samba - Jan 2023 - Transferring fsmo roles to new DC2

On 16/01/2023 10:16, Callum G. MacEwan via samba wrote:
> Hi Team
> 
> I am transferring to a new AD DC
> 
> So I started transferring the fsmo roles the first five transferred fine 
> the domaindns and forestdns had the following error!
> 
> root at DC2:/etc/sudoers.d#? samba-tool fsmo transfer --role=forestdns 
> -UAdministrator
> Password for [BALEWAN\Administrator]:
> ERROR: Failed to add role 'forestdns': LDAP error 16 
> LDAP_NO_SUCH_ATTRIBUTE -? <attribute 'fSMORoleOwner': no
matching
> attribute value while deleting attribute on 
>
'CN=Infrastructure,DC=ForestDnsZones,DC=balewan,DC=pegasusnz,DC=com'>
<>
> 
> What's the best thing to resolve this? seize the roles perhaps?
> 
> Thanks
> 
> Callum
> 
Yes, probably, but why are they not there ?
I think you need to give us a bit more info:
What OS
What version of Samba
Are you using Bind9
How was the domain provisioned

If you run this on the DC:

ldbsearch --cross-ncs -H /var/lib/samba/private/sam.ldb -b 
DC=DomainDnsZones,DC=balewan,DC=pegasusnz,DC=com '(cn=Infrastructure)'

Does it shown the 'fSMORoleOwner' attribute ?

Rowland

> Yes, probably, but why are they not there ?
> I think you need to give us a bit more info:
> What OS
Debian
>
> What version of Samba
Samba 4.17.4
> Are you using Bind9
No using internal bind
> How was the domain provisioned
samba-tool as per wiki
>
>
> If you run this on the DC:
>
> ldbsearch --cross-ncs -H /var/lib/samba/private/sam.ldb -b 
> DC=DomainDnsZones,DC=balewan,DC=pegasusnz,DC=com
'(cn=Infrastructure)'
root at DC2:/etc/sudoers.d#  ldbsearch --cross-ncs -H
/var/lib/samba/private/sam.ldb -b
DC=DomainDnsZones,DC=balewan,DC=pegasusnz,DC=com '(cn=Infrastructure)'

# record 1

dn: CN=Infrastructure,DC=DomainDnsZones,DC=balewan,DC=pegasusnz,DC=com

objectClass: top

objectClass: infrastructureUpdate

cn: Infrastructure

instanceType: 4

whenCreated: 20221203031619.0Z

whenChanged: 20221203031619.0Z

uSNCreated: 5428

uSNChanged: 5428

showInAdvancedViewOnly: TRUE

name: Infrastructure

objectGUID: e27698d8-a43b-4b74-8e51-91cf1b6cdaf3

fSMORoleOwner: CN=NTDS
Settings,CN=CAPSICUM,CN=Servers,CN=Balewan-Orchards,CN=Sites,CN=Configuration,DC=balewan,DC=pegasusnz,DC=com

systemFlags: -1946157056

objectCategory: CN=Infrastructure-Update,CN=Schema,CN=Configuration,DC=balewan

 ?,DC=pegasusnz,DC=com

isCriticalSystemObject: TRUE

distinguishedName: CN=Infrastructure,DC=DomainDnsZones,DC=balewan,DC=pegasusnz

 ?,DC=com

# returned 1 records

# 1 entries

# 0 referrals
>
> Does it shown the 'fSMORoleOwner' attribute ?
>
> Rowland
>