Luis Peromarta
2024-Jun-27 16:43 UTC
[Samba] Online AD Backup fails with "no auth" in 4.20?
OK apologies, looks like I jumped the gun and installed ?samba-ad-dc? while my system wanted "samba-ad-provision? as per the error below. Maybe samba-ad-dc installs samba-ad-provision ? ?/usr/bin/samba-tool domain backup online --targetdir=/root/samba-ad-backup-awing/ --server=awing -UAdministrator INFO 2024-06-27 18:35:35,593 pid:2650 /usr/lib/python3/dist-packages/samba/join.py #1637: workgroup is MAD INFO 2024-06-27 18:35:35,593 pid:2650 /usr/lib/python3/dist-packages/samba/join.py #1640: realm is mad.caponato.es Calling bare provision INFO 2024-06-27 18:35:35,606 pid:2650 /usr/lib/python3/dist-packages/samba/provision/__init__.py #2110: Looking up IPv4 addresses INFO 2024-06-27 18:35:35,607 pid:2650 /usr/lib/python3/dist-packages/samba/provision/__init__.py #2127: Looking up IPv6 addresses WARNING 2024-06-27 18:35:35,607 pid:2650 /usr/lib/python3/dist-packages/samba/provision/__init__.py #2134: No IPv6 address will be assigned ERROR(exception): uncaught exception - File [/usr/share/samba/setup/ad-schema/AD_DS_Attributes_Windows_Server_v1903.ldf] not found. Please install samba-ad-provision package ??File "/usr/lib/python3/dist-packages/samba/netcmd/__init__.py", line 285, in _run ?? ?return self.run(*args, **kwargs) ? ? ? ? ? ?^^^^^^^^^^^^^^^^^^^^^^^^^ ??File "/usr/lib/python3/dist-packages/samba/netcmd/domain/backup.py", line 261, in run ?? ?ctx = join_clone(logger=logger, creds=creds, lp=lp, ?? ? ? ? ?^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ??File "/usr/lib/python3/dist-packages/samba/join.py", line 1642, in join_clone ?? ?ctx.do_join() ??File "/usr/lib/python3/dist-packages/samba/join.py", line 1696, in do_join ?? ?ctx.join_provision() ??File "/usr/lib/python3/dist-packages/samba/join.py", line 861, in join_provision ?? ?presult = provision(ctx.logger, system_session(), smbconf=smbconf, ?? ? ? ? ? ? ?^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ??File "/usr/lib/python3/dist-packages/samba/provision/__init__.py", line 2288, in provision ?? ?schema = Schema(domainsid, invocationid=invocationid, ? ? ? ? ? ? ?^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ??File "/usr/lib/python3/dist-packages/samba/schema.py", line 119, in __init__ ?? ?setup_path('ad-schema/%s' % Schema.base_schemas[base_schema][0]), ?? ?^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ??File "/usr/lib/python3/dist-packages/samba/provision/common.py", line 44, in setup_path ?? ?raise Exception("File [%s] not found. Please install samba-ad-provision package" % path) Would that be it ? I recovered from a snapshot and it also works with samba-ad-provision LP On Jun 27, 2024 at 17:25 +0100, Rowland Penny via samba <samba at lists.samba.org>, wrote:> On Thu, 27 Jun 2024 17:12:38 +0100 > Luis Peromarta via samba <samba at lists.samba.org> wrote: > > > I can confirm that, in order to do backups from a member server, you > > need to install samba-ad-dc in the member server running > 4.20. > > > > Whilst I do have samba-ad-dc installed on my Unix domain member, I fail > to see why it would be required for 'samba-tool domain backup online' > to work. > > It contains: > > /etc/init.d/samba-ad-dc > /lib/systemd/system/samba-ad-dc.service > /usr/sbin/samba > /usr/sbin/samba_dnsupdate > /usr/sbin/samba_kcc > /usr/sbin/samba_spnupdate > /usr/sbin/samba_upgradedns > /usr/share/doc/samba-ad-dc/changelog.Debian.gz > /usr/share/doc/samba-ad-dc/copyright > /usr/share/lintian/overrides/samba-ad-dc > /usr/share/man/man8/samba.8.gz > > I cannot see anything there that appears to be relevant. > > Rowland > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba
Michael Tokarev
2024-Jun-28 05:18 UTC
[Samba] Online AD Backup fails with "no auth" in 4.20?
