samba - Nov 2017 - Can't join, error: Not removing account DC2$ which looks like a Samba DC account maching...

hello,

In a test environment I set up two DCs.

DC1.sandom.teste.com
DC2.sandom.teste.com

All tests requested by the wiki were done and all ok.

I tried to join a Samba DC to an existing Active Directory, but after it
requests the password, the following error occurs.

root at dc2 # samba-tool domain join sandom.teste.com DC
-U"SERTAO\administrator" --dns-backend=BIND9_DLZ
--option='idmap_ldb:use
rfc2307 = yes'


ERROR(<class 'samba.join.DCJoinException'>): *uncaught exception -
Can't
join, error: Not removing account DC2$ which looks like a Samba DC account
maching the password we already have.  To override, remove secrets.ldb and
secrets.tdb*
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py",
line
176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain.py", line
661,
in run
    machinepass=machinepass, use_ntvfs=use_ntvfs, dns_backend=dns_backend)
  File "/usr/lib/python2.7/dist-packages/samba/join.py", line 1474, in
join_DC
    ctx.do_join()
  File "/usr/lib/python2.7/dist-packages/samba/join.py", line 1371, in
do_join
    ctx.cleanup_old_join()
  File "/usr/lib/python2.7/dist-packages/samba/join.py", line 270, in
cleanup_old_join
    ctx.cleanup_old_accounts(force=force)
  File "/usr/lib/python2.7/dist-packages/samba/join.py", line 239, in
cleanup_old_accounts
    % ctx.samname)

Any idea?

-- 
Elias Pereira

On Mon, 20 Nov 2017 17:08:46 -0200
Elias Pereira via samba <samba at lists.samba.org> wrote:
> hello,
> 
> In a test environment I set up two DCs.
> 
> DC1.sandom.teste.com
> DC2.sandom.teste.com
> 
> All tests requested by the wiki were done and all ok.
> 
> I tried to join a Samba DC to an existing Active Directory, but after
> it requests the password, the following error occurs.
Not sure I understand you correctly, did you setup two servers,
provision one as a DC, then try to join the second server as a DC and
then you got the error ?
Or did you do something else ?

Rowland

Hello Rowland, thanks for the answer!! :)

Not sure I understand you correctly, did you setup two
servers,
> provision one as a DC, then try to join the second server as a DC and
> then you got the error ?

No. I have provisioned them both. Then I realized that dc2 should not be
provisioned.

I re-did the initial settings and now could join.

Sorry about the inconvenience, Rowland! :)

On Mon, Nov 20, 2017 at 7:04 PM, Rowland Penny <rpenny at samba.org>
wrote:
> On Mon, 20 Nov 2017 17:08:46 -0200
> Elias Pereira via samba <samba at lists.samba.org> wrote:
>
> > hello,
> >
> > In a test environment I set up two DCs.
> >
> > DC1.sandom.teste.com
> > DC2.sandom.teste.com
> >
> > All tests requested by the wiki were done and all ok.
> >
> > I tried to join a Samba DC to an existing Active Directory, but after
> > it requests the password, the following error occurs.
>
> Not sure I understand you correctly, did you setup two servers,
> provision one as a DC, then try to join the second server as a DC and
> then you got the error ?
> Or did you do something else ?
>
> Rowland
>
>

-- 
Elias Pereira