thr3ads.net - samba - [Samba] Failed when join to an existing Active Directory Domain [Oct 2019]

If this information is useful, please help other people find it:
Share via:

Igor Sousa

2019-Oct-11 20:56 UTC

[Samba] Failed when join to an existing Active Directory Domain

Hi,

I've tried to update my samba AD/DC environment. Then, I've removed a
existing offline DC with "samba-tool domain demote
--remove-other-dead-server=genos". I've re-created "genos"
(yes, I try to
keep the same name and IP address) and install a 4.10.2 samba version (I
know the new version is 4.11.0). When I've tried to join it on my domain,
I've received message "Join failed - cleaning up" and the error
ERROR(runtime): uncaught exception - (9714,
'WERR_DNS_ERROR_NAME_DOES_NOT_EXIST'). I've never seen this error
before
and I don't know how to fix it.

OBS: I've verified on DNS Manager, Active Directory Sites and Services and
Active Directory Users and Computers if genos demonted was successful.


See below the output of join command.

[root at genos ~]# samba-tool domain join smb DC -U"SMB\administrator"
--dns-backend=BIND9_DLZ --option='idmap_ldb:use rfc2307 = yes'
INFO 2019-10-11 17:48:28,951 pid:29652
/usr/local/samba/lib64/python3.6/site-packages/samba/join.py #103: Finding
a writeable DC for domain 'smb'
INFO 2019-10-11 17:48:28,972 pid:29652
/usr/local/samba/lib64/python3.6/site-packages/samba/join.py #105: Found DC
samba4.smb
Password for [SMB\administrator]:
INFO 2019-10-11 17:48:35,306 pid:29652
/usr/local/samba/lib64/python3.6/site-packages/samba/join.py #1519:
workgroup is SMB
INFO 2019-10-11 17:48:35,307 pid:29652
/usr/local/samba/lib64/python3.6/site-packages/samba/join.py #1522: realm
is smb
Adding CN=GENOS,OU=Domain Controllers,DC=SMB
Adding
CN=GENOS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=SMB
Adding CN=NTDS
Settings,CN=GENOS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=SMB
Adding SPNs to CN=GENOS,OU=Domain Controllers,DC=SMB
Setting account password for GENOS$
Enabling account
Adding DNS account CN=dns-GENOS,CN=Users,DC=SMB with dns/ SPN
Setting account password for dns-GENOS
Calling bare provision
INFO 2019-10-11 17:48:37,247 pid:29652
/usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py
#2079: Looking up IPv4 addresses
INFO 2019-10-11 17:48:37,248 pid:29652
/usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py
#2096: Looking up IPv6 addresses
WARNING 2019-10-11 17:48:37,249 pid:29652
/usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py
#2103: No IPv6 address will be assigned
INFO 2019-10-11 17:48:38,134 pid:29652
/usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py
#2269: Setting up share.ldb
INFO 2019-10-11 17:48:38,164 pid:29652
/usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py
#2273: Setting up secrets.ldb
INFO 2019-10-11 17:48:38,194 pid:29652
/usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py
#2279: Setting up the registry
INFO 2019-10-11 17:48:38,287 pid:29652
/usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py
#2282: Setting up the privileges database
INFO 2019-10-11 17:48:38,333 pid:29652
/usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py
#2285: Setting up idmap db
INFO 2019-10-11 17:48:38,362 pid:29652
/usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py
#2292: Setting up SAM db
INFO 2019-10-11 17:48:38,369 pid:29652
/usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py
#882: Setting up sam.ldb partitions and settings
INFO 2019-10-11 17:48:38,370 pid:29652
/usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py
#894: Setting up sam.ldb rootDSE
INFO 2019-10-11 17:48:38,375 pid:29652
/usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py
#1297: Pre-loading the Samba 4 and AD schema
Unable to determine the DomainSID, can not enforce uniqueness constraint on
local domainSIDs