On 6/27/24 19:43, Luis Peromarta via samba wrote:> OK apologies, looks like I jumped the gun and installed ?samba-ad-dc? while my system wanted "samba-ad-provision? as per the error below. > > Maybe samba-ad-dc installs samba-ad-provision ? > > > ?/usr/bin/samba-tool domain backup online --targetdir=/root/samba-ad-backup-awing/ --server=awing -UAdministrator > INFO 2024-06-27 18:35:35,593 pid:2650 /usr/lib/python3/dist-packages/samba/join.py #1637: workgroup is MAD > INFO 2024-06-27 18:35:35,593 pid:2650 /usr/lib/python3/dist-packages/samba/join.py #1640: realm is mad.caponato.es > Calling bare provision > INFO 2024-06-27 18:35:35,606 pid:2650 /usr/lib/python3/dist-packages/samba/provision/__init__.py #2110: Looking up IPv4 addresses > INFO 2024-06-27 18:35:35,607 pid:2650 /usr/lib/python3/dist-packages/samba/provision/__init__.py #2127: Looking up IPv6 addresses > WARNING 2024-06-27 18:35:35,607 pid:2650 /usr/lib/python3/dist-packages/samba/provision/__init__.py #2134: No IPv6 address will be assigned > ERROR(exception): uncaught exception - File [/usr/share/samba/setup/ad-schema/AD_DS_Attributes_Windows_Server_v1903.ldf] not found. Please install samba-ad-provision packageHmm. Why it needs the ldif for `domain backup online' ? The package split in debian is my best-effort to determine what is what. But now I see it wants more seemingly-unrelated files for other parts. On the other hand, reportedly, samba-ad-provision should not ship many files used testsuite only. It would be very helpful to have some list here. Or maybe we should tweak python sources to not load things which aren't actually needed (if the're not needed ofc). Obviously I don't want this sort of things to happen. samba-ad-provision package is recommended by samba-ad-dc, but not by samba package nor by python3-samba (where samba-tool lives now). I *hoped* it isn't needed for a regular file server. On the other hand, the .ldif files is the bulk of samba-ad-provision, this was one of the main reasons I split it out. Sigh. Suggestions welcome. Thanks, /mjt -- GPG Key transition (from rsa2048 to rsa4096) since 2024-04-24. New key: rsa4096/61AD3D98ECDF2C8E 9D8B E14E 3F2A 9DD7 9199 28F1 61AD 3D98 ECDF 2C8E Old key: rsa2048/457CE0A0804465C5 6EE1 95D1 886E 8FFB 810D 4324 457C E0A0 8044 65C5 Transition statement: http://www.corpit.ru/mjt/gpg-transition-2024.txt
Matthias Kühne | Ellerhold Aktiengesellschaft
2024-Jun-28 05:22 UTC
[Samba] Online AD Backup fails with "no auth" in 4.20?
Hey Luis & Rowland, this put me on the right track. Ive never had this error (please install samba-ad-provision). First I upgraded to the newest samba version (2:4.20.2+dfsg-2~mjt-deb12 to 2:4.20.2+dfsg-4~mjt-deb12). No change. Then Ive installed samba-ad-provision. No change. Then I installed samba-dsdb-modules. Now it works!! Then I uninstalled samba-ad-provision. Now Im getting your error message ("Please install samba-ad-provision"). So from 4.20.2 onwards you need samba-ad-provision AND samba-dsdb-modules on a Debian 12 member server. 4.20.1 did not have the split I think so thats why Rowlands backup works atm. Thanks for your help!! Am 27.06.24 um 18:43 schrieb Luis Peromarta via samba:> OK apologies, looks like I jumped the gun and installed ?samba-ad-dc? while my system wanted "samba-ad-provision? as per the error below. > > Maybe samba-ad-dc installs samba-ad-provision ? > > > ?/usr/bin/samba-tool domain backup online --targetdir=/root/samba-ad-backup-awing/ --server=awing -UAdministrator > INFO 2024-06-27 18:35:35,593 pid:2650 /usr/lib/python3/dist-packages/samba/join.py #1637: workgroup is MAD > INFO 2024-06-27 18:35:35,593 pid:2650 /usr/lib/python3/dist-packages/samba/join.py #1640: realm is mad.caponato.es > Calling bare provision > INFO 2024-06-27 18:35:35,606 pid:2650 /usr/lib/python3/dist-packages/samba/provision/__init__.py #2110: Looking up IPv4 addresses > INFO 2024-06-27 18:35:35,607 pid:2650 /usr/lib/python3/dist-packages/samba/provision/__init__.py #2127: Looking up IPv6 addresses > WARNING 2024-06-27 18:35:35,607 pid:2650 /usr/lib/python3/dist-packages/samba/provision/__init__.py #2134: No IPv6 address will be assigned > ERROR(exception): uncaught exception - File [/usr/share/samba/setup/ad-schema/AD_DS_Attributes_Windows_Server_v1903.ldf] not found. Please install samba-ad-provision package > ??File "/usr/lib/python3/dist-packages/samba/netcmd/__init__.py", line 285, in _run > ?? ?return self.run(*args, **kwargs) > ? ? ? ? ? ?