Matthias Kühne | Ellerhold Aktiengesellschaft
2024-Jun-28 05:22 UTC
[Samba] Online AD Backup fails with "no auth" in 4.20?
Hey Luis & Rowland,
this put me on the right track. Ive never had this error (please install
samba-ad-provision).
First I upgraded to the newest samba version (2:4.20.2+dfsg-2~mjt-deb12
to 2:4.20.2+dfsg-4~mjt-deb12). No change.
Then Ive installed samba-ad-provision. No change.
Then I installed samba-dsdb-modules. Now it works!!
Then I uninstalled samba-ad-provision. Now Im getting your error message
("Please install samba-ad-provision").
So from 4.20.2 onwards you need samba-ad-provision AND
samba-dsdb-modules on a Debian 12 member server.
4.20.1 did not have the split I think so thats why Rowlands backup works
atm.
Thanks for your help!!
Am 27.06.24 um 18:43 schrieb Luis Peromarta via samba:> OK apologies, looks like I jumped the gun and installed ?samba-ad-dc? while
my system wanted "samba-ad-provision? as per the error below.
>
> Maybe samba-ad-dc installs samba-ad-provision ?
>
>
> ?/usr/bin/samba-tool domain backup online
--targetdir=/root/samba-ad-backup-awing/ --server=awing -UAdministrator
> INFO 2024-06-27 18:35:35,593 pid:2650
/usr/lib/python3/dist-packages/samba/join.py #1637: workgroup is MAD
> INFO 2024-06-27 18:35:35,593 pid:2650
/usr/lib/python3/dist-packages/samba/join.py #1640: realm is mad.caponato.es
> Calling bare provision
> INFO 2024-06-27 18:35:35,606 pid:2650
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2110: Looking up
IPv4 addresses
> INFO 2024-06-27 18:35:35,607 pid:2650
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2127: Looking up
IPv6 addresses
> WARNING 2024-06-27 18:35:35,607 pid:2650
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2134: No IPv6
address will be assigned
> ERROR(exception): uncaught exception - File
[/usr/share/samba/setup/ad-schema/AD_DS_Attributes_Windows_Server_v1903.ldf] not
found. Please install samba-ad-provision package
> ??File
"/usr/lib/python3/dist-packages/samba/netcmd/__init__.py", line 285,
in _run
> ?? ?return self.run(*args, **kwargs)
> ? ? ? ? ? ?^^^^^^^^^^^^^^^^^^^^^^^^^
> ??File
"/usr/lib/python3/dist-packages/samba/netcmd/domain/backup.py", line
261, in run
> ?? ?ctx = join_clone(logger=logger, creds=creds, lp=lp,
> ?? ? ? ? ?^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> ??File "/usr/lib/python3/dist-packages/samba/join.py", line
1642, in join_clone
> ?? ?ctx.do_join()
> ??File "/usr/lib/python3/dist-packages/samba/join.py", line
1696, in do_join
> ?? ?ctx.join_provision()
> ??File "/usr/lib/python3/dist-packages/samba/join.py", line 861,
in join_provision
> ?? ?presult = provision(ctx.logger, system_session(), smbconf=smbconf,
> ?? ? ? ? ? ? ?^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> ??File
"/usr/lib/python3/dist-packages/samba/provision/__init__.py", line
2288, in provision
> ?? ?schema = Schema(domainsid, invocationid=invocationid,
> ? ? ? ? ? ? ?^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> ??File "/usr/lib/python3/dist-packages/samba/schema.py", line
119, in __init__
> ?? ?setup_path('ad-schema/%s' %
Schema.base_schemas[base_schema][0]),
> ?? ?^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> ??File
"/usr/lib/python3/dist-packages/samba/provision/common.py", line 44,
in setup_path
> ?? ?raise Exception("File [%s] not found. Please install
samba-ad-provision package" % path)
>
> Would that be it ?
>
> I recovered from a snapshot and it also works with samba-ad-provision
>
> LP
> On Jun 27, 2024 at 17:25 +0100, Rowland Penny via samba <samba at
lists.samba.org>, wrote:
>> On Thu, 27 Jun 2024 17:12:38 +0100
>> Luis Peromarta via samba <samba at lists.samba.org> wrote:
>>
>>> I can confirm that, in order to do backups from a member server,
you
>>> need to install samba-ad-dc in the member server running > 4.20.
