thr3ads.net - samba - [Samba] Samba4 LDAP issues [Jan 2015]

If this information is useful, please help other people find it:
Share via:

Gilbert Gutierrez

2015-Jan-21 18:16 UTC

[Samba] Samba4 LDAP issues

I cannot add users to my server and after going through many google 
searches and trying several things here is an issue I have found at 
minimum a LDAP issue when comparing my primary and secondary domain 
controllers. I do not know how to repair it and that is why I am 
contacting the list. Below is the output of the comparison.

Master: 4.2.0pre1-GIT-58865d9
Slave:  4.2.0pre1-GIT-815bde2

Thank you,
Gilbert


[root at sdc ~]# /usr/local/samba/bin/samba-tool ldapcmp ldap://pdc 
ldap://sdc domain

* Comparing [DOMAIN] context...

* DN lists have different size: 226 != 230
     CN=ASUS-LAPTOP,CN=Computers,DC=phxinternet,DC=lcl
     CN=SCREAMER,CN=Computers,DC=phxinternet,DC=lcl
     CN=STARSCREAM,CN=Computers,DC=phxinternet,DC=lcl
     CN=dns-SDC,CN=Users,DC=phxinternet,DC=lcl

* Objects to be compared: 226

Comparing:
'CN=Agency Account,CN=Users,DC=phxinternet,DC=lcl' [ldap://pdc]
'CN=Agency Account,CN=Users,DC=phxinternet,DC=lcl' [ldap://sdc]
     Difference in attribute values:
         pwdLastSet =>
['0']
['130621210880000000']
     FAILED

Comparing:
'CN=Builtin,DC=phxinternet,DC=lcl' [ldap://pdc]
'CN=Builtin,DC=phxinternet,DC=lcl' [ldap://sdc]
     Attributes found only in ldap://pdc:
         serverState
     FAILED

Comparing:
'CN=Doris Akey,CN=Users,DC=phxinternet,DC=lcl' [ldap://pdc]
'CN=Doris Akey,CN=Users,DC=phxinternet,DC=lcl' [ldap://sdc]
     Difference in attribute values:
         pwdLastSet =>
['130625516480000000']
['130625412300000000']
     FAILED

Comparing:
'CN=Ray Esquivel,CN=Users,DC=phxinternet,DC=lcl' [ldap://pdc]
'CN=Ray Esquivel,CN=Users,DC=phxinternet,DC=lcl' [ldap://sdc]
     Difference in attribute values:
         pwdLastSet =>
['0']
['130661621840000000']
     FAILED

Comparing:
'CN=SDC,OU=Domain Controllers,DC=phxinternet,DC=lcl' [ldap://pdc]
'CN=SDC,OU=Domain Controllers,DC=phxinternet,DC=lcl' [ldap://sdc]
     Difference in attribute values:
         servicePrincipalName =>
['E3514235-4B06-11D1-AB04-00C04FC2DCD2/09f3b5dc-46f8-49ef-b636-6b8b8a9ec34c/phxinternet.lcl',
'GC/SDC.phxinternet.lcl/phxinternet.lcl', 'HOST/SDC', 
'HOST/SDC.phxinternet.lcl']
['E3514235-4B06-11D1-AB04-00C04FC2DCD2/09f3b5dc-46f8-49ef-b636-6b8b8a9ec34c/phxinternet.lcl',
'GC/SDC.phxinternet.lcl/phxinternet.lcl', 'HOST/SDC', 
'HOST/SDC.phxinternet.lcl',
'HOST/SDC.phxinternet.lcl/PHXINTERNET',
'HOST/SDC.phxinternet.lcl/phxinternet.lcl',
'RestrictedKrbHost/SDC',
'RestrictedKrbHost/SDC.phxinternet.lcl', 
'ldap/09f3b5dc-46f8-49ef-b636-6b8b8a9ec34c._msdcs.phxinternet.lcl', 
'ldap/SDC', 'ldap/SDC.phxinternet.lcl', 
'ldap/SDC.phxinternet.lcl/DomainDnsZones.phxinternet.lcl', 
'ldap/SDC.phxinternet.lcl/ForestDnsZones.phxinternet.lcl', 
'ldap/SDC.phxinternet.lcl/PHXINTERNET', 
'ldap/SDC.phxinternet.lcl/phxinternet.lcl']
     FAILED

