samba - Mar 2019 - samba 4.9.5 - joining Samba DC to existing Samba AD failed (ldbsearch has not -U and -V)

On Wed, 27 Mar 2019 13:00:42 +0100
Franta Hanzlík <franta at hanzlici.cz> wrote:
> Yes, is no difference between '-UAdministrator' and '-U
> Administrator'. But it seems, as ldbsearch in 4.9.5 is different than
> 4.9.4-. (I was furious with that, because I found lot articles on
> net, where -U _username_ was stated.
> 
> My ldbsearch is from pure Samba-4.9.5, self compiled on Fedora 29
> x86_64. And now I see it even has not '-V' switch:
> 
> [root at dc1 bind-dns]# ldbsearch --usage
> Usage: [-?viraS] [-?|--help] [--usage] [-H|--url=URL]
> [-b|--basedn=DN] [-e|--editor=PROGRAM] [-s|--scope=SCOPE]
> [-v|--verbose] [--trace] [-i|--interactive] [-r|--recursive]
> [--modules-path=PATH] [--num-searches=INT] [--num-records=INT]
> [-a|--all] [--nosync] [-S|--sorted] [-o=OPTION] [--controls=STRING]
> [--show-binary] [--paged] [--show-deleted] [--show-recycled]
> [--show-deactivated-link] [--reveal] [--relax] [--cross-ncs]
> [--extended-dn] [root at dc1 bind-dns]# ldbsearch -V Invalid option -V:
> unknown option Usage: ldbsearch <options> <expression>
<attrs...>
> Usage: [OPTION...] -H, --url=URL                   database URL -b,
> --basedn=DN                 base DN -e, --editor=PROGRAM
> external editor -s, --scope=SCOPE               search scope -v,
> --verbose                   increase verbosity
> --trace                     enable tracing -i,
> --interactive               input from stdin -r,
> --recursive                 recursive delete
> --modules-path=PATH         modules path --num-searches=INT
> number of test searches --num-records=INT           number of test
> records -a, --all
> (|(objectClass=*)(distinguishedName=*)) --nosync
> non-synchronous transactions -S, --sorted                    sort
> attributes -o=OPTION                       ldb_connect option
>       --controls=STRING           controls
>       --show-binary               display binary LDIF
>       --paged                     use a paged search
>       --show-deleted              show deleted objects
>       --show-recycled             show recycled objects
>       --show-deactivated-link     show deactivated links
>       --reveal                    reveal ldb internals
>       --relax                     pass relax control
>       --cross-ncs                 search across NC boundaries
>       --extended-dn               show extended DNs
> 
> Help options:
>   -?, --help                      Show this help message
>       --usage                     Display brief usage message
How did you compile Samba ?

You seem to have lost a lot of the options :-)

on Debian 4.9.5, you get this:

ldbsearch --usage
Usage: [-?viraSNPeV] [-?|--help] [--usage] [-H|--url=URL] [-b|--basedn=DN]
        [-e|--editor=PROGRAM] [-s|--scope=SCOPE] [-v|--verbose] [--trace]
        [-i|--interactive] [-r|--recursive] [--modules-path=PATH]
        [--num-searches=INT] [--num-records=INT] [-a|--all] [--nosync]
        [-S|--sorted] [-o=OPTION] [--controls=STRING] [--show-binary]
        [--paged] [--show-deleted] [--show-recycled]
        [--show-deactivated-link] [--reveal] [--relax] [--cross-ncs]
        [--extended-dn] [-d|--debuglevel=DEBUGLEVEL] [--debug-stderr]
        [-s|--configfile=CONFIGFILE] [--option=name=value]
        [-l|--log-basename=LOGFILEBASE] [--leak-report] [--leak-report-full]
        [-U|--user=[DOMAIN/]USERNAME[%PASSWORD]] [-N|--no-pass]
        [--password=STRING] [-A|--authentication-file=FILE]
        [-P|--machine-pass] [--simple-bind-dn=STRING] [-k|--kerberos=STRING]
        [--krb5-ccache=STRING] [-S|--sign] [-e|--encrypt]
        [-R|--name-resolve=NAME-RESOLVE-ORDER]
        [-O|--socket-options=SOCKETOPTIONS] [-n|--netbiosname=NETBIOSNAME]
        [-S|--signing=on|off|required] [-W|--workgroup=WORKGROUP]
        [--realm=REALM] [-i|--scope=SCOPE] [-m|--maxprotocol=MAXPROTOCOL]
        [-V|--version]