>>>
>> Whilst I do have samba-ad-dc installed on my Unix domain member, I fail
>> to see why it would be required for 'samba-tool domain backup
online'
>> to work.
>>
>> It contains:
>>
>> /etc/init.d/samba-ad-dc
>> /lib/systemd/system/samba-ad-dc.service
>> /usr/sbin/samba
>> /usr/sbin/samba_dnsupdate
>> /usr/sbin/samba_kcc
>> /usr/sbin/samba_spnupdate
>> /usr/sbin/samba_upgradedns
>> /usr/share/doc/samba-ad-dc/changelog.Debian.gz
>> /usr/share/doc/samba-ad-dc/copyright
>> /usr/share/lintian/overrides/samba-ad-dc
>> /usr/share/man/man8/samba.8.gz
>>
>> I cannot see anything there that appears to be relevant.
>>
>> Rowland
>>
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions: https://lists.samba.org/mailman/options/samba
--
Senior Webentwickler
Datenschutzbeauftragter
Ellerhold Aktiengesellschaft
Friedrich-List-Str. 4
01445 Radebeul
Telefon: +49 (0) 351 83933-61
Web: www.ellerhold.de
Facebook: www.facebook.com/ellerhold.gruppe
Instagram: www.instagram.com/ellerhold.gruppe
LinkedIn: www.linkedin.com/company/ellerhold-gruppe
Amtsgericht Dresden / HRB 23769
Vorstand: Stephan Ellerhold, Maximilian Ellerhold
Vorsitzender des Aufsichtsrates: Frank Ellerhold
---Diese E-Mail und Ihre Anlagen enthalten vertrauliche Mitteilungen. Sollten
Sie nicht der beabsichtigte Adressat sein, so bitten wir Sie um Mitteilung und
um sofortiges l?schen dieser E-Mail und der Anlagen.
Unsere Hinweise zum Datenschutz finden Sie hier:
http://www.ellerhold.de/datenschutz/
This e-mail and its attachments are privileged and confidential. If you are not
the intended recipient, please notify us and immediately delete this e-mail and
its attachments.
You can find our privacy policy here: http://www.ellerhold.de/datenschutz/
Michael Tokarev
2024-Jun-28 05:31 UTC
[Samba] Online AD Backup fails with "no auth" in 4.20?
On 6/28/24 08:22, Matthias K?hne | Ellerhold Aktiengesellschaft via samba wrote:> Hey Luis & Rowland, > > this put me on the right track. Ive never had this error (please install > samba-ad-provision). > > First I upgraded to the newest samba version (2:4.20.2+dfsg-2~mjt-deb12 > to 2:4.20.2+dfsg-4~mjt-deb12). No change. > > Then Ive installed samba-ad-provision. No change. > > Then I installed samba-dsdb-modules. Now it works!! > > Then I uninstalled samba-ad-provision. Now Im getting your error message > ("Please install samba-ad-provision"). > > So from 4.20.2 onwards you need samba-ad-provision AND > samba-dsdb-modules on a Debian 12 member server. > > 4.20.1 did not have the split I think so thats why Rowlands backup works > atm.4.20.1 in debian (and hence on my repository) has exactly the same samba-dsdb-modules and samba-ad-provision packages as current 4.20.2. dsdb-modules has been separate package for many years. samba-ad-provision created in 4.17.3+dfsg-4, it's been quite some time too. The only noticeable recent change was the move of some stuff from samba to samba-ad-dc (dc-only-related) or to python3-samba (samba-tool) in 4.20.1+dfsg-2 which is the version Rowland seems to be using too. So I'm a bit confused here. *Especially* the order of installation you mentioned - it should not matter at all. I'll take a closer look what's going on here. On the other hand, I dodn't expect domain-level operations to work on a regular member server, to begin with. Thanks, /mjt -- GPG Key transition (from rsa2048 to rsa4096) since 2024-04-24. New key: rsa4096/61AD3D98ECDF2C8E 9D8B E14E 3F2A 9DD7 9199 28F1 61AD 3D98 ECDF 2C8E Old key: rsa2048/457CE0A0804465C5 6EE1 95D1 886E 8FFB 810D 4324 457C E0A0 8044 65C5 Transition statement: http://www.corpit.ru/mjt/gpg-transition-2024.txt