samba - May 2020 - Failed to commit objects: DOS code 0x000021bf attempting to add DC to Zentyal 3.2 domain (samba 4.1.7)

Hello, 

I'm attempting to join a new samba 4 server version 4.12.3 to an existing
samba 4 domain running on Zentyal 3.2 (samba version 4.1.7).

I'm getting the error in the subject line: Failed to commit objects: DOS
code 0x000021bf

And the domain join fails. It looks like it's having some sort of problem
with the replication stage but I'm not exactly sure what.

I'm basically trying to decommission this Zentyal box and get the Samba
upgraded to something recent. Is it because the versions of Samba are so much
different?

I guess if I need to I could build an interim box that I could use an older
version of Samba to join and then incrementally upgrade it.. but I hope
that's not necessary.

Thanks, 
Rich

On Sun, 2020-05-24 at 23:01 -0400, Rich Webb via samba
wrote:
> Hello, 
> 
> I'm attempting to join a new samba 4 server version 4.12.3 to an
> existing samba 4 domain running on Zentyal 3.2 (samba version
> 4.1.7). 
> 
> I'm getting the error in the subject line: Failed to commit objects:
> DOS code 0x000021bf 
If you turn up the log level is there more information?  (eg -d4)?

But yes, Samba 4.1.7 is before we fixed a number of issues in the
replication protocol, and I'm not surprised you have issues.

Andrew Bartlett

-- 
Andrew Bartlett                       https://samba.org/~abartlet/
Authentication Developer, Samba Team  https://samba.org
Samba Developer, Catalyst IT          
https://catalyst.net.nz/services/samba

----- On May 24, 2020, at 11:30 PM, samba samba at lists.samba.org wrote:
> On Sun, 2020-05-24 at 23:01 -0400, Rich Webb via samba wrote:
>> Hello,
>> 
>> I'm attempting to join a new samba 4 server version 4.12.3 to an
>> existing samba 4 domain running on Zentyal 3.2 (samba version
>> 4.1.7).
>> 
>> I'm getting the error in the subject line: Failed to commit
objects:
>> DOS code 0x000021bf
> 
> If you turn up the log level is there more information?  (eg -d4)?
> 
> But yes, Samba 4.1.7 is before we fixed a number of issues in the
> replication protocol, and I'm not surprised you have issues.
> 
> Andrew Bartlett
> 
> --
Also I am currently using 4.10.15 as I tried to backrev to a version that would
join properly. The -d4 produced a ton of output... Let me know if you need more
but here is the final pieces that would likely give a clue.  I have no idea what
mail-fs1 is.. that may have been an old host name possibly left hanging around
in DNS?  The DC's name is fs1:

Missing parent while attempting to apply records: No parent with GUID
fe34e0f7-7c0d-415d-af6e-d564e2b1cdb4 found for object remotely known as
CN=mail-fs1,OU=Kerberos,DC=tca,DC=local
Failed to commit objects: WERR_DS_DRA_MISSING_PARENT
Join failed - cleaning up
ldb_wrap open of secrets.ldb
Could not find machine account in secrets database: Failed to fetch machine
account password for TCA from both secrets.ldb (Could not find entry to match
filter: '(&(flatname=TCA)(objectclass=primaryDomain))' base:
'cn=Primary Domains': No such object: dsdb_search at
../../source4/dsdb/common/util.c:4733) and from /opt/samba/private/secrets.tdb:
NT_STATUS_CANT_ACCESS_DOMAIN_INFO
Deleted CN=DC1,OU=Domain Controllers,DC=tca,DC=local
Deleted CN=NTDS
Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=tca,DC=local
Deleted
CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=tca,DC=local
ERROR(runtime): uncaught exception - (8460, "Failed to process
'chunk' of DRS replicated objects: WERR_DS_DRA_MISSING_PARENT")
  File
"/opt/samba/lib64/python3.6/site-packages/samba/netcmd/__init__.py",
line 185, in _run
    return self.run(*args, **kwargs)
  File
"/opt/samba/lib64/python3.6/site-packages/samba/netcmd/domain.py",
line 700, in run
    backend_store=backend_store)
  File "/opt/samba/lib64/python3.6/site-packages/samba/join.py", line
1544, in join_DC
    ctx.do_join()
  File "/opt/samba/lib64/python3.6/site-packages/samba/join.py", line
1438, in do_join
    ctx.join_replicate()
  File "/opt/samba/lib64/python3.6/site-packages/samba/join.py", line
982, in join_replicate
    replica_flags=ctx.domain_replica_flags)
  File "/opt/samba/lib64/python3.6/site-packages/samba/drs_utils.py",
line 356, in replicate
    raise e
  File "/opt/samba/lib64/python3.6/site-packages/samba/drs_utils.py",
line 343, in replicate
    self.process_chunk(level, ctr, schema, req_level, req, first_chunk)
  File "/opt/samba/lib64/python3.6/site-packages/samba/drs_utils.py",
line 237, in process_chunk
    schema=schema, req_level=req_level, req=req)