [{"action":
"add", "values": [{"value":
"offline"}]}]}}}}
running tdbbackup on lone tdb file /usr/local/samba/private/schannel_store.tdb
Starting transaction on solo db: /usr/local/samba/private/hklm.ldb
running tdbbackup on the same file
running tdbbackup on lone tdb file
/usr/local/samba/private/netlogon_creds_cli.tdb
tdb_mutex_open_ok[/usr/local/samba/private/netlogon_creds_cli.tdb]:
Can use mutexes only with MUTEX_LOCKING or NOLOCK
Failed to open /usr/local/samba/private/netlogon_creds_cli.tdb
Starting transaction on solo db: /usr/local/samba/private/share.ldb
running tdbbackup on the same file
Starting transaction on solo db: /usr/local/samba/private/privilege.ldb
running tdbbackup on the same file
Starting transaction on solo db: /usr/local/samba/private/idmap.ldb
running tdbbackup on the same file
Starting transaction on solo db: /usr/local/samba/private/dns/sam.ldb
tdb(/usr/local/samba/private/dns/sam.ldb.d/metadata.tdb): tdb_open_ex:
/usr/local/samba/private/dns/sam.ldb.d/metadata.tdb (2049,673298) is
already open in this process
partition_metadata: Migrating partition metadata: open of metadata.tdb
gave: partition_metadata: Unable to open
/usr/local/samba/private/dns/sam.ldb.d/metadata.?: Device or resource
busy
tdb(/usr/local/samba/private/dns/sam.ldb.d/metadata.tdb): tdb_open_ex:
/usr/local/samba/private/dns/sam.ldb.d/metadata.tdb (2049,673298) is
already open in this process
module partition initialization failed : Operations error
module show_deleted initialization failed : Operations error
module dns_notify initialization failed : Operations error
module extended_dn_out_ldb initialization failed : Operations error
module linked_attributes initialization failed : Operations error
module unique_object_sids initialization failed : Operations error
module operational initialization failed : Operations error
module encrypted_secrets initialization failed : Operations error
module group_audit_log initialization failed : Operations error
module repl_meta_data initialization failed : Operations error
module subtree_delete initialization failed : Operations error
module aclread initialization failed : Operations error
module acl initialization failed : Operations error
module descriptor initialization failed : Operations error
module objectclass initialization failed : Operations error
module audit_log initialization failed : Operations error
module asq initialization failed : Operations error
module server_sort initialization failed : Operations error
module vlv initialization failed : Operations error
module dsdb_paged_results initialization failed : Operations error
module dirsync initialization failed : Operations error
module schema_load initialization failed : Operations error
module dsdb_notification initialization failed : Operations error
module rootdse initialization failed : Operations error
module samba_dsdb initialization failed : Operations error
Unable to load modules for /usr/local/samba/private/dns/sam.ldb:
partition_metadata: Migrating partition metadata: create of
metadata.tdb gave: partition_metadata: Unable to create
/usr/local/samba/private/dns/sam.ldb.d/metadata.?: Device or resource
busy
ERROR(<class 'ValueError'>): uncaught exception - need more than 0
values to unpack
File "/usr/local/samba/bin/samba-tool", line 44, in <module>
retval = cmd._run("samba-tool", subcommand, *args)
File
"/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/__init__.py",
line 235, in _run
"%s %s" % (myname, subcommand), *args)
File
"/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/__init__.py",
line 235, in _run
"%s %s" % (myname, subcommand), *args)
File
"/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/__init__.py",
line 235, in _run
"%s %s" % (myname, subcommand), *args)
File
"/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/__init__.py",
line 187, in _run
self.show_command_error(e)
File
"/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/__init__.py",
line 114, in show_command_error
(ldb_ecode, ldb_emsg) = inner_exception.args
online with samba started
samba-tool domain backup online --targetdir=/local/test/
--server=samba4-test-UAdministrator
ERROR(runtime): uncaught exception - (3221225506, '{Access Denied} A
process has requested access to an object but has not been granted
those access rights.')
