thr3ads.net - samba - [Samba] backup AD content [Aug 2019]

If this information is useful, please help other people find it:
Share via:

Stefan G. Weichinger

2019-Aug-30 08:56 UTC

[Samba] backup AD content

I happily and trustfully use Louis' backup-script from

https://github.com/thctlo/samba4

to dump AD content via cronjob.

Is it necessary/recommended to do that on *each* samba DC? Is there
something server-specific in the dump(s) or is it enough to do that once
per domain?

thanks ...

Andrew Bartlett

2019-Aug-30 09:01 UTC

head link

[Samba] backup AD content

On Fri, 2019-08-30 at 10:56 +0200, Stefan G. Weichinger via samba
wrote:> I happily and trustfully use Louis' backup-script from
> 
> https://github.com/thctlo/samba4
> 
> to dump AD content via cronjob.
> 
> Is it necessary/recommended to do that on *each* samba DC? Is there
> something server-specific in the dump(s) or is it enough to do that
> once
> per domain?
I'm very sorry to advise that this script is not race-free in the
locking done on the AD databases, which is why we have written the
'samba-tool domain backup offline' tool which holds the correct locks.

You should only need to back up the domain on one DC as long as you are
confident the DC is correctly synchronised, including sysvol.

Andrew Bartlett

-- 
Andrew Bartlett                       https://samba.org/~abartlet/
Authentication Developer, Samba Team  https://samba.org
Samba Developer, Catalyst IT          
https://catalyst.net.nz/services/samba

Stefan G. Weichinger

2019-Aug-30 09:14 UTC

head link

[Samba] backup AD content

On 30.08.19 11:01, Andrew Bartlett wrote:> On Fri, 2019-08-30 at 10:56 +0200, Stefan G. Weichinger via samba
> wrote:
>> I happily and trustfully use Louis' backup-script from
>>
>> https://github.com/thctlo/samba4
>>
>> to dump AD content via cronjob.
>>
>> Is it necessary/recommended to do that on *each* samba DC? Is there
>> something server-specific in the dump(s) or is it enough to do that
>> once
>> per domain?
> 
> I'm very sorry to advise that this script is not race-free in the
> locking done on the AD databases, which is why we have written the
> 'samba-tool domain backup offline' tool which holds the correct
locks.
Thanks for the info, I will write another cronjob using that tool.
> You should only need to back up the domain on one DC as long as you are
> confident the DC is correctly synchronised, including sysvol.
Ok, fine. IMO I would set that up on the DC holding the FSMO roles?

L.P.H. van Belle

2019-Aug-30 09:18 UTC

head link

[Samba] backup AD content

Hai Guys, 

In addition to Andrews comment. 

It might be handy to tell also about the versions.. 
samba-tool domain backup command as of samba 4.9+  ( except not the offline
command )
samba-tool domain backup offline as of samba 4.10+ 

That script is not adjusted for that yet but that is coming soon. 

Greetz, 

Louis

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Andrew Bartlett via samba
> Verzonden: vrijdag 30 augustus 2019 11:02
> Aan: Stefan G. Weichinger; samba
> Onderwerp: Re: [Samba] backup AD content
> 
> On Fri, 2019-08-30 at 10:56 +0200, Stefan G. Weichinger via samba
> wrote:
> > I happily and trustfully use Louis' backup-script from
> > 
> > https://github.com/thctlo/samba4
> > 
> > to dump AD content via cronjob.
> > 
> > Is it necessary/recommended to do that on *each* samba DC? Is there
> > something server-specific in the dump(s) or is it enough to do that
> > once
> > per domain?
> 
> I'm very sorry to advise that this script is not race-free in the
> locking done on the AD databases, which is why we have written the
> 'samba-tool domain backup offline' tool which holds the correct
locks.
> 
> You should only need to back up the domain on one DC as long 
> as you are
> confident the DC is correctly synchronised, including sysvol.
> 
> Andrew Bartlett
> 
> -- 
> Andrew Bartlett                       https://samba.org/~abartlet/
> Authentication Developer, Samba Team  https://samba.org
> Samba Developer, Catalyst IT          
> https://catalyst.net.nz/services/samba
> 
> 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>