INFO 2019-10-11 17:48:38,415 pid:29652
/usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py
#2342: A Kerberos configuration suitable for Samba AD has been generated at
/usr/local/samba/private/krb5.conf
INFO 2019-10-11 17:48:38,416 pid:29652
/usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py
#2343: Merge the contents of this file with your system krb5.conf or
replace it with this one. Do not create a symlink!
Provision OK for domain DN DC=SMB
Starting replication
Schema-DN[CN=Schema,CN=Configuration,DC=SMB] objects[402/1550]
linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=SMB] objects[804/1550]
linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=SMB] objects[1206/1550]
linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=SMB] objects[1550/1550]
linked_values[0/0]
Analyze and apply schema objects
Partition[CN=Configuration,DC=SMB] objects[402/1643] linked_values[0/0]
Partition[CN=Configuration,DC=SMB] objects[804/1643] linked_values[0/0]
Partition[CN=Configuration,DC=SMB] objects[1206/1643] linked_values[0/0]
Partition[CN=Configuration,DC=SMB] objects[1608/1643] linked_values[0/0]
Partition[CN=Configuration,DC=SMB] objects[1643/1643] linked_values[56/0]
Failed to commit objects: DOS code 0x000021bf
Missing target object - retrying with DRS_GET_TGT
Partition[CN=Configuration,DC=SMB] objects[2045/1643] linked_values[56/0]
Partition[CN=Configuration,DC=SMB] objects[2447/1643] linked_values[56/0]
Partition[CN=Configuration,DC=SMB] objects[2849/1643] linked_values[56/0]
Partition[CN=Configuration,DC=SMB] objects[3251/1643] linked_values[56/0]
Partition[CN=Configuration,DC=SMB] objects[3286/1643] linked_values[112/0]
Replicating critical objects from the base DN of the domain
Partition[DC=SMB] objects[99/99] linked_values[42/0]
Partition[DC=SMB] objects[402/564] linked_values[0/0]
../../lib/ldb/ldb_key_value/ldb_kv_index.c:2413: duplicate attribute value
in CN=SAULO-THINK,CN=Computers,DC=SMB for index on servicePrincipalName,
duplicate of objectGUID 449c0f09-c392-498b-9ad1-fce0c288d610 in
@INDEX:SERVICEPRINCIPALNAME:TERMSRV/SAULO-THINK.SMB
Partition[DC=SMB] objects[564/564] linked_values[155/0]
Done with always replicated NC (base, config, schema)
Replicating DC=DomainDnsZones,DC=SMB
Partition[DC=DomainDnsZones,DC=SMB] objects[402/858] linked_values[0/0]
Partition[DC=DomainDnsZones,DC=SMB] objects[804/858] linked_values[0/0]
Partition[DC=DomainDnsZones,DC=SMB] objects[858/858] linked_values[0/0]
Replicating DC=ForestDnsZones,DC=SMB
Partition[DC=ForestDnsZones,DC=SMB] objects[76/76] linked_values[0/0]
Exop on[CN=RID Manager$,CN=System,DC=SMB] objects[3] linked_values[0]
Committing SAM database
INFO 2019-10-11 17:49:04,633 pid:29652
/usr/local/samba/lib64/python3.6/site-packages/samba/join.py #1097: Adding
1 remote DNS records for GENOS.smb
INFO 2019-10-11 17:49:04,753 pid:29652
/usr/local/samba/lib64/python3.6/site-packages/samba/join.py #1160: Adding
DNS A record GENOS.smb for IPv4 IP: 10.41.17.130
Join failed - cleaning up
Deleted CN=RID Set,CN=GENOS,OU=Domain Controllers,DC=SMB
Deleted CN=GENOS,OU=Domain Controllers,DC=SMB
Deleted CN=dns-GENOS,CN=Users,DC=SMB
Deleted CN=NTDS
Settings,CN=GENOS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=SMB
Deleted
CN=GENOS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=SMB
ERROR(runtime): uncaught exception - (9714,
'WERR_DNS_ERROR_NAME_DOES_NOT_EXIST')
  File
"/usr/local/samba/lib64/python3.6/site-packages/samba/netcmd/__init__.py",
line 185, in _run
    return self.run(*args, **kwargs)
  File
"/usr/local/samba/lib64/python3.6/site-packages/samba/netcmd/domain.py",
line 699, in run
    backend_store=backend_store)
  File "/usr/local/samba/lib64/python3.6/site-packages/samba/join.py",
line
1535, in join_DC
    ctx.do_join()
  File "/usr/local/samba/lib64/python3.6/site-packages/samba/join.py",
line
1436, in do_join
    ctx.join_add_dns_records()
  File "/usr/local/samba/lib64/python3.6/site-packages/samba/join.py",
line
1178, in join_add_dns_records
    dns_partition=domaindns_zone_dn)
  File
"/usr/local/samba/lib64/python3.6/site-packages/samba/samdb.py",
line 1069, in dns_lookup
    dns_partition=dns_partition)

