samba - Jul 2019 - Can't find machine account

On 07/18/2019 10:20 AM, Rowland penny via samba wrote:
> I think this could be one of your problems, not entirely sure, but I 
> think the minimum function level reliably required is 2003, you may 
> have to remove that fileserver.
No joy.? I was able to demote that file server using: samba-tool domain 
demote -Uadministrator

And then I promoted the DC to Server 2003 level.? But attempting to join 
the new samba DC failed with the same error:

Adding DNS A record ATHENA.edm-inc.com for IPv4 IP: 10.10.1.10
Join failed - cleaning up
ldb_wrap open of secrets.ldb
Could not find machine account in secrets database: Failed to fetch 
machine account password for EDM from both secrets.ldb (Could not find 
entry to match filter:
'(&(flatname=EDM)(objectclass=primaryDomain))'
base: 'cn=Primary Domains': No such object: dsdb_search at 
../source4/dsdb/common/util.c:4705) and from 
/var/lib/samba/private/secrets.tdb: NT_STATUS_CANT_ACCESS_DOMAIN_INFO
Deleted CN=RID Set,CN=ATHENA,OU=Domain Controllers,DC=edm-inc,DC=com
Deleted CN=ATHENA,OU=Domain Controllers,DC=edm-inc,DC=com
Deleted CN=NTDS 
Settings,CN=ATHENA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=edm-inc,DC=com
Deleted 
CN=ATHENA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=edm-inc,DC=com
ERROR(runtime): uncaught exception - (9003, 
'WERR_DNS_ERROR_RCODE_NAME_ERROR')
 ? File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", 
line 177, in _run
 ??? return self.run(*args, **kwargs)
 ? File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain.py",
line
716, in run
 ??? backend_store=backend_store)
 ? File "/usr/lib/python2.7/dist-packages/samba/join.py", line 1501,
in
join_DC
 ??? ctx.do_join()
 ? File "/usr/lib/python2.7/dist-packages/samba/join.py", line 1406,
in
do_join
 ??? ctx.join_add_dns_records()
 ? File "/usr/lib/python2.7/dist-packages/samba/join.py", line 1143,
in
join_add_dns_records
 ??? dns_partition=domaindns_zone_dn)
 ? File "/usr/lib/python2.7/dist-packages/samba/samdb.py", line 1057,
in
dns_lookup
 ??? dns_partition=dns_partition)


-- 
Bob Wooldridge
EDM Incorporated

On 18/07/2019 16:31, Robert A Wooldridge via samba
wrote:
> On 07/18/2019 10:20 AM, Rowland penny via samba wrote:
>> I think this could be one of your problems, not entirely sure, but I 
>> think the minimum function level reliably required is 2003, you may 
>> have to remove that fileserver.
> No joy.? I was able to demote that file server using: samba-tool 
> domain demote -Uadministrator
>
> And then I promoted the DC to Server 2003 level.? But attempting to 
> join the new samba DC failed with the same error:
>
> Adding DNS A record ATHENA.edm-inc.com for IPv4 IP: 10.10.1.10
> Join failed - cleaning up
Anything from here on is nothing to do with your problem, it? is just 
artefacts of the clean up.

It seems to be failing whilst trying to add the 'A' record for your new
DC.

Lets backtrack a little, I asked if the Windows DC was running a dns 
server and you answered 'yes'. Lets expand that a little, what dns 
server is running and where does it store the dns records ?

Rowland

On 07/18/2019 10:41 AM, Rowland penny via samba wrote:
>
> Anything from here on is nothing to do with your problem, it? is just 
> artefacts of the clean up.
>
> It seems to be failing whilst trying to add the 'A' record for your
> new DC.
>
> Lets backtrack a little, I asked if the Windows DC was running a dns 
> server and you answered 'yes'. Lets expand that a little, what dns 
> server is running and where does it store the dns records ?
The one that comes with windows.? You manage it from the dnsmgmt console.

-- 
Bob Wooldridge
EDM Incorporated

On 07/18/2019 10:41 AM, Rowland penny via samba wrote:
>
> Anything from here on is nothing to do with your problem, it? is just 
> artefacts of the clean up.
>
> It seems to be failing whilst trying to add the 'A' record for your
> new DC.
I have an A record for that machine already in the DNS record.? I tried 
removing it and then joining but it threw the same error.


-- 
Bob Wooldridge
EDM Incorporated