lol...sorry!
- The windows domain controller does run a DNS server
- I joined the samba DC's to the windows DC. I used the normal command,
but did get an error about the forest and domain dns. The error is:
descriptor_sd_propagation_recursive:
DC=DomainDnsZones,DC=fisherthompson,DC=local not found under
DC=fisherthompson,DC=local
descriptor_sd_propagation_recursive:
DC=ForestDnsZones,DC=fisherthompson,DC=local not found under
DC=fisherthompson,DC=local
Below is the full join output.....
START OF DOMAIN JOIN
*************************************
root at DC01:/var/lib/samba# samba-tool domain join fisherthompson.local DC
-UAdministrator
Finding a writeable DC for domain 'fisherthompson.local'
Found DC PDC.fisherthompson.local
Password for [FISHERTHOMPSON\Administrator]:
workgroup is FISHERTHOMPSON
realm is fisherthompson.local
checking sAMAccountName
Adding CN=DC01,OU=Domain Controllers,DC=fisherthompson,DC=local
Adding
CN=DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=fisherthompson,DC=local
Adding CN=NTDS
Settings,CN=DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=fisherthompson,DC=local
Adding SPNs to CN=DC01,OU=Domain Controllers,DC=fisherthompson,DC=local
Setting account password for DC01$
Enabling account
Calling bare provision
Looking up IPv4 addresses
Looking up IPv6 addresses
No IPv6 address will be assigned
Setting up share.ldb
Setting up secrets.ldb
Setting up the registry
Setting up the privileges database
Setting up idmap db
Setting up SAM db
Setting up sam.ldb partitions and settings
Setting up sam.ldb rootDSE
Pre-loading the Samba 4 and AD schema
A Kerberos configuration suitable for Samba 4 has been generated at
/var/lib/samba/private/krb5.conf
Provision OK for domain DN DC=fisherthompson,DC=local
Starting replication
Schema-DN[CN=Schema,CN=Configuration,DC=fisherthompson,DC=local]
objects[402] linked_values[0]
Schema-DN[CN=Schema,CN=Configuration,DC=fisherthompson,DC=local]
objects[804] linked_values[0]
Schema-DN[CN=Schema,CN=Configuration,DC=fisherthompson,DC=local]
objects[1206] linked_values[0]
Schema-DN[CN=Schema,CN=Configuration,DC=fisherthompson,DC=local]
objects[1376] linked_values[0]
Analyze and apply schema objects
Partition[CN=Configuration,DC=fisherthompson,DC=local] objects[402]
linked_values[0]
Partition[CN=Configuration,DC=fisherthompson,DC=local] objects[804]
linked_values[0]
Partition[CN=Configuration,DC=fisherthompson,DC=local] objects[1206]
linked_values[0]
Partition[CN=Configuration,DC=fisherthompson,DC=local] objects[1608]
linked_values[18]
Partition[CN=Configuration,DC=fisherthompson,DC=local] objects[1629]
linked_values[10]
Replicating critical objects from the base DN of the domain
Partition[DC=fisherthompson,DC=local] objects[93] linked_values[7]
Partition[DC=fisherthompson,DC=local] objects[387] linked_values[0]
Partition[DC=fisherthompson,DC=local] objects[569] linked_values[175]
Partition[DC=fisherthompson,DC=local] objects[741] linked_values[36]
Partition[DC=fisherthompson,DC=local] objects[741] linked_values[0]
Done with always replicated NC (base, config, schema)
Replicating DC=DomainDnsZones,DC=fisherthompson,DC=local
Partition[DC=DomainDnsZones,DC=fisherthompson,DC=local] objects[191]
linked_values[0]
Replicating DC=ForestDnsZones,DC=fisherthompson,DC=local
Partition[DC=ForestDnsZones,DC=fisherthompson,DC=local] objects[33]
linked_values[0]
Committing SAM database
descriptor_sd_propagation_recursive:
DC=DomainDnsZones,DC=fisherthompson,DC=local not found under
DC=fisherthompson,DC=local
descriptor_sd_propagation_recursive:
DC=ForestDnsZones,DC=fisherthompson,DC=local not found under
DC=fisherthompson,DC=local
Sending DsReplicaUpdateRefs for all the replicated partitions
Setting isSynchronized and dsServiceName
Setting up secrets database
Joined domain FISHERTHOMPSON (SID
S-1-5-21-4059926353-2957580592-3733343930) as a DC
*************************************
END OF DOMAIN JOIN
On Thu, Jun 23, 2016 at 1:43 PM, Rowland penny <rpenny at samba.org>
wrote:
> On 23/06/16 17:49, Jason Waters wrote:
>
>> I did not get SUCCESS!