^^^^^^^^^^^^^^^^^^^^^^^^^ > ??File "/usr/lib/python3/dist-packages/samba/netcmd/domain/backup.py", line 261, in run > ?? ?ctx = join_clone(logger=logger, creds=creds, lp=lp, > ?? ? ? ? ?^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > ??File "/usr/lib/python3/dist-packages/samba/join.py", line 1642, in join_clone > ?? ?ctx.do_join() > ??File "/usr/lib/python3/dist-packages/samba/join.py", line 1696, in do_join > ?? ?ctx.join_provision() > ??File "/usr/lib/python3/dist-packages/samba/join.py", line 861, in join_provision > ?? ?presult = provision(ctx.logger, system_session(), smbconf=smbconf, > ?? ? ? ? ? ? ?^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > ??File "/usr/lib/python3/dist-packages/samba/provision/__init__.py", line 2288, in provision > ?? ?schema = Schema(domainsid, invocationid=invocationid, > ? ? ? ? ? ? ?^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > ??File "/usr/lib/python3/dist-packages/samba/schema.py", line 119, in __init__ > ?? ?setup_path('ad-schema/%s' % Schema.base_schemas[base_schema][0]), > ?? ?^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > ??File "/usr/lib/python3/dist-packages/samba/provision/common.py", line 44, in setup_path > ?? ?raise Exception("File [%s] not found. Please install samba-ad-provision package" % path) > > Would that be it ? > > I recovered from a snapshot and it also works with samba-ad-provision > > LP > On Jun 27, 2024 at 17:25 +0100, Rowland Penny via samba <samba at lists.samba.org>, wrote: >> On Thu, 27 Jun 2024 17:12:38 +0100 >> Luis Peromarta via samba <samba at lists.samba.org> wrote: >> >>> I can confirm that, in order to do backups from a member server, you >>> need to install samba-ad-dc in the member server running > 4.20. >>> >> Whilst I do have samba-ad-dc installed on my Unix domain member, I fail >> to see why it would be required for 'samba-tool domain backup online' >> to work. >> >> It contains: >> >> /etc/init.d/samba-ad-dc >> /lib/systemd/system/samba-ad-dc.service >> /usr/sbin/samba >> /usr/sbin/samba_dnsupdate >> /usr/sbin/samba_kcc >> /usr/sbin/samba_spnupdate >> /usr/sbin/samba_upgradedns >> /usr/share/doc/samba-ad-dc/changelog.Debian.gz >> /usr/share/doc/samba-ad-dc/copyright >> /usr/share/lintian/overrides/samba-ad-dc >> /usr/share/man/man8/samba.8.gz >> >> I cannot see anything there that appears to be relevant. >> >> Rowland >> >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba-- Senior Webentwickler Datenschutzbeauftragter Ellerhold Aktiengesellschaft Friedrich-List-Str. 4 01445 Radebeul Telefon: +49 (0) 351 83933-61 Web: www.ellerhold.de Facebook: www.facebook.com/ellerhold.gruppe Instagram: www.instagram.com/ellerhold.gruppe LinkedIn: www.linkedin.com/company/ellerhold-gruppe Amtsgericht Dresden / HRB 23769 Vorstand: Stephan Ellerhold, Maximilian Ellerhold Vorsitzender des Aufsichtsrates: Frank Ellerhold ---Diese E-Mail und Ihre Anlagen enthalten vertrauliche Mitteilungen. Sollten Sie nicht der beabsichtigte Adressat sein, so bitten wir Sie um Mitteilung und um sofortiges l?schen dieser E-Mail und der Anlagen. Unsere Hinweise zum Datenschutz finden Sie hier: http://www.ellerhold.de/datenschutz/ This e-mail and its attachments are privileged and confidential. If you are not the intended recipient, please notify us and immediately delete this e-mail and its attachments. You can find our privacy policy here: http://www.ellerhold.de/datenschutz/