Stefan G. Weichinger

2019-Aug-30 09:31 UTC

head link

[Samba] backup AD content

On 30.08.19 11:18, L.P.H. van Belle via samba wrote:> Hai Guys, 
> 
> In addition to Andrews comment. 
> 
> It might be handy to tell also about the versions.. 
> samba-tool domain backup command as of samba 4.9+  ( except not the offline
command )
> samba-tool domain backup offline as of samba 4.10+ 
> 
> That script is not adjusted for that yet but that is coming soon. 
in this case we're on 4.9+

4.9.12 ... only one fileserver on 4.9.11 ... will be upgraded later today

Anyone with a complete example for the cronjob maybe? ;-)

thx

Stefan G. Weichinger

2019-Aug-30 13:52 UTC

head link

[Samba] backup AD content

On 30.08.19 11:01, Andrew Bartlett wrote:
> I'm very sorry to advise that this script is not race-free in the
> locking done on the AD databases, which is why we have written the
> 'samba-tool domain backup offline' tool which holds the correct
locks.
> 
> You should only need to back up the domain on one DC as long as you are
> confident the DC is correctly synchronised, including sysvol.
I tried that offline backup now, and as it throws an exception at the
end I'd like to share the output for your check if that is still OK (I'd
like backups and programs in general to run without errors ...)


->



root at adc1:~# samba-tool domain backup online --targetdir=/root/dc_backup
--server=adc1 -UAdministrator
GENSEC backend 'gssapi_spnego' registered
GENSEC backend 'gssapi_krb5' registered
GENSEC backend 'gssapi_krb5_sasl' registered
GENSEC backend 'spnego' registered
GENSEC backend 'schannel' registered
GENSEC backend 'naclrpc_as_system' registered
GENSEC backend 'sasl-EXTERNAL' registered
GENSEC backend 'ntlmssp' registered
GENSEC backend 'ntlmssp_resume_ccache' registered
GENSEC backend 'http_basic' registered
GENSEC backend 'http_ntlm' registered
GENSEC backend 'http_negotiate' registered
GENSEC backend 'krb5' registered
GENSEC backend 'fake_gssapi_krb5' registered
resolve_lmhosts: Attempting lmhosts lookup for name adc1<0x20>
Password for [ARBEITSGRUPPE\Administrator]:
workgroup is ARBEITSGRUPPE
realm is arbeitsgruppe.mydomain.at
Calling bare provision
lpcfg_load: refreshing parameters from
/root/dc_backup/tmprncCaw/etc/smb.conf
lpcfg_load: refreshing parameters from
/root/dc_backup/tmprncCaw/etc/smb.conf
Looking up IPv4 addresses
Looking up IPv6 addresses
No IPv6 address will be assigned
Setting up share.ldb
Setting up secrets.ldb
Setting up the registry
ldb_wrap open of hklm.ldb
Key 'key=SOFTWARE,hive=NONE' not found
key added: key=SOFTWARE,hive=NONE
Key 'key=Microsoft,key=SOFTWARE,hive=NONE' not found
key added: key=Microsoft,key=SOFTWARE,hive=NONE
Key 'key=Windows NT,key=Microsoft,key=SOFTWARE,hive=NONE' not found
key added: key=Windows NT,key=Microsoft,key=SOFTWARE,hive=NONE
Key 'key=CurrentVersion,key=Windows
NT,key=Microsoft,key=SOFTWARE,hive=NONE' not found
key added: key=CurrentVersion,key=Windows
NT,key=Microsoft,key=SOFTWARE,hive=NONE
Key 'key=SYSTEM,hive=NONE' not found
key added: key=SYSTEM,hive=NONE
Key 'key=CurrentControlSet,key=SYSTEM,hive=NONE' not found
key added: key=CurrentControlSet,key=SYSTEM,hive=NONE
Key 'key=Control,key=CurrentControlSet,key=SYSTEM,hive=NONE' not found
key added: key=Control,key=CurrentControlSet,key=SYSTEM,hive=NONE
Key
'key=ProductOptions,key=Control,key=CurrentControlSet,key=SYSTEM,hive=NONE'
not found
key added:
key=ProductOptions,key=Control,key=CurrentControlSet,key=SYSTEM,hive=NONE
Key 'key=Print,key=Control,key=CurrentControlSet,key=SYSTEM,hive=NONE'
not found
key added: key=Print,key=Control,key=CurrentControlSet,key=SYSTEM,hive=NONE
Key 'key=Terminal
Server,key=Control,key=CurrentControlSet,key=SYSTEM,hive=NONE' not found
key added: key=Terminal
Server,key=Control,key=CurrentControlSet,key=SYSTEM,hive=NONE
Key 'key=Services,key=CurrentControlSet,key=SYSTEM,hive=NONE' not found
key added: key=Services,key=CurrentControlSet,key=SYSTEM,hive=NONE
Key
'key=Netlogon,key=Services,key=CurrentControlSet,key=SYSTEM,hive=NONE'
not found
key added:
key=Netlogon,key=Services,key=CurrentControlSet,key=SYSTEM,hive=NONE
Key
'key=Parameters,key=Netlogon,key=Services,key=CurrentControlSet,key=SYSTEM,hive=NONE'
not found
key added:
key=Parameters,key=Netlogon,key=Services,key=CurrentControlSet,key=SYSTEM,hive=NONE
Key
'key=Alerter,key=Services,key=CurrentControlSet,key=SYSTEM,hive=NONE'
not found
key added:
key=Alerter,key=Services,key=CurrentControlSet,key=SYSTEM,hive=NONE
Key
'key=Parameters,key=Alerter,key=Services,key=CurrentControlSet,key=SYSTEM,hive=NONE'
not found
key added:
key=Parameters,key=Alerter,key=Services,key=CurrentControlSet,key=SYSTEM,hive=NONE
Setting up the privileges database
Setting up idmap db
Setting up SAM db
Setting up sam.ldb partitions and settings
Setting up sam.ldb rootDSE
Pre-loading the Samba 4 and AD schema
partition_metadata: Migrating partition metadata: open of metadata.tdb
gave: (null)
Unable to determine the DomainSID, can not enforce uniqueness constraint
on local domainSIDs