File
"/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/__init__.py",
line 185, in _run
return self.run(*args, **kwargs)
File
"/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/domain_backup.py",
line 264, in run
backup_online(smb_conn, sysvol_tar, remote_sam.get_domain_sid())
File "/usr/local/samba/lib/python3.4/site-packages/samba/ntacls.py",
line 512, in backup_online
ntacl_sddl_str = smb_helper.get_acl(r_name, as_sddl=True)
File "/usr/local/samba/lib/python3.4/site-packages/samba/ntacls.py",
line 334, in get_acl
smb_path, SECURITY_SECINFO_FLAGS, SECURITY_SEC_FLAGS)
signed SMB2 message
Any suggestion why backups are not running on 4.10.5.
All commands executed with root user
Thanks
Hi, Error was reproduced with ssamba 4.10.5 a fresh domain and also with migrated NT domain with Debian 8 Tried to upgrade debian 8 to debian 9 using this required dependencies https://git.samba.org/?p=samba.git;a=blob_plain;f=bootstrap/generated-dists/debian9/bootstrap.sh;hb=master and error persist with debian 9 and samba 4.10.5 recomnpiled, same error with backup offline, started or stopped At this moment using old samba_backup as workaround, is this right? Any suggestions? Missatge de Trenta sis <trenta.sis at gmail.com> del dia dj., 4 de jul. 2019 a les 9:50:> > Hi, > > We were using samba_backup from 4.4.5 and after upgrade to 4.10.5 we > are trying to configure new method, but is not working, tried: > > offline with samba stopped: > # samba-tool domain backup offline --targetdir=/local/test/ > INFO: Current debug levels: > all: 5 > tdb: 5 > printdrivers: 5 > lanman: 5 > smb: 5 > rpc_parse: 5 > rpc_srv: 5 > rpc_cli: 5 > passdb: 5 > sam: 5 > auth: 5 > winbind: 5 > vfs: 5 > idmap: 5 > quota: 5 > acls: 5 > locking: 5 > msdfs: 5 > dmapi: 5 > registry: 5 > scavenger: 5 > dns: 5 > ldb: 5 > tevent: 5 > auth_audit: 5 > auth_json_audit: 5 > kerberos: 5 > drs_repl: 5 > smb2: 5 > smb2_credits: 5 > dsdb_audit: 5 > dsdb_json_audit: 5 > dsdb_password_audit: 5 > dsdb_password_json_audit: 5 > dsdb_transaction_audit: 5 > dsdb_transaction_json_audit: 5 > dsdb_group_audit: 5 > dsdb_group_json_audit: 5 > Processing section "[netlogon]" > Processing section "[sysvol]" > pm_process() returned Yes > schema_fsmo_init: we are master[yes] updates allowed[no] > schema_fsmo_init: we are master[yes] updates allowed[no] > running backup on dirs: /usr/local/samba/private > /usr/local/samba/var/locks /usr/local/samba/etc > Starting transaction on /usr/local/samba/private/secrets > Starting transaction on /usr/local/samba/private/sam.ldb > schema_fsmo_init: we are master[yes] updates allowed[no] > backing up /usr/local/samba/private/sam.ldb > backing up locked/related file > /usr/local/samba/private/sam.ldb.d/CN%3DCONFIGURATION,DC%3DDOMAIN,DC%3DCAT.ldb > backing up locked/related file > /usr/local/samba/private/sam.ldb.d/DC%3DDOMAIN,DC%3DCAT.ldb > backing up locked/related file > /usr/local/samba/private/sam.ldb.d/DC%3DDOMAINDNSZONES,DC%3DDOMAIN,DC%3DCAT.ldb > backing up locked/related file > /usr/local/samba/private/sam.ldb.d/DC%3DFORESTDNSZONES,DC%3DDOMAIN,DC%3DCAT.ldb > copying locked/related file /usr/local/samba/private/sam.ldb.d/metadata.tdb > backing up locked/related file > /usr/local/samba/private/sam.ldb.d/CN%3DSCHEMA,CN%3DCONFIGURATION,DC%3DDOMAIN,DC%3DCAT.ldb > DSDB Transaction [rollback] at [Thu, 04 Jul 2019 09:43:55.250310 CEST] > duration [355670] > {"dsdbTransaction": {"version": {"major": 1, "minor": 0}, "action": > "rollback", "transactionId": "6794551c-fc12-4bbf-9dfd-9f7d78b0953a", > "duration": 