samba - Jul 2019 - Can't find machine account

I'm trying to join as a DC using Debian Buster and samba package 
(v4.9.5) and I'm getting this error when I attempt to join:
> Could not find machine account in secrets database: Failed to fetch 
> machine account password for DOM from both secrets.ldb (Could not find 
> entry to match filter:
'(&(flatname=DOM)(objectclass=primaryDomain))'
> base: 'cn=Primary Domains': No such object: dsdb_search at 
> ../source4/dsdb/common/util.c:4705) and from 
> /var/lib/samba/private/secrets.tdb: NT_STATUS_CANT_ACCESS_DOMAIN_INFO
Any ideas on what to do?

-- 
Bob Wooldridge
EDM Incorporated

On 17/07/2019 18:23, Robert A Wooldridge via samba
wrote:
> I'm trying to join as a DC using Debian Buster and samba package 
> (v4.9.5) and I'm getting this error when I attempt to join:
>
>> Could not find machine account in secrets database: Failed to fetch 
>> machine account password for DOM from both secrets.ldb (Could not 
>> find entry to match filter: 
>> '(&(flatname=DOM)(objectclass=primaryDomain))' base:
'cn=Primary
>> Domains': No such object: dsdb_search at 
>> ../source4/dsdb/common/util.c:4705) and from 
>> /var/lib/samba/private/secrets.tdb: NT_STATUS_CANT_ACCESS_DOMAIN_INFO
>
> Any ideas on what to do?
>
Not from what you have posted ;-)

What are you trying to join to ?

Have you removed any existing smb.conf file ?

Can you post the contents of the following files:

/etc/hostname

/etc/hosts

/etc/resolv.conf

/etc/krb5.conf

Rowland

On 07/17/2019 12:48 PM, Rowland penny via samba wrote:
>
> What are you trying to join to ?
Active Directory domain, the only DC is a Server 2003 machine.
>
> Have you removed any existing smb.conf file ?
Yes
>
> Can you post the contents of the following files:
>
> /etc/hostname
athena
>
> /etc/hosts
127.0.0.1?????? localhost?????? localhost.localdomain
10.10.1.10????? athena.edm-inc.com????? athena

# The following lines are desirable for IPv6 capable hosts
::1???? localhost ip6-localhost ip6-loopback
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
>
> /etc/resolv.conf
nameserver 10.10.1.14
nameserver 10.10.1.1
search edm-inc.com
>
> /etc/krb5.conf
[libdefaults]
 ??? dns_lookup_realm = false
 ??? dns_lookup_kdc = true
 ??? default_realm = EDM-INC.COM
 ??? default_tgs_enctypes = arcfour-hmac-md5 des-cbc-crc des-cbc-md5
 ??? default_tkt_enctypes = arcfour-hmac-md5 des-cbc-crc des-cbc-md5

[realms]
 ?? EDM-INC.COM = {
 ?? kdc = ADS1.EDM-INC.COM
 ?? default_domain = EDM-INC.COM
 ?? }

[domain_realm]
 ?? .edm-inc.com = EDM-INC.COM
 ?? edm-inc.com = EDM-INC.COM


Here's the full error:

Could not find machine account in secrets database: Failed to fetch 
machine account password for EDM from both secrets.ldb (Could not find 
entry to match filter:
'(&(flatname=EDM)(objectclass=primaryDomain))'
base: 'cn=Primary Domains': No such object: dsdb_search at 
../source4/dsdb/common/util.c:4705) and from 
/var/lib/samba/private/secrets.tdb: NT_STATUS_CANT_ACCESS_DOMAIN_INFO
Deleted CN=RID Set,CN=ATHENA,OU=Domain Controllers,DC=edm-inc,DC=com
Deleted CN=ATHENA,OU=Domain Controllers,DC=edm-inc,DC=com
Deleted CN=NTDS 
Settings,CN=ATHENA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=edm-inc,DC=com
Deleted 
CN=ATHENA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=edm-inc,DC=com
ERROR(runtime): uncaught exception - (9003, 
'WERR_DNS_ERROR_RCODE_NAME_ERROR')
 ? File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", 
line 177, in _run
 ??? return self.run(*args, **kwargs)
 ? File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain.py",
line
716, in run
 ??? backend_store=backend_store)
 ? File "/usr/lib/python2.7/dist-packages/samba/join.py", line 1501,
in
join_DC
 ??? ctx.do_join()
 ? File "/usr/lib/python2.7/dist-packages/samba/join.py", line 1406,
in
do_join
 ??? ctx.join_add_dns_records()
 ? File "/usr/lib/python2.7/dist-packages/samba/join.py", line 1143,
in
join_add_dns_records
 ??? dns_partition=domaindns_zone_dn)
 ? File "/usr/lib/python2.7/dist-packages/samba/samdb.py", line 1057,
in
dns_lookup
 ??? dns_partition=dns_partition)



-- 
Bob Wooldridge
EDM Incorporated