It looks like you have lost these:

Usage: [-NPeV]         
        [--reveal] [--relax] [--cross-ncs]
        [--extended-dn] [-d|--debuglevel=DEBUGLEVEL] [--debug-stderr]
        [-s|--configfile=CONFIGFILE] [--option=name=value]
        [-l|--log-basename=LOGFILEBASE] [--leak-report] [--leak-report-full]
        [-U|--user=[DOMAIN/]USERNAME[%PASSWORD]] [-N|--no-pass]
        [--password=STRING] [-A|--authentication-file=FILE]
        [-P|--machine-pass] [--simple-bind-dn=STRING] [-k|--kerberos=STRING]
        [--krb5-ccache=STRING] [-S|--sign] [-e|--encrypt]
        [-R|--name-resolve=NAME-RESOLVE-ORDER]
        [-O|--socket-options=SOCKETOPTIONS] [-n|--netbiosname=NETBIOSNAME]
        [-S|--signing=on|off|required] [-W|--workgroup=WORKGROUP]
        [--realm=REALM] [-i|--scope=SCOPE] [-m|--maxprotocol=MAXPROTOCOL]
        [-V|--version]

Rowland

On Wed, 27 Mar 2019 13:11:08 +0000
Rowland Penny via samba <samba at lists.samba.org> wrote:
> On Wed, 27 Mar 2019 13:00:42 +0100
> Franta Hanzlík <franta at hanzlici.cz> wrote:
> 
> > Yes, is no difference between '-UAdministrator' and '-U
> > Administrator'. But it seems, as ldbsearch in 4.9.5 is different
than
> > 4.9.4-. (I was furious with that, because I found lot articles on
> > net, where -U _username_ was stated.
> > 
> > My ldbsearch is from pure Samba-4.9.5, self compiled on Fedora 29
> > x86_64. And now I see it even has not '-V' switch:
> > 
> > [root at dc1 bind-dns]# ldbsearch --usage
> > Usage: [-?viraS] [-?|--help] [--usage] [-H|--url=URL]
> > [-b|--basedn=DN] [-e|--editor=PROGRAM] [-s|--scope=SCOPE]
> > [-v|--verbose] [--trace] [-i|--interactive] [-r|--recursive]
> > [--modules-path=PATH] [--num-searches=INT] [--num-records=INT]
> > [-a|--all] [--nosync] [-S|--sorted] [-o=OPTION] [--controls=STRING]
> > [--show-binary] [--paged] [--show-deleted] [--show-recycled]
> > [--show-deactivated-link] [--reveal] [--relax] [--cross-ncs]
> > [--extended-dn] [root at dc1 bind-dns]# ldbsearch -V Invalid option
-V:
> > unknown option Usage: ldbsearch <options> <expression>
<attrs...>
> > Usage: [OPTION...] -H, --url=URL                   database URL -b,
> > --basedn=DN                 base DN -e, --editor=PROGRAM
> > external editor -s, --scope=SCOPE               search scope -v,
> > --verbose                   increase verbosity
> > --trace                     enable tracing -i,
> > --interactive               input from stdin -r,
> > --recursive                 recursive delete
> > --modules-path=PATH         modules path --num-searches=INT
> > number of test searches --num-records=INT           number of test
> > records -a, --all
> > (|(objectClass=*)(distinguishedName=*)) --nosync
> > non-synchronous transactions -S, --sorted                    sort
> > attributes -o=OPTION                       ldb_connect option
> >       --controls=STRING           controls
> >       --show-binary               display binary LDIF
> >       --paged                     use a paged search
> >       --show-deleted              show deleted objects
> >       --show-recycled             show recycled objects
> >       --show-deactivated-link     show deactivated links
> >       --reveal                    reveal ldb internals
> >       --relax                     pass relax control
> >       --cross-ncs                 search across NC boundaries