355670}, "timestamp": "2019-07-04T09:43:55.250581+0200", > "type": "dsdbTransaction"} > schema_fsmo_init: we are master[yes] updates allowed[no] > DSDB Change [Modify] at [Thu, 04 Jul 2019 09:43:55.416239 CEST] status > [Success] remote host [Unknown] SID [(NULL SID)] DN [@SAMBA_DSDB] > attributes [add: backupDate [2019-07-04T09-43-55.413999]] > {"timestamp": "2019-07-04T09:43:55.416491+0200", "type": "dsdbChange", > "dsdbChange": {"remoteAddress": null, "version": {"major": 1, "minor": > 0}, "operation": "Modify", "statusCode": 0, "sessionId": > "bbfe57a0-da36-4bc8-8863-995ad1ea25c7", "dn": "@SAMBA_DSDB", "status": > "Success", "performedAsSystem": false, "userSid": "S-1-5-18", > "transactionId": "6f67143f-9add-47b8-bfa7-2d6c68a19ea9", "attributes": > {"backupDate": {"actions": [{"action": "add", "values": [{"value": > "2019-07-04T09-43-55.413999"}]}]}}}} > DSDB Change [Modify] at [Thu, 04 Jul 2019 09:43:55.431208 CEST] status > [Success] remote host [Unknown] SID [(NULL SID)] DN [@SAMBA_DSDB] > attributes [add: sidForRestore > [S-1-5-21-2329230797-1186182137-2997319902-1207]] > {"timestamp": "2019-07-04T09:43:55.431477+0200", "type": "dsdbChange", > "dsdbChange": {"remoteAddress": null, "version": {"major": 1, "minor": > 0}, "operation": "Modify", "statusCode": 0, "sessionId": > "bbfe57a0-da36-4bc8-8863-995ad1ea25c7", "dn": "@SAMBA_DSDB", "status": > "Success", "performedAsSystem": false, "userSid": "S-1-5-18", > "transactionId": "58e89a76-1f9d-433a-b172-04f44c9f9bfd", "attributes": > {"sidForRestore": {"actions": [{"action": "add", "values": [{"value": > "S-1-5-21-2329230797-1186182137-2997319902-1207"}]}]}}}} > DSDB Change [Modify] at [Thu, 04 Jul 2019 09:43:55.434911 CEST] status > [Success] remote host [Unknown] SID [(NULL SID)] DN [@SAMBA_DSDB] > attributes [add: backupType [offline]] > {"timestamp": "2019-07-04T09:43:55.435085+0200", "type": "dsdbChange", > "dsdbChange": {"remoteAddress": null, "version": {"major": 1, "minor": > 0}, "operation": "Modify", "statusCode": 0, "sessionId": > "bbfe57a0-da36-4bc8-8863-995ad1ea25c7", "dn": "@SAMBA_DSDB", "status": > "Success", "performedAsSystem": false, "userSid": "S-1-5-18", > "transactionId": "87f71a95-faf7-493a-8057-d38278747099", "attributes": > {"backupType": {"actions": [{"action": "add", "values": [{"value": > "offline"}]}]}}}} > running tdbbackup on lone tdb file /usr/local/samba/private/schannel_store.tdb > Starting transaction on solo db: /usr/local/samba/private/hklm.ldb > running tdbbackup on the same file > running tdbbackup on lone tdb file > /usr/local/samba/private/netlogon_creds_cli.tdb > tdb_mutex_open_ok[/usr/local/samba/private/netlogon_creds_cli.tdb]: > Can use mutexes only with MUTEX_LOCKING or NOLOCK > Failed to open /usr/local/samba/private/netlogon_creds_cli.tdb > Starting transaction on solo db: /usr/local/samba/private/share.ldb > running tdbbackup on the same file > Starting transaction on solo db: /usr/local/samba/private/privilege.ldb > running tdbbackup on the same file > Starting transaction on solo db: /usr/local/samba/private/idmap.ldb > running tdbbackup on the same file > Starting transaction on solo db: /usr/local/samba/private/dns/sam.ldb > tdb(/usr/local/samba/private/dns/sam.ldb.d/metadata.tdb): tdb_open_ex: > /usr/local/samba/private/dns/sam.ldb.d/metadata.tdb (2049,673298) is > already open in this process > partition_metadata: Migrating partition metadata: open of metadata.tdb > gave: partition_metadata: Unable to open > /usr/local/samba/private/dns/sam.ldb.d/metadata.tdb: Device or > resource