>>
>> root at DC01:/mnt# samba-tool ldapcmp ldap://dc01 ldap://pdc dnsdomain
>>
>> * Comparing [DNSDOMAIN] context...
>>
>> * Objects to be compared: 188
>>
>> Comparing:
>>
'CN=Infrastructure,DC=DomainDnsZones,DC=fisherthompson,DC=local'
>> [ldap://dc01]
>>
'CN=Infrastructure,DC=DomainDnsZones,DC=fisherthompson,DC=local'
>> [ldap://pdc]
>> Attributes found only in ldap://dc01:
>> fSMORoleOwner
>> Difference in attribute values:
>> whenChanged =>
>> ['20160622133653.0Z']
>> ['20160621205006.0Z']
>> FAILED
>>
>> Comparing:
>> 'CN=MicrosoftDNS,DC=DomainDnsZones,DC=fisherthompson,DC=local'
>> [ldap://dc01]
>> 'CN=MicrosoftDNS,DC=DomainDnsZones,DC=fisherthompson,DC=local'
>> [ldap://pdc]
>> Attributes found only in ldap://dc01:
>> distinguishedName
>> cn
>> objectCategory
>> objectClass
>> objectGUID
>> showInAdvancedViewOnly
>> whenCreated
>> whenChanged
>> instanceType
>> name
>> FAILED
>>
>> * Result for [DNSDOMAIN]: FAILURE
>>
>> SUMMARY
>> ---------
>>
>> Attributes found only in ldap://dc01:
>>
>> distinguishedName
>> cn
>> objectCategory
>> objectClass
>> fSMORoleOwner
>> objectGUID
>> showInAdvancedViewOnly
>> whenCreated
>> whenChanged
>> instanceType
>> name
>>
>> Attributes with different values:
>>
>> whenChanged
>> ERROR: Compare failed: -1
>>
>>
>> On Thu, Jun 23, 2016 at 12:38 PM, Rowland penny <rpenny at samba.org
>> <mailto:rpenny at samba.org>> wrote:
>>
>> On 23/06/16 16:32, Jason Waters wrote:
>>
>> This is what it returned.
>>
>> root at DC01:/mnt# ldbsearch --cross-ncs -H
>> /var/lib/samba/private/sam.ldb -b
>>
"CN=Infrastructure,DC=DomainDnsZones,DC=fisherthompson,DC=local"
>> -s base fsmoroleowner
>> # record 1
>> dn:
CN=Infrastructure,DC=DomainDnsZones,DC=fisherthompson,DC=local
>> fSMORoleOwner: CN=NTDS
>> Settings,CN=PDC,CN=Servers,CN=Default-First-Site-Name,C
>> N=Sites,CN=Configuration,DC=fisherthompson,DC=local
>>
>> # returned 1 records
>> # 1 entries
>> # 0 referrals
>>
>>
>> Looks right, right? It almost seems like it is trying to
>> delete it from the Windows 2003 machine, but can't. So I
ran
>> NetDOM /query FSMO on the windows 2003 server and got this.
>>
>> Schema owner PDC.fisherthompson.local
>> Domain role owner PDC.fisherthompson.local
>> PDC role PDC.fisherthompson.local
>> RID pool manager PDC.fisherthompson.local
>> Infrastructure owner PDC.fisherthompson.local
>> The command completed successfully.
>>
>> So no DomainDNS or ForestDNS present.
>>
>>
>>
>> Unfortunately that doesn't mean anything, the windows tools
only
>> seem to known about the five main FSMO roles (as did samba-tool up
>> until 4.3.0)
>>
>> Try this command, it should end with the word 'SUCCESS'
>>
>> samba-tool ldapcmp ldap://dc01 ldap://pdc dnsdomain
>>
>> Does the windows DC run a DNS server ?
>>
>>
>> Rowland
>>
>> -- To unsubscribe from this list go to the following URL and
read
>> the
>> instructions: https://lists.samba.org/mailman/options/samba
>>
>>
>>
> That sort of means you don't have dns zones on your windows DC, or at
> least full ones.
>
> Does your windows DC run a DNS server ??
>
> How did you join the Samba DCs to the windows DC, or was it the opposite
> way round, you joined the windows one to the Samba DCs, if so how.
>
> I feel another possible re-write of fsmo.py coming on :-(
>
>
> Rowland
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
>