> >       --extended-dn               show extended DNs
> > 
> > Help options:
> >   -?, --help                      Show this help message
> >       --usage                     Display brief usage message  
> 
> How did you compile Samba ?
> 
> You seem to have lost a lot of the options :-)
> 
> on Debian 4.9.5, you get this:
> 
> ldbsearch --usage
> Usage: [-?viraSNPeV] [-?|--help] [--usage] [-H|--url=URL] [-b|--basedn=DN]
>         [-e|--editor=PROGRAM] [-s|--scope=SCOPE] [-v|--verbose] [--trace]
>         [-i|--interactive] [-r|--recursive] [--modules-path=PATH]
>         [--num-searches=INT] [--num-records=INT] [-a|--all] [--nosync]
>         [-S|--sorted] [-o=OPTION] [--controls=STRING] [--show-binary]
>         [--paged] [--show-deleted] [--show-recycled]
>         [--show-deactivated-link] [--reveal] [--relax] [--cross-ncs]
>         [--extended-dn] [-d|--debuglevel=DEBUGLEVEL] [--debug-stderr]
>         [-s|--configfile=CONFIGFILE] [--option=name=value]
>         [-l|--log-basename=LOGFILEBASE] [--leak-report]
[--leak-report-full]
>         [-U|--user=[DOMAIN/]USERNAME[%PASSWORD]] [-N|--no-pass]
>         [--password=STRING] [-A|--authentication-file=FILE]
>         [-P|--machine-pass] [--simple-bind-dn=STRING]
[-k|--kerberos=STRING]
>         [--krb5-ccache=STRING] [-S|--sign] [-e|--encrypt]
>         [-R|--name-resolve=NAME-RESOLVE-ORDER]
>         [-O|--socket-options=SOCKETOPTIONS] [-n|--netbiosname=NETBIOSNAME]
>         [-S|--signing=on|off|required] [-W|--workgroup=WORKGROUP]
>         [--realm=REALM] [-i|--scope=SCOPE] [-m|--maxprotocol=MAXPROTOCOL]
>         [-V|--version]
> 
> It looks like you have lost these:
> 
> Usage: [-NPeV]         
>         [--reveal] [--relax] [--cross-ncs]
>         [--extended-dn] [-d|--debuglevel=DEBUGLEVEL] [--debug-stderr]
>         [-s|--configfile=CONFIGFILE] [--option=name=value]
>         [-l|--log-basename=LOGFILEBASE] [--leak-report]
[--leak-report-full]
>         [-U|--user=[DOMAIN/]USERNAME[%PASSWORD]] [-N|--no-pass]
>         [--password=STRING] [-A|--authentication-file=FILE]
>         [-P|--machine-pass] [--simple-bind-dn=STRING]
[-k|--kerberos=STRING]
>         [--krb5-ccache=STRING] [-S|--sign] [-e|--encrypt]
>         [-R|--name-resolve=NAME-RESOLVE-ORDER]
>         [-O|--socket-options=SOCKETOPTIONS] [-n|--netbiosname=NETBIOSNAME]
>         [-S|--signing=on|off|required] [-W|--workgroup=WORKGROUP]
>         [--realm=REALM] [-i|--scope=SCOPE] [-m|--maxprotocol=MAXPROTOCOL]
>         [-V|--version]
> 
> Rowland
My ldbsearch binary is linked with:

[root at dc1 etc]# ldd /usr/bin/ldbsearch
        linux-vdso.so.1 (0x00007ffc5877c000)
        libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f9a790b4000)
        libldb.so.1 => /lib64/libldb.so.1 (0x00007f9a7907f000)
        libldb-cmdline.so => /usr/lib64/ldb/libldb-cmdline.so
(0x00007f9a79077000)
        libtdb.so.1 => /lib64/libtdb.so.1 (0x00007f9a7905e000)
        libcrypt.so.1 => /lib64/libcrypt.so.1 (0x00007f9a79022000)
        libtevent.so.0 => /lib64/libtevent.so.0 (0x00007f9a7900d000)
        libtalloc.so.2 => /lib64/libtalloc.so.2 (0x00007f9a78ff5000)
        libdl.so.2 => /lib64/libdl.so.2 (0x00007f9a78fef000)
        libpopt.so.0 => /lib64/libpopt.so.0 (0x00007f9a78fe1000)
        libc.so.6 => /lib64/libc.so.6 (0x00007f9a78e1b000)
        /lib64/ld-linux-x86-64.so.2 (0x00007f9a790ea000)