A Kerberos configuration suitable for Samba AD has been generated at
/root/dc_backup/tmprncCaw/private/krb5.conf
Merge the contents of this file with your system krb5.conf or replace it
with this one. Do not create a symlink!
Provision OK for domain DN DC=arbeitsgruppe,DC=mydomain,DC=at
Starting replication
Using DS_BIND_GUID_W2K3
Using binding ncacn_ip_tcp:adc1[,seal]
resolve_lmhosts: Attempting lmhosts lookup for name adc1<0x20>
resolve_lmhosts: Attempting lmhosts lookup for name adc1<0x20>
Schema-DN[CN=Schema,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[402/1552] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[804/1552] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[1206/1552] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[1552/1552] linked_values[0/0]
Analyze and apply schema objects
Replicated 1552 objects (0 linked attributes) for
CN=Schema,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
Partition[CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[402/1624] linked_values[0/0]
Replicated 402 objects (0 linked attributes) for
CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
Partition[CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[804/1624] linked_values[0/0]
Replicated 402 objects (0 linked attributes) for
CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
Partition[CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[1206/1624] linked_values[0/0]
Replicated 402 objects (0 linked attributes) for
CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
Partition[CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[1609/1624] linked_values[0/9]
Replicated 403 objects (0 linked attributes) for
CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
Partition[CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[1624/1624] linked_values[28/28]
Missing target while attempting to apply records: Deleted target CN=NTDS
Settings\0ADEL:b0ca200f-4015-48e5-aa9e-2d85768ce6c2,CN=BACKUP,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
GUID b0ca200f-4015-48e5-aa9e-2d85768ce6c2 linked from
CN=ccde0790-f7cc-449e-97a5-93993d2bb083,CN=Partitions,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at