busy > tdb(/usr/local/samba/private/dns/sam.ldb.d/metadata.tdb): tdb_open_ex: > /usr/local/samba/private/dns/sam.ldb.d/metadata.tdb (2049,673298) is > already open in this process > module partition initialization failed : Operations error > module show_deleted initialization failed : Operations error > module dns_notify initialization failed : Operations error > module extended_dn_out_ldb initialization failed : Operations error > module linked_attributes initialization failed : Operations error > module unique_object_sids initialization failed : Operations error > module operational initialization failed : Operations error > module encrypted_secrets initialization failed : Operations error > module group_audit_log initialization failed : Operations error > module repl_meta_data initialization failed : Operations error > module subtree_delete initialization failed : Operations error > module aclread initialization failed : Operations error > module acl initialization failed : Operations error > module descriptor initialization failed : Operations error > module objectclass initialization failed : Operations error > module audit_log initialization failed : Operations error > module asq initialization failed : Operations error > module server_sort initialization failed : Operations error > module vlv initialization failed : Operations error > module dsdb_paged_results initialization failed : Operations error > module dirsync initialization failed : Operations error > module schema_load initialization failed : Operations error > module dsdb_notification initialization failed : Operations error > module rootdse initialization failed : Operations error > module samba_dsdb initialization failed : Operations error > Unable to load modules for /usr/local/samba/private/dns/sam.ldb: > partition_metadata: Migrating partition metadata: create of > metadata.tdb gave: partition_metadata: Unable to create > /usr/local/samba/private/dns/sam.ldb.d/metadata.tdb: Device or > resource busy > > ERROR(ldb): uncaught exception - partition_metadata: Migrating > partition metadata: create of metadata.tdb gave: partition_metadata: > Unable to create /usr/local/samba/private/dns/sam.ldb.d/metadata.tdb: > Device or resource busy > > File "/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/__init__.py", > line 185, in _run > return self.run(*args, **kwargs) > File "/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/domain_backup.py", > line 1072, in run > ldb_obj = Ldb(path, lp=lp) > File "/usr/local/samba/lib/python3.4/site-packages/samba/__init__.py", > line 115, in __init__ > self.connect(url, flags, options) > > > > > offline with samba started > # samba-tool domain backup offline --targetdir=/local/test/ > INFO: Current debug levels: > all: 5 > tdb: 5 > printdrivers: 5 > lanman: 5 > smb: 5 > rpc_parse: 5 > rpc_srv: 5 > rpc_cli: 5 > passdb: 5 > sam: 5 > auth: 5 > winbind: 5 > vfs: 5 > idmap: 5 > quota: 5 > acls: 5 > locking: 5 > msdfs: 5 > dmapi: 5 > registry: 5 > scavenger: 5 > dns: 5 > ldb: 5 > tevent: 5 > auth_audit: 5 > auth_json_audit: 5 > kerberos: 5 > drs_repl: 5 > smb2: 5 > smb2_credits: 5 > dsdb_audit: 5 > dsdb_json_audit: 5 > dsdb_password_audit: 5 > dsdb_password_json_audit: 5 > dsdb_transaction_audit: 5 > dsdb_transaction_json_audit: 5 > dsdb_group_audit: 5 > dsdb_group_json_audit: 5 > Processing section "[netlogon]" > Processing section "[sysvol]" > pm_process() returned Yes > schema_fsmo_init: we are master[yes] updates allowed[no] > schema_fsmo_init: we are master[yes] updates