I have no idea, where options like '-V' could have been lost...
-- 
Franta Hanzlik

On Wed, Mar 27, 2019 at 9:11 AM Rowland Penny via samba
<samba at lists.samba.org> wrote:
>
> On Wed, 27 Mar 2019 13:00:42 +0100
> Franta Hanzlík <franta at hanzlici.cz> wrote:
>
> > Yes, is no difference between '-UAdministrator' and '-U
> > Administrator'. But it seems, as ldbsearch in 4.9.5 is different
than
> > 4.9.4-. (I was furious with that, because I found lot articles on
> > net, where -U _username_ was stated.
> >
> > My ldbsearch is from pure Samba-4.9.5, self compiled on Fedora 29
> > x86_64. And now I see it even has not '-V' switch:
Franta, if you're trying to build on Fedora 29, would you consider
trying my "master" branch of https://github.com/nkadel/samba4repo ?
I've been trying to update it to 4.9.5, and a separate branch for
4.10.0, with Fedora 29 and the RHEL 8 beta lately. The Python3
requirements of 4.10.0 are a serious problem for RHEL 7, but there are
othe issues for Fedora for that even more recent release.

Also, unless you actually build and install RPM's a manual build is
vulnerable to all sorts of PATH and LD_LIBRARY_PATH issues if any if
the original RPM's are sstill present on Fedora and RHEL.