Failed to commit objects: DOS code 0x000021bf
Missing target object - retrying with DRS_GET_TGT
Partition[CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[2026/1624] linked_values[0/0]
Replicated 402 objects (0 linked attributes) for
CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
Partition[CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[2428/1624] linked_values[0/0]
Replicated 402 objects (0 linked attributes) for
CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
Partition[CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[2830/1624] linked_values[0/0]
Replicated 402 objects (0 linked attributes) for
CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
Partition[CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[3233/1624] linked_values[0/9]
Replicated 403 objects (0 linked attributes) for
CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
Partition[CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[3248/1624] linked_values[28/28]
Replicated 15 objects (28 linked attributes) for
CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
Replicating critical objects from the base DN of the domain
Partition[DC=arbeitsgruppe,DC=mydomain,DC=at] objects[97/97]
linked_values[27/27]
Replicated 97 objects (27 linked attributes) for
DC=arbeitsgruppe,DC=mydomain,DC=at
Partition[DC=arbeitsgruppe,DC=mydomain,DC=at] objects[499/477]
linked_values[0/0]
Replicated 402 objects (0 linked attributes) for
DC=arbeitsgruppe,DC=mydomain,DC=at
Partition[DC=arbeitsgruppe,DC=mydomain,DC=at] objects[574/477]
linked_values[114/114]
../ldb_tdb/ldb_index.c:2362: duplicate attribute value in
CN=ID15018,OU=IKW Computer,DC=arbeitsgruppe,DC=mydomain,DC=at for index
on servicePrincipalName, duplicate of objectGUID
fe9ad3cb-4c4d-439f-8d06-c0789101de78 in
@INDEX:SERVICEPRINCIPALNAME:WSMAN/ID15018.ARBEITSGRUPPE.mydomain.AT
../ldb_tdb/ldb_index.c:2362: duplicate attribute value in
CN=ID15018,OU=IKW Computer,DC=arbeitsgruppe,DC=mydomain,DC=at for index
on servicePrincipalName, duplicate of objectGUID
fe9ad3cb-4c4d-439f-8d06-c0789101de78 in
@INDEX:SERVICEPRINCIPALNAME:WSMAN/ID15018
../ldb_tdb/ldb_index.c:2362: duplicate attribute value in
CN=ID15018,OU=IKW Computer,DC=arbeitsgruppe,DC=mydomain,DC=at for index
on servicePrincipalName, duplicate of objectGUID
fe9ad3cb-4c4d-439f-8d06-c0789101de78 in
@INDEX:SERVICEPRINCIPALNAME:TERMSRV/ID15018.ARBEITSGRUPPE.mydomain.AT
Replicated 75 objects (114 linked attributes) for
DC=arbeitsgruppe,DC=mydomain,DC=at
Done with always replicated NC (base, config, schema)
Replicating DC=DomainDnsZones,DC=arbeitsgruppe,DC=mydomain,DC=at
Partition[DC=DomainDnsZones,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[111/111] linked_values[0/0]
Replicated 111 objects (0 linked attributes) for
DC=DomainDnsZones,DC=arbeitsgruppe,DC=mydomain,DC=at
Replicating DC=ForestDnsZones,DC=arbeitsgruppe,DC=mydomain,DC=at
Partition[DC=ForestDnsZones,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[22/22] linked_values[0/0]
Replicated 22 objects (0 linked attributes) for
DC=ForestDnsZones,DC=arbeitsgruppe,DC=mydomain,DC=at
Committing SAM database
Discarding older DRS linked attribute update to hasMasterNCs on CN=NTDS
Settings,CN=ADC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to hasMasterNCs on CN=NTDS
Settings,CN=ADC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to hasMasterNCs on CN=NTDS
Settings,CN=ADC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to msDS-HasDomainNCs on
CN=NTDS
Settings,CN=ADC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to msDS-hasMasterNCs on
CN=NTDS
Settings,CN=ADC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to msDS-hasMasterNCs on
CN=NTDS
Settings,CN=ADC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to msDS-hasMasterNCs on
CN=NTDS
Settings,CN=ADC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to msDS-hasMasterNCs on
CN=NTDS
Settings,CN=ADC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to msDS-hasMasterNCs on
CN=NTDS
Settings,CN=ADC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to serverReference on
CN=ADC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to serverReference on
CN=BACKUP,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to serverReference on
CN=ADC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to siteList on
CN=DEFAULTIPSITELINK,CN=IP,CN=Inter-Site
Transports,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to hasMasterNCs on CN=NTDS
Settings,CN=ADC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to hasMasterNCs on CN=NTDS
Settings,CN=ADC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to hasMasterNCs on CN=NTDS