allowed[no] > running backup on dirs: /usr/local/samba/private > /usr/local/samba/var/locks /usr/local/samba/etc > Starting transaction on /usr/local/samba/private/secrets > Starting transaction on /usr/local/samba/private/sam.ldb > schema_fsmo_init: we are master[yes] updates allowed[no] > backing up /usr/local/samba/private/sam.ldb > backing up locked/related file > /usr/local/samba/private/sam.ldb.d/CN%3DCONFIGURATION,DC%3DDOMAIN,DC%3DCAT.ldb > backing up locked/related file > /usr/local/samba/private/sam.ldb.d/DC%3DDOMAIN,DC%3DCAT.ldb > backing up locked/related file > /usr/local/samba/private/sam.ldb.d/DC%3DDOMAINDNSZONES,DC%3DDOMAIN,DC%3DCAT.ldb > backing up locked/related file > /usr/local/samba/private/sam.ldb.d/DC%3DFORESTDNSZONES,DC%3DDOMAIN,DC%3DCAT.ldb > copying locked/related file /usr/local/samba/private/sam.ldb.d/metadata.tdb > backing up locked/related file > /usr/local/samba/private/sam.ldb.d/CN%3DSCHEMA,CN%3DCONFIGURATION,DC%3DDOMAIN,DC%3DCAT.ldb > DSDB Transaction [rollback] at [Thu, 04 Jul 2019 09:45:47.259639 CEST] > duration [310424] > {"timestamp": "2019-07-04T09:45:47.259733+0200", "type": > "dsdbTransaction", "dsdbTransaction": {"version": {"major": 1, > "minor": 0}, "duration": 310424, "transactionId": > "e726216c-1c2a-46dc-9567-e4deaa95b604", "action": "rollback"}} > schema_fsmo_init: we are master[yes] updates allowed[no] > DSDB Change [Modify] at [Thu, 04 Jul 2019 09:45:47.421669 CEST] status > [Success] remote host [Unknown] SID [(NULL SID)] DN [@SAMBA_DSDB] > attributes [add: backupDate [2019-07-04T09-45-47.419553]] > {"timestamp": "2019-07-04T09:45:47.421771+0200", "type": "dsdbChange", > "dsdbChange": {"sessionId": "61a4ab3e-7b32-4d08-83ac-c77067c441b6", > "version": {"major": 1, "minor": 0}, "operation": "Modify", > "statusCode": 0, "dn": "@SAMBA_DSDB", "performedAsSystem": false, > "userSid": "S-1-5-18", "status": "Success", "remoteAddress": null, > "transactionId": "9c36e755-92e7-4487-956d-6dd384555e1a", "attributes": > {"backupDate": {"actions": [{"action": "add", "values": [{"value": > "2019-07-04T09-45-47.419553"}]}]}}}} > DSDB Change [Modify] at [Thu, 04 Jul 2019 09:45:47.427791 CEST] status > [Success] remote host [Unknown] SID [(NULL SID)] DN [@SAMBA_DSDB] > attributes [add: sidForRestore > [S-1-5-21-2329230797-1186182137-2997319902-1207]] > {"timestamp": "2019-07-04T09:45:47.427873+0200", "type": "dsdbChange", > "dsdbChange": {"sessionId": "61a4ab3e-7b32-4d08-83ac-c77067c441b6", > "version": {"major": 1, "minor": 0}, "operation": "Modify", > "statusCode": 0, "dn": "@SAMBA_DSDB", "performedAsSystem": false, > "userSid": "S-1-5-18", "status": "Success", "remoteAddress": null, > "transactionId": "a6d5b011-d718-458a-962e-05cc98058ee6", "attributes": > {"sidForRestore": {"actions": [{"action": "add", "values": [{"value": > "S-1-5-21-2329230797-1186182137-2997319902-1207"}]}]}}}} > DSDB Change [Modify] at [Thu, 04 Jul 2019 09:45:47.431733 CEST] status > [Success] remote host [Unknown] SID [(NULL SID)] DN [@SAMBA_DSDB] > attributes [add: backupType [offline]] > {"timestamp": "2019-07-04T09:45:47.431809+0200", "type": "dsdbChange", > "dsdbChange": {"sessionId": "61a4ab3e-7b32-4d08-83ac-c77067c441b6", > "version": {"major": 1, "minor": 0}, "operation": "Modify", > "statusCode": 0, "dn": "@SAMBA_DSDB", "performedAsSystem": false, > "userSid": "S-1-5-18", "status": "Success", "remoteAddress": null, > "transactionId": "8522e328-394e-42e8-a676-a2b40cd5fcca", "attributes": > {"backupType": {"actions": [{"action": "add", "values": [{"value": > "offline"}]}]}}}} > running