--
Igor Sousa

Rowland penny

2019-Oct-12 08:25 UTC

head link

[Samba] Failed when join to an existing Active Directory Domain

On 11/10/2019 21:56, Igor Sousa via samba wrote:> Hi,
>
> I've tried to update my samba AD/DC environment. Then, I've removed
a
> existing offline DC with "samba-tool domain demote
> --remove-other-dead-server=genos". I've re-created
"genos" (yes, I try to
> keep the same name and IP address) and install a 4.10.2 samba version (I
> know the new version is 4.11.0). When I've tried to join it on my
domain,
> I've received message "Join failed - cleaning up" and the
error
> ERROR(runtime): uncaught exception - (9714,
> 'WERR_DNS_ERROR_NAME_DOES_NOT_EXIST'). I've never seen this
error before
> and I don't know how to fix it.
>
> OBS: I've verified on DNS Manager, Active Directory Sites and Services
and
> Active Directory Users and Computers if genos demonted was successful.
>
>
> See below the output of join command.
>
> [root at genos ~]# samba-tool domain join smb DC
-U"SMB\administrator"
> --dns-backend=BIND9_DLZ --option='idmap_ldb:use rfc2307 = yes'
> INFO 2019-10-11 17:48:28,951 pid:29652
> /usr/local/samba/lib64/python3.6/site-packages/samba/join.py #103: Finding
> a writeable DC for domain 'smb'
> INFO 2019-10-11 17:48:28,972 pid:29652
> /usr/local/samba/lib64/python3.6/site-packages/samba/join.py #105: Found DC
> samba4.smb
> Password for [SMB\administrator]:
> INFO 2019-10-11 17:48:35,306 pid:29652
> /usr/local/samba/lib64/python3.6/site-packages/samba/join.py #1519:
> workgroup is SMB
> INFO 2019-10-11 17:48:35,307 pid:29652
> /usr/local/samba/lib64/python3.6/site-packages/samba/join.py #1522: realm
> is smb
> Adding CN=GENOS,OU=Domain Controllers,DC=SMB
> Adding
>
CN=GENOS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=SMB
> Adding CN=NTDS
>
Settings,CN=GENOS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=SMB
> Adding SPNs to CN=GENOS,OU=Domain Controllers,DC=SMB
> Setting account password for GENOS$
> Enabling account
> Adding DNS account CN=dns-GENOS,CN=Users,DC=SMB with dns/ SPN
> Setting account password for dns-GENOS
> Calling bare provision
> INFO 2019-10-11 17:48:37,247 pid:29652
> /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py
> #2079: Looking up IPv4 addresses
> INFO 2019-10-11 17:48:37,248 pid:29652
> /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py
> #2096: Looking up IPv6 addresses
> WARNING 2019-10-11 17:48:37,249 pid:29652
> /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py
> #2103: No IPv6 address will be assigned
> INFO 2019-10-11 17:48:38,134 pid:29652
> /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py
> #2269: Setting up share.ldb
> INFO 2019-10-11 17:48:38,164 pid:29652
> /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py
> #2273: Setting up secrets.ldb
> INFO 2019-10-11 17:48:38,194 pid:29652
> /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py
> #2279: Setting up the registry
> INFO 2019-10-11 17:48:38,287 pid:29652
> /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py
> #2282: Setting up the privileges database
> INFO 2019-10-11 17:48:38,333 pid:29652