Settings,CN=ADC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to msDS-HasDomainNCs on
CN=NTDS
Settings,CN=ADC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to msDS-hasMasterNCs on
CN=NTDS
Settings,CN=ADC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to msDS-hasMasterNCs on
CN=NTDS
Settings,CN=ADC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to msDS-hasMasterNCs on
CN=NTDS
Settings,CN=ADC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to msDS-hasMasterNCs on
CN=NTDS
Settings,CN=ADC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to msDS-hasMasterNCs on
CN=NTDS
Settings,CN=ADC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
replmd_allow_missing_target: CN=NTDS
Settings\0ADEL:b0ca200f-4015-48e5-aa9e-2d85768ce6c2,CN=BACKUP,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
is Deleted but up to date. Ignoring link from
CN=ccde0790-f7cc-449e-97a5-93993d2bb083,CN=Partitions,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
replmd_allow_missing_target: CN=NTDS
Settings\0ADEL:b0ca200f-4015-48e5-aa9e-2d85768ce6c2,CN=BACKUP,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
is Deleted but up to date. Ignoring link from
CN=4a9eb36e-e26a-4963-a6fa-8881304bc16c,CN=Partitions,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
Discarding older DRS linked attribute update to member on CN=Pre-Windows
2000 Compatible Access,CN=Builtin,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Group
Policy Creator Owners,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Enterprise
Admins,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Domain
Admins,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Domain
Admins,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at from
dc732e2f-383e-4241-843e-d071d15caf41
Discarding older DRS linked attribute update to member on CN=Domain
Admins,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Domain
Admins,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Domain
Admins,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Denied RODC
Password Replication Group,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Denied RODC
Password Replication Group,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Denied RODC
Password Replication Group,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Denied RODC
Password Replication Group,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Denied RODC
Password Replication Group,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Denied RODC
Password Replication Group,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Denied RODC
Password Replication Group,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Denied RODC
Password Replication Group,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on
CN=Guests,CN=Builtin,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on
CN=Guests,CN=Builtin,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Schema
Admins,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Windows
Authorization Access Group,CN=Builtin,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on
CN=IIS_IUSRS,CN=Builtin,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on
CN=Users,CN=Builtin,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on
CN=Users,CN=Builtin,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on
CN=Users,CN=Builtin,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on
CN=Administrators,CN=Builtin,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on
CN=Administrators,CN=Builtin,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on
CN=Administrators,CN=Builtin,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Setting isSynchronized and dsServiceName
Cloned domain ARBEITSGRUPPE (SID S-1-5-21-2777655458-4002997014-749295002)
resolve_lmhosts: Attempting lmhosts lookup for name adc1<0x20>
ERROR(<type 'exceptions.IndexError'>): uncaught exception - list
index
out of range
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py",
line
178, in _run
    return self.run(*args, **kwargs)
  File
"/usr/lib/python2.7/dist-packages/samba/netcmd/domain_backup.py",
line 237, in run
    new_sid = get_sid_for_restore(remote_sam)
  File
"/usr/lib/python2.7/dist-packages/samba/netcmd/domain_backup.py",
line 73, in get_sid_for_restore
    rid = int(res[0].get('rIDNextRID')[0])

Apparently Analagous Threads

Search for more reasonably related threads

samba - Aug 2019 - backup AD content

[Samba] backup AD content

[Samba] backup AD content

[Samba] backup AD content

[Samba] backup AD content

[Samba] backup AD content

[Samba] backup AD content

Apparently Analagous Threads