Matthias Kühne | Ellerhold Aktiengesellschaft
2024-Jun-28 05:22 UTC
[Samba] Online AD Backup fails with "no auth" in 4.20?
Hey Luis & Rowland, this put me on the right track. Ive never had this error (please install samba-ad-provision). First I upgraded to the newest samba version (2:4.20.2+dfsg-2~mjt-deb12 to 2:4.20.2+dfsg-4~mjt-deb12). No change. Then Ive installed samba-ad-provision. No change. Then I installed samba-dsdb-modules. Now it works!! Then I uninstalled samba-ad-provision. Now Im getting your error message ("Please install samba-ad-provision"). So from 4.20.2 onwards you need samba-ad-provision AND samba-dsdb-modules on a Debian 12 member server. 4.20.1 did not have the split I think so thats why Rowlands backup works atm. Thanks for your help!! Am 27.06.24 um 18:43 schrieb Luis Peromarta via samba:> OK apologies, looks like I jumped the gun and installed ?samba-ad-dc? while my system wanted "samba-ad-provision? as per the error below. > > Maybe samba-ad-dc installs samba-ad-provision ? > > > ?/usr/bin/samba-tool domain backup online --targetdir=/root/samba-ad-backup-awing/ --server=awing -UAdministrator > INFO 2024-06-27 18:35:35,593 pid:2650 /usr/lib/python3/dist-packages/samba/join.py #1637: workgroup is MAD > INFO 2024-06-27 18:35:35,593 pid:2650 /usr/lib/python3/dist-packages/samba/join.py #1640: realm is mad.caponato.es > Calling bare provision > INFO 2024-06-27 18:35:35,606 pid:2650 /usr/lib/python3/dist-packages/samba/provision/__init__.py #2110: Looking up IPv4 addresses > INFO 2024-06-27 18:35:35,607 pid:2650 /usr/lib/python3/dist-packages/samba/provision/__init__.py #2127: Looking up IPv6 addresses > WARNING 2024-06-27 18:35:35,607 pid:2650 /usr/lib/python3/dist-packages/samba/provision/__init__.py #2134: No IPv6 address will be assigned > ERROR(exception): uncaught exception - File [/usr/share/samba/setup/ad-schema/AD_DS_Attributes_Windows_Server_v1903.ldf] not found. Please install samba-ad-provision package > ??File "/usr/lib/python3/dist-packages/samba/netcmd/__init__.py", line 285, in _run > ?? ?return self.run(*args, **kwargs) > ? ? ? ? ? ?^^^^^^^^^^^^^^^^^^^^^^^^^ > ??File "/usr/lib/python3/dist-packages/samba/netcmd/domain/backup.py", line 261, in run > ?? ?ctx = join_clone(logger=logger, creds=creds, lp=lp, > ?? ? ? ? ?^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > ??File "/usr/lib/python3/dist-packages/samba/join.py", line 1642, in join_clone > ?? ?ctx.do_join() > ??File "/usr/lib/python3/dist-packages/samba/join.py", line 1696, in do_join > ?? ?ctx.join_provision() > ??File "/usr/lib/python3/dist-packages/samba/join.py", line 861, in join_provision > ?? ?presult = provision(ctx.logger, system_session(), smbconf=smbconf, > ?? ? ? ? ? ? ?^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > ??File "/usr/lib/python3/dist-packages/samba/provision/__init__.py", line 2288, in provision > ?? ?schema = Schema(domainsid, invocationid=invocationid, > ? ? ? ? ? ? ?^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > ??File "/usr/lib/python3/dist-packages/samba/schema.py", line 119, in __init__ > ?? ?setup_path('ad-schema/%s' % Schema.base_schemas[base_schema][0]), > ?? ?