On Wed, 27 Mar 2019 13:11:08 +0000
Rowland Penny via samba <samba at lists.samba.org> wrote:
> On Wed, 27 Mar 2019 13:00:42 +0100
> Franta Hanzlík <franta at hanzlici.cz> wrote:
> 
> > Yes, is no difference between '-UAdministrator' and '-U
> > Administrator'. But it seems, as ldbsearch in 4.9.5 is different
than
> > 4.9.4-. (I was furious with that, because I found lot articles on
> > net, where -U _username_ was stated.
> > 
> > My ldbsearch is from pure Samba-4.9.5, self compiled on Fedora 29
> > x86_64. And now I see it even has not '-V' switch:
> > 
> > [root at dc1 bind-dns]# ldbsearch --usage
> > Usage: [-?viraS] [-?|--help] [--usage] [-H|--url=URL]
> > [-b|--basedn=DN] [-e|--editor=PROGRAM] [-s|--scope=SCOPE]
> > [-v|--verbose] [--trace] [-i|--interactive] [-r|--recursive]
> > [--modules-path=PATH] [--num-searches=INT] [--num-records=INT]
> > [-a|--all] [--nosync] [-S|--sorted] [-o=OPTION] [--controls=STRING]
> > [--show-binary] [--paged] [--show-deleted] [--show-recycled]
> > [--show-deactivated-link] [--reveal] [--relax] [--cross-ncs]
> > [--extended-dn] [root at dc1 bind-dns]# ldbsearch -V Invalid option
-V:
> > unknown option Usage: ldbsearch <options> <expression>
<attrs...>
> > Usage: [OPTION...] -H, --url=URL                   database URL -b,
> > --basedn=DN                 base DN -e, --editor=PROGRAM
> > external editor -s, --scope=SCOPE               search scope -v,
> > --verbose                   increase verbosity
> > --trace                     enable tracing -i,
> > --interactive               input from stdin -r,
> > --recursive                 recursive delete
> > --modules-path=PATH         modules path --num-searches=INT
> > number of test searches --num-records=INT           number of test
> > records -a, --all
> > (|(objectClass=*)(distinguishedName=*)) --nosync
> > non-synchronous transactions -S, --sorted                    sort
> > attributes -o=OPTION                       ldb_connect option
> >       --controls=STRING           controls
> >       --show-binary               display binary LDIF
> >       --paged                     use a paged search
> >       --show-deleted              show deleted objects
> >       --show-recycled             show recycled objects
> >       --show-deactivated-link     show deactivated links
> >       --reveal                    reveal ldb internals
> >       --relax                     pass relax control
> >       --cross-ncs                 search across NC boundaries
> >       --extended-dn               show extended DNs
> > 
> > Help options:
> >   -?, --help                      Show this help message
> >       --usage                     Display brief usage message  
> 
> How did you compile Samba ?
> 
> You seem to have lost a lot of the options :-)
> 
> on Debian 4.9.5, you get this:
> 
> ldbsearch --usage
> Usage: [-?viraSNPeV] [-?|--help] [--usage] [-H|--url=URL] [-b|--basedn=DN]
>         [-e|--editor=PROGRAM] [-s|--scope=SCOPE] [-v|--verbose] [--trace]
>         [-i|--interactive] [-r|--recursive] [--modules-path=PATH]
>         [--num-searches=INT] [--num-records=INT] [-a|--all] [--nosync]
>         [-S|--sorted] [-o=OPTION] [--controls=STRING] [--show-binary]
>         [--paged] [--show-deleted] [--show-recycled]
>         [--show-deactivated-link] [--reveal] [--relax] [--cross-ncs]
>         [--extended-dn] [-d|--debuglevel=DEBUGLEVEL] [--debug-stderr]
>         [-s|--configfile=CONFIGFILE] [--option=name=value]
>         [-l|--log-basename=LOGFILEBASE] [--leak-report]
[--leak-report-full]
>         [-U|--user=[DOMAIN/]USERNAME[%PASSWORD]] [-N|--no-pass]
>         [--password=STRING] [-A|--authentication-file=FILE]
>         [-P|--machine-pass] [--simple-bind-dn=STRING]
[-k|--kerberos=STRING]
>         [--krb5-ccache=STRING] [-S|--sign] [-e|--encrypt]
>         [-R|--name-resolve=NAME-RESOLVE-ORDER]
>         [-O|--socket-options=SOCKETOPTIONS] [-n|--netbiosname=NETBIOSNAME]
>         [-S|--signing=on|off|required] [-W|--workgroup=WORKGROUP]
>         [--realm=REALM] [-i|--scope=SCOPE] [-m|--maxprotocol=MAXPROTOCOL]
>         [-V|--version]
> 
> It looks like you have lost these:
> 
> Usage: [-NPeV]         
>         [--reveal] [--relax] [--cross-ncs]
>         [--extended-dn] [-d|--debuglevel=DEBUGLEVEL] [--debug-stderr]
>         [-s|--configfile=CONFIGFILE] [--option=name=value]
>         [-l|--log-basename=LOGFILEBASE] [--leak-report]
[--leak-report-full]
>         [-U|--user=[DOMAIN/]USERNAME[%PASSWORD]] [-N|--no-pass]
>         [--password=STRING] [-A|--authentication-file=FILE]
>         [-P|--machine-pass] [--simple-bind-dn=STRING]
[-k|--kerberos=STRING]
>         [--krb5-ccache=STRING] [-S|--sign] [-e|--encrypt]
>         [-R|--name-resolve=NAME-RESOLVE-ORDER]
>         [-O|--socket-options=SOCKETOPTIONS] [-n|--netbiosname=NETBIOSNAME]
>         [-S|--signing=on|off|required] [-W|--workgroup=WORKGROUP]
>         [--realm=REALM] [-i|--scope=SCOPE] [-m|--maxprotocol=MAXPROTOCOL]
>         [-V|--version]
> 
> Rowland
Hi Rowland,
I was looking into Samba-4.9.5 sources (as they are on URL
https://download.samba.org/pub/samba/stable/samba-4.9.5.tar.gz
) and (but I'm not programmer) it seems to me, as my ldbsearch (and other
ldb-utils) behaves according them. So it may be that version in Debian
is somehow modified, extended by remote LDB file access, etc.
-- 
With regards
Franta Hanzlik