tdbbackup on lone tdb file /usr/local/samba/private/schannel_store.tdb > Starting transaction on solo db: /usr/local/samba/private/hklm.ldb > running tdbbackup on the same file > running tdbbackup on lone tdb file > /usr/local/samba/private/netlogon_creds_cli.tdb > tdb_mutex_open_ok[/usr/local/samba/private/netlogon_creds_cli.tdb]: > Can use mutexes only with MUTEX_LOCKING or NOLOCK > Failed to open /usr/local/samba/private/netlogon_creds_cli.tdb > Starting transaction on solo db: /usr/local/samba/private/share.ldb > running tdbbackup on the same file > Starting transaction on solo db: /usr/local/samba/private/privilege.ldb > running tdbbackup on the same file > Starting transaction on solo db: /usr/local/samba/private/idmap.ldb > running tdbbackup on the same file > Starting transaction on solo db: /usr/local/samba/private/dns/sam.ldb > tdb(/usr/local/samba/private/dns/sam.ldb.d/metadata.tdb): tdb_open_ex: > /usr/local/samba/private/dns/sam.ldb.d/metadata.tdb (2049,673298) is > already open in this process > partition_metadata: Migrating partition metadata: open of metadata.tdb > gave: partition_metadata: Unable to open > /usr/local/samba/private/dns/sam.ldb.d/metadata.?: Device or resource > busy > tdb(/usr/local/samba/private/dns/sam.ldb.d/metadata.tdb): tdb_open_ex: > /usr/local/samba/private/dns/sam.ldb.d/metadata.tdb (2049,673298) is > already open in this process > module partition initialization failed : Operations error > module show_deleted initialization failed : Operations error > module dns_notify initialization failed : Operations error > module extended_dn_out_ldb initialization failed : Operations error > module linked_attributes initialization failed : Operations error > module unique_object_sids initialization failed : Operations error > module operational initialization failed : Operations error > module encrypted_secrets initialization failed : Operations error > module group_audit_log initialization failed : Operations error > module repl_meta_data initialization failed : Operations error > module subtree_delete initialization failed : Operations error > module aclread initialization failed : Operations error > module acl initialization failed : Operations error > module descriptor initialization failed : Operations error > module objectclass initialization failed : Operations error > module audit_log initialization failed : Operations error > module asq initialization failed : Operations error > module server_sort initialization failed : Operations error > module vlv initialization failed : Operations error > module dsdb_paged_results initialization failed : Operations error > module dirsync initialization failed : Operations error > module schema_load initialization failed : Operations error > module dsdb_notification initialization failed : Operations error > module rootdse initialization failed : Operations error > module samba_dsdb initialization failed : Operations error > Unable to load modules for /usr/local/samba/private/dns/sam.ldb: > partition_metadata: Migrating partition metadata: create of > metadata.tdb gave: partition_metadata: Unable to create > /usr/local/samba/private/dns/sam.ldb.d/metadata.?: Device or resource > busy > > ERROR(<class 'ValueError'>): uncaught exception - need more than 0 > values to unpack > File "/usr/local/samba/bin/samba-tool", line 44, in <module> > retval = cmd._run("samba-tool", subcommand, *args) > File "/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/__init__.py", > line 235, in _run > "%s %s" % (myname, subcommand), *args) > File "/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/__init__.py", > line 235, in _run > "%s %s" % (myname, subcommand), *args) > File "/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/__init__.py", > line 235, in _run > "%s %s" % (myname, subcommand), *args) > File "/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/__init__.py", > line 187, in _run > self.show_command_error(e) > File "/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/__init__.py", > line 114, in show_command_error > (ldb_ecode, ldb_emsg) = inner_exception.args > > > > online with samba started > samba-tool domain backup online --targetdir=/local/test/ > --server=samba4-test-UAdministrator > ERROR(runtime): uncaught exception - (3221225506, '{Access Denied} A > process has requested access to an object but has not been granted > those access rights.') > File "/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/__init__.py", > line 185, in _run > return self.run(*args, **kwargs) > File "/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/domain_backup.py", > line 264, in run > backup_online(smb_conn, sysvol_tar, remote_sam.get_domain_sid()) > File "/usr/local/samba/lib/python3.4/site-packages/samba/ntacls.py", > line 512, in backup_online > ntacl_sddl_str = smb_helper.get_acl(r_name, as_sddl=True) > File "/usr/local/samba/lib/python3.4/site-packages/samba/ntacls.py", > line 334, in get_acl > smb_path, SECURITY_SECINFO_FLAGS, SECURITY_SEC_FLAGS) > signed SMB2 message > > > Any suggestion why backups are not running on 4.10.5. > > All commands executed with root user > > Thanks
On 4/07/19 7:50 PM, Trenta sis via samba wrote:> Hi, > > We were using samba_backup from 4.4.5 and after upgrade to 4.10.5 we > are trying to configure new method, but is not working, tried: > > offline with samba stopped: > # samba-tool domain backup offline --targetdir=/local/test/ > > > ERROR(ldb): uncaught exception - partition_metadata: Migrating > partition metadata: create of metadata.tdb gave: partition_metadata: > Unable to create /usr/local/samba/private/dns/sam.ldb.d/metadata.tdb: > Device or resource busy > > File "/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/__init__.py", > line 185, in _run > return self.run(*args, **kwargs) > File "/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/domain_backup.py", > line 1072, in run > ldb_obj = Ldb(path, lp=lp) > File "/usr/local/samba/lib/python3.4/site-packages/samba/__init__.py", > line 115, in __init__ > self.connect(url, flags, options)It looks like the offline backup doesn't work with a Bind DLZ DNS backend. I've raised a bug for this: https://bugzilla.samba.org/show_bug.cgi?id=14027> online with samba started > samba-tool domain backup online --targetdir=/local/test/ > --server=samba4-test-UAdministrator > ERROR(runtime): uncaught exception - (3221225506, '{Access Denied} A > process has requested access to an object but has not been granted > those access rights.') > File "/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/__init__.py", > line 185, in _run > return self.run(*args, **kwargs) > File "/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/domain_backup.py", > line 264, in run > backup_online(smb_conn, sysvol_tar, remote_sam.get_domain_sid()) > File "/usr/local/samba/lib/python3.4/site-packages/samba/ntacls.py", > line 512, in backup_online > ntacl_sddl_str = smb_helper.get_acl(r_name, as_sddl=True) > File "/usr/local/samba/lib/python3.4/site-packages/samba/ntacls.py", > line 334, in get_acl > smb_path, SECURITY_SECINFO_FLAGS, SECURITY_SEC_FLAGS) > signed SMB2 message >This problem is occurring backing up the sysvol share. There's a particular GPO that it's having trouble accessing over an SMB connection. Another samba user has debugged this problem previously, and managed to work around it by removing the problematic GPO (because it was old/unnecessary). https://lists.samba.org/archive/samba/2019-April/222417.html I'm not sure, but it's possible that bug #13917 might help. You could try samba v4.10.6 when it's released. https://bugzilla.samba.org/show_bug.cgi?id=13917 Cheers, Tim
Hi, tis example that you described I understand that is about backup online, correct? Why offline backup with samba started and also stopped is not working? I have searched a bug in bugs.samba.org but without success Thanks Thanks Missatge de Tim Beale <timbeale at catalyst.net.nz> del dia dv., 5 de jul. 2019 a les 2:14:> > On 4/07/19 7:50 PM, Trenta sis via samba wrote: > > Hi, > > > > We were using samba_backup from 4.4.5 and after upgrade to 4.10.5 we > > are trying to configure new method, but is not working, tried: > > > > offline with samba stopped: > > # samba-tool domain backup offline --targetdir=/local/test/ > > > > > > ERROR(ldb): uncaught exception - partition_metadata: Migrating > > partition metadata: create of metadata.tdb gave: partition_metadata: > > Unable to create /usr/local/samba/private/dns/sam.ldb.d/metadata.tdb: > > Device or resource busy > > > > File "/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/__init__.py", > > line 185, in _run > > return self.run(*args, **kwargs) > > File "/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/domain_backup.py", > > line 1072, in run > > ldb_obj = Ldb(path, lp=lp) > > File "/usr/local/samba/lib/python3.4/site-packages/samba/__init__.py", > > line 115, in __init__ > > self.connect(url, flags, options) > It looks like the offline backup doesn't work with a Bind DLZ DNS > backend. I've raised a bug for this: > https://bugzilla.samba.org/show_bug.cgi?id=14027 > > online with samba started > > samba-tool domain backup online --targetdir=/local/test/ > > --server=samba4-test-UAdministrator > > ERROR(runtime): uncaught exception - (3221225506, '{Access Denied} A > > process has requested access to an object but has not been granted > > those access rights.') > > File "/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/__init__.py", > > line 185, in _run > > return self.run(*args, **kwargs) > > File "/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/domain_backup.py", > > line 264, in run > > backup_online(smb_conn, sysvol_tar, remote_sam.get_domain_sid()) > > File "/usr/local/samba/lib/python3.4/site-packages/samba/ntacls.py", > > line 512, in backup_online > > ntacl_sddl_str = smb_helper.get_acl(r_name, as_sddl=True) > > File "/usr/local/samba/lib/python3.4/site-packages/samba/ntacls.py", > > line 334, in get_acl > > smb_path, SECURITY_SECINFO_FLAGS, SECURITY_SEC_FLAGS) > > signed SMB2 message > > > This problem is occurring backing up the sysvol share. There's a > particular GPO that it's having trouble accessing over an SMB > connection. Another samba user has debugged this problem previously, and > managed to work around it by removing the problematic GPO (because it > was old/unnecessary). > https://lists.samba.org/archive/samba/2019-April/222417.html > > I'm not sure, but it's possible that bug #13917 might help. You could > try samba v4.10.6 when it's released. > https://bugzilla.samba.org/show_bug.cgi?id=13917 > > Cheers, > Tim