> /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py
> #2285: Setting up idmap db
> INFO 2019-10-11 17:48:38,362 pid:29652
> /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py
> #2292: Setting up SAM db
> INFO 2019-10-11 17:48:38,369 pid:29652
> /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py
> #882: Setting up sam.ldb partitions and settings
> INFO 2019-10-11 17:48:38,370 pid:29652
> /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py
> #894: Setting up sam.ldb rootDSE
> INFO 2019-10-11 17:48:38,375 pid:29652
> /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py
> #1297: Pre-loading the Samba 4 and AD schema
> Unable to determine the DomainSID, can not enforce uniqueness constraint on
> local domainSIDs
>
> INFO 2019-10-11 17:48:38,415 pid:29652
> /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py
> #2342: A Kerberos configuration suitable for Samba AD has been generated at
> /usr/local/samba/private/krb5.conf
> INFO 2019-10-11 17:48:38,416 pid:29652
> /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py
> #2343: Merge the contents of this file with your system krb5.conf or
> replace it with this one. Do not create a symlink!
> Provision OK for domain DN DC=SMB
> Starting replication
> Schema-DN[CN=Schema,CN=Configuration,DC=SMB] objects[402/1550]
> linked_values[0/0]
> Schema-DN[CN=Schema,CN=Configuration,DC=SMB] objects[804/1550]
> linked_values[0/0]
> Schema-DN[CN=Schema,CN=Configuration,DC=SMB] objects[1206/1550]
> linked_values[0/0]
> Schema-DN[CN=Schema,CN=Configuration,DC=SMB] objects[1550/1550]
> linked_values[0/0]
> Analyze and apply schema objects
> Partition[CN=Configuration,DC=SMB] objects[402/1643] linked_values[0/0]
> Partition[CN=Configuration,DC=SMB] objects[804/1643] linked_values[0/0]
> Partition[CN=Configuration,DC=SMB] objects[1206/1643] linked_values[0/0]
> Partition[CN=Configuration,DC=SMB] objects[1608/1643] linked_values[0/0]
> Partition[CN=Configuration,DC=SMB] objects[1643/1643] linked_values[56/0]
> Failed to commit objects: DOS code 0x000021bf
> Missing target object - retrying with DRS_GET_TGT
> Partition[CN=Configuration,DC=SMB] objects[2045/1643] linked_values[56/0]
> Partition[CN=Configuration,DC=SMB] objects[2447/1643] linked_values[56/0]
> Partition[CN=Configuration,DC=SMB] objects[2849/1643] linked_values[56/0]
> Partition[CN=Configuration,DC=SMB] objects[3251/1643] linked_values[56/0]
> Partition[CN=Configuration,DC=SMB] objects[3286/1643] linked_values[112/0]
> Replicating critical objects from the base DN of the domain
> Partition[DC=SMB] objects[99/99] linked_values[42/0]
> Partition[DC=SMB] objects[402/564] linked_values[0/0]
> ../../lib/ldb/ldb_key_value/ldb_kv_index.c:2413: duplicate attribute value
> in CN=SAULO-THINK,CN=Computers,DC=SMB for index on servicePrincipalName,
> duplicate of objectGUID 449c0f09-c392-498b-9ad1-fce0c288d610 in
> @INDEX:SERVICEPRINCIPALNAME:TERMSRV/SAULO-THINK.SMB
> Partition[DC=SMB] objects[564/564] linked_values[155/0]
> Done with always replicated NC (base, config, schema)
> Replicating DC=DomainDnsZones,DC=SMB