Comparing:
'CN=WINDBSVR,CN=Computers,DC=phxinternet,DC=lcl' [ldap://pdc]
'CN=WINDBSVR,CN=Computers,DC=phxinternet,DC=lcl' [ldap://sdc]
     Difference in attribute values:
         pwdLastSet =>
['130524167000000000']
['130656528210000000']
     FAILED

Comparing:
'DC=phxinternet,DC=lcl' [ldap://pdc]
'DC=phxinternet,DC=lcl' [ldap://sdc]
     Attributes found only in ldap://pdc:
         serverState
         msDS-NcType
     FAILED

* Result for [DOMAIN]: FAILURE

SUMMARY
---------

Attributes found only in ldap://pdc:

     msDS-NcType
     serverState

Attributes with different values:

     servicePrincipalName
     pwdLastSet
ERROR: Compare failed: -1

Rowland Penny

2015-Jan-21 18:48 UTC

head link

[Samba] Samba4 LDAP issues

On 21/01/15 18:16, Gilbert Gutierrez wrote:> I cannot add users to my server and after going through many google 
> searches and trying several things here is an issue I have found at 
> minimum a LDAP issue when comparing my primary and secondary domain 
> controllers. I do not know how to repair it and that is why I am 
> contacting the list. Below is the output of the comparison.
>
> Master: 4.2.0pre1-GIT-58865d9
> Slave:  4.2.0pre1-GIT-815bde2
>
Why are you using Samba packages from git ???

Rowland

Rowland Penny

2015-Jan-21 19:31 UTC

head link

[Samba] Samba4 LDAP issues

On 21/01/15 19:18, Gilbert Gutierrez wrote:> I installed on CentOS6 and that is what the guide I used showed. At 
> the time I did it the first time, A year + ago, I did not see easy to 
> use RPM packages for it.
>
> Gilbert
>
> On 1/21/2015 11:48 AM, Rowland Penny wrote:
>> On 21/01/15 18:16, Gilbert Gutierrez wrote:
>>> I cannot add users to my server and after going through many google
>>> searches and trying several things here is an issue I have found at
>>> minimum a LDAP issue when comparing my primary and secondary domain
>>> controllers. I do not know how to repair it and that is why I am 
>>> contacting the list. Below is the output of the comparison.
>>>
>>> Master: 4.2.0pre1-GIT-58865d9
>>> Slave:  4.2.0pre1-GIT-815bde2
>>>
>>
>> Why are you using Samba packages from git ???
>>
>> Rowland
>>
>>
>
OK, try using the Sernet packages: http://enterprisesamba.com/

Failing that, download and compile the latest samba4 tarball: 
https://download.samba.org/pub/samba/stable/samba-4.1.16.tar.gz

Rowland

Gilbert Gutierrez

2015-Jan-22 00:11 UTC

head link

[Samba] Samba4 LDAP issues

I have moved to 4.1.16 on both controllers. It did not solve my issue 
(though it reduced the errors as seen in the new attached ldap 
comparison). I am still getting the error telling me to see the 
administrator when trying to add a user via the Windows Active Directory 
Users and Computers utility.

Gilbert

[root at pdc ~]# /usr/local/samba/bin/samba-tool ldapcmp ldap://pdc 
ldap://sdc domain

* Comparing [DOMAIN] context...

* Objects to be compared: 233

Comparing:
'CN=Builtin,DC=phxinternet,DC=lcl' [ldap://pdc]
'CN=Builtin,DC=phxinternet,DC=lcl' [ldap://sdc]
     Attributes found only in ldap://pdc:
         serverState
     FAILED

Comparing:
'DC=phxinternet,DC=lcl' [ldap://pdc]
'DC=phxinternet,DC=lcl' [ldap://sdc]
     Attributes found only in ldap://pdc:
         serverState
         msDS-NcType
     FAILED

* Result for [DOMAIN]: FAILURE

SUMMARY
---------

Attributes found only in ldap://pdc:

     msDS-NcType
     serverState
ERROR: Compare failed: -1


On 1/21/2015 12:31 PM, Rowland Penny wrote:> OK, try using the Sernet packages: http://enterprisesamba.com/
>
> Failing that, download and compile the latest samba4 tarball: 
> https://download.samba.org/pub/samba/stable/samba-4.1.16.tar.gz
>
> Rowland
>

Maybe Matching Threads

Search for more apparently analagous threads

samba - Jan 2015 - Samba4 LDAP issues

[Samba] Samba4 LDAP issues

[Samba] Samba4 LDAP issues

[Samba] Samba4 LDAP issues

[Samba] Samba4 LDAP issues

Maybe Matching Threads