On Fri, 29 Mar 2019 09:28:37 +0100
Franta Hanzlík <franta at hanzlici.cz> wrote:
> On Wed, 27 Mar 2019 13:11:08 +0000
> Rowland Penny via samba <samba at lists.samba.org> wrote:
> 
> > On Wed, 27 Mar 2019 13:00:42 +0100
> > Franta Hanzlík <franta at hanzlici.cz> wrote:
> >   
> > > Yes, is no difference between '-UAdministrator' and
'-U
> > > Administrator'. But it seems, as ldbsearch in 4.9.5 is
different
> > > than 4.9.4-. (I was furious with that, because I found lot
> > > articles on net, where -U _username_ was stated.
> > > 
> > > My ldbsearch is from pure Samba-4.9.5, self compiled on Fedora 29
> > > x86_64. And now I see it even has not '-V' switch:
> > > 
> > > [root at dc1 bind-dns]# ldbsearch --usage
> > > Usage: [-?viraS] [-?|--help] [--usage] [-H|--url=URL]
> > > [-b|--basedn=DN] [-e|--editor=PROGRAM] [-s|--scope=SCOPE]
> > > [-v|--verbose] [--trace] [-i|--interactive] [-r|--recursive]
> > > [--modules-path=PATH] [--num-searches=INT] [--num-records=INT]
> > > [-a|--all] [--nosync] [-S|--sorted] [-o=OPTION]
> > > [--controls=STRING] [--show-binary] [--paged] [--show-deleted]
> > > [--show-recycled] [--show-deactivated-link] [--reveal] [--relax]
> > > [--cross-ncs] [--extended-dn] [root at dc1 bind-dns]# ldbsearch
-V
> > > Invalid option -V: unknown option Usage: ldbsearch
<options>
> > > <expression> <attrs...> Usage: [OPTION...] -H,
> > > --url=URL                   database URL -b,
> > > --basedn=DN                 base DN -e, --editor=PROGRAM external
> > > editor -s, --scope=SCOPE               search scope -v,
> > > --verbose                   increase verbosity
> > > --trace                     enable tracing -i,
> > > --interactive               input from stdin -r,
> > > --recursive                 recursive delete
> > > --modules-path=PATH         modules path --num-searches=INT
> > > number of test searches --num-records=INT           number of
> > > test records -a, --all (|(objectClass=*)(distinguishedName=*))
> > > --nosync non-synchronous transactions -S,
> > > --sorted                    sort attributes
> > > -o=OPTION                       ldb_connect option
> > > --controls=STRING           controls --show-binary
> > > display binary LDIF --paged                     use a paged
search
> > >       --show-deleted              show deleted objects
> > >       --show-recycled             show recycled objects
> > >       --show-deactivated-link     show deactivated links
> > >       --reveal                    reveal ldb internals
> > >       --relax                     pass relax control
> > >       --cross-ncs                 search across NC boundaries
> > >       --extended-dn               show extended DNs
> > > 
> > > Help options:
> > >   -?, --help                      Show this help message
> > >       --usage                     Display brief usage message    
> > 
> > How did you compile Samba ?
> > 
> > You seem to have lost a lot of the options :-)
> > 
> > on Debian 4.9.5, you get this:
> > 
> > ldbsearch --usage
> > Usage: [-?viraSNPeV] [-?|--help] [--usage] [-H|--url=URL]
> > [-b|--basedn=DN] [-e|--editor=PROGRAM] [-s|--scope=SCOPE]
> > [-v|--verbose] [--trace] [-i|--interactive] [-r|--recursive]
> > [--modules-path=PATH] [--num-searches=INT] [--num-records=INT]
> > [-a|--all] [--nosync] [-S|--sorted] [-o=OPTION] [--controls=STRING]
> > [--show-binary] [--paged] [--show-deleted] [--show-recycled]
> >         [--show-deactivated-link] [--reveal] [--relax] [--cross-ncs]
> >         [--extended-dn] [-d|--debuglevel=DEBUGLEVEL]
> > [--debug-stderr] [-s|--configfile=CONFIGFILE] [--option=name=value]
> >         [-l|--log-basename=LOGFILEBASE] [--leak-report]
> > [--leak-report-full] [-U|--user=[DOMAIN/]USERNAME[%PASSWORD]]
> > [-N|--no-pass] [--password=STRING] [-A|--authentication-file=FILE]
> >         [-P|--machine-pass] [--simple-bind-dn=STRING]
> > [-k|--kerberos=STRING] [--krb5-ccache=STRING] [-S|--sign]
> > [-e|--encrypt] [-R|--name-resolve=NAME-RESOLVE-ORDER]
> >         [-O|--socket-options=SOCKETOPTIONS]
> > [-n|--netbiosname=NETBIOSNAME] [-S|--signing=on|off|required]
> > [-W|--workgroup=WORKGROUP] [--realm=REALM] [-i|--scope=SCOPE]
> > [-m|--maxprotocol=MAXPROTOCOL] [-V|--version]
> > 
> > It looks like you have lost these:
> > 
> > Usage: [-NPeV]         
> >         [--reveal] [--relax] [--cross-ncs]
> >         [--extended-dn] [-d|--debuglevel=DEBUGLEVEL]
> > [--debug-stderr] [-s|--configfile=CONFIGFILE] [--option=name=value]
> >         [-l|--log-basename=LOGFILEBASE] [--leak-report]
> > [--leak-report-full] [-U|--user=[DOMAIN/]USERNAME[%PASSWORD]]
> > [-N|--no-pass] [--password=STRING] [-A|--authentication-file=FILE]
> >         [-P|--machine-pass] [--simple-bind-dn=STRING]
> > [-k|--kerberos=STRING] [--krb5-ccache=STRING] [-S|--sign]
> > [-e|--encrypt] [-R|--name-resolve=NAME-RESOLVE-ORDER]
> >         [-O|--socket-options=SOCKETOPTIONS]
> > [-n|--netbiosname=NETBIOSNAME] [-S|--signing=on|off|required]
> > [-W|--workgroup=WORKGROUP] [--realm=REALM] [-i|--scope=SCOPE]
> > [-m|--maxprotocol=MAXPROTOCOL] [-V|--version]
> > 
> > Rowland  
> 
> Hi Rowland,
> I was looking into Samba-4.9.5 sources (as they are on URL
> https://download.samba.org/pub/samba/stable/samba-4.9.5.tar.gz
> ) and (but I'm not programmer) it seems to me, as my ldbsearch (and
> other ldb-utils) behaves according them. So it may be that version in
> Debian is somehow modified, extended by remote LDB file access, etc.
This is possible, but it is more likely that they are throttled on
red-hat distro's because they are not expected to be provisioned as a
DC.