> Partition[DC=DomainDnsZones,DC=SMB] objects[402/858] linked_values[0/0]
> Partition[DC=DomainDnsZones,DC=SMB] objects[804/858] linked_values[0/0]
> Partition[DC=DomainDnsZones,DC=SMB] objects[858/858] linked_values[0/0]
> Replicating DC=ForestDnsZones,DC=SMB
> Partition[DC=ForestDnsZones,DC=SMB] objects[76/76] linked_values[0/0]
> Exop on[CN=RID Manager$,CN=System,DC=SMB] objects[3] linked_values[0]
> Committing SAM database
> INFO 2019-10-11 17:49:04,633 pid:29652
> /usr/local/samba/lib64/python3.6/site-packages/samba/join.py #1097: Adding
> 1 remote DNS records for GENOS.smb
> INFO 2019-10-11 17:49:04,753 pid:29652
> /usr/local/samba/lib64/python3.6/site-packages/samba/join.py #1160: Adding
> DNS A record GENOS.smb for IPv4 IP: 10.41.17.130
> Join failed - cleaning up
> Deleted CN=RID Set,CN=GENOS,OU=Domain Controllers,DC=SMB
> Deleted CN=GENOS,OU=Domain Controllers,DC=SMB
> Deleted CN=dns-GENOS,CN=Users,DC=SMB
> Deleted CN=NTDS
>
Settings,CN=GENOS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=SMB
> Deleted
>
CN=GENOS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=SMB
> ERROR(runtime): uncaught exception - (9714,
> 'WERR_DNS_ERROR_NAME_DOES_NOT_EXIST')
>    File
>
"/usr/local/samba/lib64/python3.6/site-packages/samba/netcmd/__init__.py",
> line 185, in _run
>      return self.run(*args, **kwargs)
>    File
>
"/usr/local/samba/lib64/python3.6/site-packages/samba/netcmd/domain.py",
> line 699, in run
>      backend_store=backend_store)
>    File
"/usr/local/samba/lib64/python3.6/site-packages/samba/join.py", line
> 1535, in join_DC
>      ctx.do_join()
>    File
"/usr/local/samba/lib64/python3.6/site-packages/samba/join.py", line
> 1436, in do_join
>      ctx.join_add_dns_records()
>    File
"/usr/local/samba/lib64/python3.6/site-packages/samba/join.py", line
> 1178, in join_add_dns_records
>      dns_partition=domaindns_zone_dn)
>    File
"/usr/local/samba/lib64/python3.6/site-packages/samba/samdb.py",
> line 1069, in dns_lookup
>      dns_partition=dns_partition)
>
> --
> Igor Sousa
You can ignore anything after 'Join failed - cleaning up', anything 
after this is an artefact of the failure.

Was this domain originally a Windows domain ?

Rowland

Igor Sousa

2019-Oct-12 14:22 UTC

head link

[Samba] Failed when join to an existing Active Directory Domain

Hi Rowland,


My domain is a Samba Domain originally. I don't have any Windows DC and
I've never had a Windows DC in this domain, only Windows members. My master
DC is too old samba version and I've put a new DC with samba 4.10.2 and
I've tried to update a secondary DC that had had offline. Then I have
demonted it and compile a Samba 4.10.2 and I've tried to join it with the
same name and IP address as I've said before.

Igor Sousa

Maybe Matching Threads

Search for more possibly parallel threads

samba - Oct 2019 - Failed when join to an existing Active Directory Domain

[Samba] Failed when join to an existing Active Directory Domain

[Samba] Failed when join to an existing Active Directory Domain

[Samba] Failed when join to an existing Active Directory Domain

Maybe Matching Threads