^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > ??File "/usr/lib/python3/dist-packages/samba/provision/common.py", line 44, in setup_path > ?? ?raise Exception("File [%s] not found. Please install samba-ad-provision package" % path) > > Would that be it ? > > I recovered from a snapshot and it also works with samba-ad-provision > > LP > On Jun 27, 2024 at 17:25 +0100, Rowland Penny via samba <samba at lists.samba.org>, wrote: >> On Thu, 27 Jun 2024 17:12:38 +0100 >> Luis Peromarta via samba <samba at lists.samba.org> wrote: >> >>> I can confirm that, in order to do backups from a member server, you >>> need to install samba-ad-dc in the member server running > 4.20. >>> >> Whilst I do have samba-ad-dc installed on my Unix domain member, I fail >> to see why it would be required for 'samba-tool domain backup online' >> to work. >> >> It contains: >> >> /etc/init.d/samba-ad-dc >> /lib/systemd/system/samba-ad-dc.service >> /usr/sbin/samba >> /usr/sbin/samba_dnsupdate >> /usr/sbin/samba_kcc >> /usr/sbin/samba_spnupdate >> /usr/sbin/samba_upgradedns >> /usr/share/doc/samba-ad-dc/changelog.Debian.gz >> /usr/share/doc/samba-ad-dc/copyright >> /usr/share/lintian/overrides/samba-ad-dc >> /usr/share/man/man8/samba.8.gz >> >> I cannot see anything there that appears to be relevant. >> >> Rowland >> >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba-- Senior Webentwickler Datenschutzbeauftragter Ellerhold Aktiengesellschaft Friedrich-List-Str. 4 01445 Radebeul Telefon: +49 (0) 351 83933-61 Web: www.ellerhold.de Facebook: www.facebook.com/ellerhold.gruppe Instagram: www.instagram.com/ellerhold.gruppe LinkedIn: www.linkedin.com/company/ellerhold-gruppe Amtsgericht Dresden / HRB 23769 Vorstand: Stephan Ellerhold, Maximilian Ellerhold Vorsitzender des Aufsichtsrates: Frank Ellerhold ---Diese E-Mail und Ihre Anlagen enthalten vertrauliche Mitteilungen. Sollten Sie nicht der beabsichtigte Adressat sein, so bitten wir Sie um Mitteilung und um sofortiges l?schen dieser E-Mail und der Anlagen. Unsere Hinweise zum Datenschutz finden Sie hier: http://www.ellerhold.de/datenschutz/ This e-mail and its attachments are privileged and confidential. If you are not the intended recipient, please notify us and immediately delete this e-mail and its attachments. You can find our privacy policy here: http://www.ellerhold.de/datenschutz/
Michael Tokarev
2024-Jun-28 05:31 UTC
[Samba] Online AD Backup fails with "no auth" in 4.20?
On 6/28/24 08:22, Matthias K?hne | Ellerhold Aktiengesellschaft via samba wrote:> Hey Luis & Rowland, > > this put me on the right track. Ive never had this error (please install > samba-ad-provision). > > First I upgraded to the newest samba version (2:4.20.2+dfsg-2~mjt-deb12 > to 2:4.20.2+dfsg-4~mjt-deb12). No change. > > Then Ive installed samba-ad-provision. No change. > > Then I installed samba-dsdb-modules. Now it works!! > > Then I uninstalled samba-ad-provision. Now Im getting your error message > ("Please install samba-ad-provision"). > > So from 4.20.2 onwards you need samba-ad-provision AND > samba-dsdb-modules on a Debian 12 member server. > > 4.20.1 did not have the split I think so thats why Rowlands backup works > atm.4.20.1 in debian (and hence on my repository) has exactly the same samba-dsdb-modules and samba-ad-provision packages as current 4.20.2. dsdb-modules has been separate package for many years. samba-ad-provision created in 4.17.3+dfsg-4, it's been quite some time too. The only noticeable recent change was the move of some stuff from samba to samba-ad-dc (dc-only-related) or to python3-samba (samba-tool) in 4.20.1+dfsg-2 which is the version Rowland seems to be using too. So I'm a bit confused here. *Especially* the order of installation you mentioned - it should not matter at all. I'll take a closer look what's going on here. On the other hand, I dodn't expect domain-level operations to work on a regular member server, to begin with. Thanks, /mjt -- GPG Key transition (from rsa2048 to rsa4096) since 2024-04-24. New key: rsa4096/61AD3D98ECDF2C8E 9D8B E14E 3F2A 9DD7 9199 28F1 61AD 3D98 ECDF 2C8E Old key: rsa2048/457CE0A0804465C5 6EE1 95D1 886E 8FFB 810D 4324 457C E0A0 8044 65C5 Transition statement: http://www.corpit.ru/mjt/gpg-transition-2024.txt