I did some checking and I have a couple of extra libs linked to
ldbsearch:

libtdb.so.1 => /lib64/libtdb.so.1 (0x00007f9a7905e000)
libcrypt.so.1 => /lib64/libcrypt.so.1 (0x00007f9a79022000)

Can you post the configure options used to compile your Samba packages.

Rowland

On Thu, 28 Mar 2019 02:14:30 -0400
Nico Kadel-Garcia via samba <samba at lists.samba.org> wrote:
> On Wed, Mar 27, 2019 at 9:11 AM Rowland Penny via samba
> <samba at lists.samba.org> wrote:
> >
> > On Wed, 27 Mar 2019 13:00:42 +0100
> > Franta Hanzlík <franta at hanzlici.cz> wrote:
> >  
> > > Yes, is no difference between '-UAdministrator' and
'-U
> > > Administrator'. But it seems, as ldbsearch in 4.9.5 is
different than
> > > 4.9.4-. (I was furious with that, because I found lot articles on
> > > net, where -U _username_ was stated.
> > >
> > > My ldbsearch is from pure Samba-4.9.5, self compiled on Fedora 29
> > > x86_64. And now I see it even has not '-V' switch:  
> 
> Franta, if you're trying to build on Fedora 29, would you consider
> trying my "master" branch of https://github.com/nkadel/samba4repo
?
> I've been trying to update it to 4.9.5, and a separate branch for
> 4.10.0, with Fedora 29 and the RHEL 8 beta lately. The Python3
> requirements of 4.10.0 are a serious problem for RHEL 7, but there are
> othe issues for Fedora for that even more recent release.
> 
> Also, unless you actually build and install RPM's a manual build is
> vulnerable to all sorts of PATH and LD_LIBRARY_PATH issues if any if
> the original RPM's are sstill present on Fedora and RHEL.
Hi Nico,

thanks you for sending a link to your github repo and you work on
Samba for Fedora/Centos/RHEL.
I made my Samba4 RPM packages with .SPEC file from official Fedora 29
4.9.4 source RPM, which I modify for Heimdal Kerberos (as I wanted
reliable  SW, and I have no needs for MIT Kerberos, SSS, systemd,
journald,... ;).
Fortunately there was not too much to change and Samba sources was not
extra patched, thus it was relatively easy.
Installation on Centos 7 I excluded because its obsolescence.
Two weeks ago I, now with minimal changes, build 4.9.5 RPM packages
and upgrade to them. Version 4.10.0 I still not tried, maybe further
test I will do during the summer holidays (it is school network).
I will look at your Samba repo too, thanks.
-- 
Regards, Franta Hanzlik