samba - Jun 2024 - Failed to bind to uuid NT_STATUS_LOGON_FAILURE

I added a private directory, but this did not fix the problem, and for some
reason the other path still appears
testparm -v | grep private
Load smb config files from /opt/samba/etc/smb.conf
Loaded services file OK.
Weak crypto is allowed by GnuTLS (e.g. NTLM as a compatibility fallback)

Server role: ROLE_ACTIVE_DIRECTORY_DC

Press enter to see a dump of your service definitions

        private dir = /opt/samba/private

its code scripts again
__docformat__ = "restructuredText"


import optparse
import sys
# Allow to run from s4 source directory (without installing samba)
sys.path.insert(0, "bin/python")

import samba.getopt as options
from samba.credentials import DONT_USE_KERBEROS
from samba.auth import system_session
from samba import param
from samba.provision import find_provision_key_parameters
from samba.upgradehelpers import (get_paths,
                                  get_ldbs,
                                 update_machine_account_password)

parser = optparse.OptionParser("chgtdcpass [options]")
sambaopts = options.SambaOptions(parser)
parser.add_option_group(sambaopts)
parser.add_option_group(options.VersionOptions(parser))
credopts = options.CredentialsOptions(parser)
parser.add_option_group(credopts)

opts = parser.parse_args()[0]

lp = sambaopts.get_loadparm()
smbconf = lp.configfile
creds = credopts.get_credentials(lp)
creds.set_kerberos_state(DONT_USE_KERBEROS)


if __name__ == '__main__':
    paths = get_paths(param, smbconf=smbconf)
    session = system_session()

    ldbs = get_ldbs(paths, creds, session, lp)
    ldbs.startTransactions()

    names = find_provision_key_parameters(ldbs.sam, ldbs.secrets,
ldbs.idmap,
                                            paths, lp, smbconf)

    update_machine_account_password(ldbs.sam, ldbs.secrets, names)
    ldbs.groupedCommit()

and error:
./chgtdcpass --configfile=/opt/samba/etc/smb.conf
module samba_dsdb initialization failed : No such object
Unable to load modules for /var/lib/samba/private/sam.ldb:
dsdb_module_search_dn: did not find base dn @ROOTDSE (0 results)
Traceback (most recent call last):
  File "./chgtdcpass", line 58, in <module>
    ldbs = get_ldbs(paths, creds, session, lp)
  File "/usr/lib64/python3.8/site-packages/samba/upgradehelpers.py",
line
142, in get_ldbs
    ldbs.sam = SamDB(paths.samdb,
  File "/usr/lib64/python3.8/site-packages/samba/samdb.py", line 90,
in
__init__
    super(SamDB, self).__init__(url=url, lp=lp, modules_dir=modules_dir,
  File "/usr/lib64/python3.8/site-packages/samba/__init__.py", line
114, in
__init__
    self.connect(url, flags, options)
  File "/usr/lib64/python3.8/site-packages/samba/samdb.py", line 106,
in
connect
    super(SamDB, self).connect(url=url, flags=flags,
_ldb.LdbError: (32, 'dsdb_module_search_dn: did not find base dn @ROOTDSE
(0 results)')


Tell me how I can write the paths to all configs directly inside this code,
maybe this will help me?

??, 5 ???. 2024??. ? 23:04, Andrew Bartlett <abartlet at samba.org>:
> Add a 'private dir' to your smb.conf matching where your Samba
packages
> are putting 'private'.
>
> Andrew Bartlett
>
> On Wed, 2024-06-05 at 17:13 +0300, Omnis ludis - games via samba wrote:
>
> I tried to run with this command, but I get an error
>
> ./chgtdcpass --configfile=/opt/samba/etc/smb.conf
>
> module samba_dsdb initialization failed : No such object
>
> Unable to load modules for /var/lib/samba/private/sam.ldb:
>
> dsdb_module_search_dn: did not find base dn @ROOTDSE (0 results)
>
> Traceback (most recent call last):
>
>   File "./chgtdcpass", line 56, in <module>
>
>     ldbs = get_ldbs(paths, creds, session, lp)
>
>   File
"/usr/lib64/python3.8/site-packages/samba/upgradehelpers.py", line
>
> 142, in get_ldbs
>
>     ldbs.sam = SamDB(paths.samdb,
>
>   File "/usr/lib64/python3.8/site-packages/samba/samdb.py", line
90, in
>
> __init__
>
>     super(SamDB, self).__init__(url=url, lp=lp, modules_dir=modules_dir,
>
>   File "/usr/lib64/python3.8/site-packages/samba/__init__.py",
line 114, in
>
> __init__
>
>     self.connect(url, flags, options)
>
>   File "/usr/lib64/python3.8/site-packages/samba/samdb.py", line
106, in
>
> connect
>
>     super(SamDB, self).connect(url=url, flags=flags,
>
> _ldb.LdbError: (32, 'dsdb_module_search_dn: did not find base dn
@ROOTDSE
>
> (0 results)')
>
> I specified the location of smb.conf, why does this script follow a
>
> different path to search for internal samba files?
>
>
> ??, 5 ???. 2024??. ? 17:02, Rowland Penny via samba <
>
> samba at lists.samba.org
>
> >:
>
>
> On Wed, 5 Jun 2024 15:33:49 +0200
>
> Christian Naumer via samba <
>
> samba at lists.samba.org
>
> > wrote:
>
>
> May be this will work:
>
>
> /usr/share/samba/scripts/chgtdcpass --help
>
> Usage: chgtdcpass [options]
>
>
>
> That should work, but you should take from this:
>
>
> A) run more than one DC
>
> B) never use sssd with Samba, there is absolutely no point.
>
>
> Rowland
>
>
> --
>
> To unsubscribe from this list go to the following URL and read the
>
> instructions:
>
> https://lists.samba.org/mailman/options/samba
>
>
>
> --
>
> Andrew Bartlett (he/him)       https://samba.org/~abartlet/
> Samba Team Member (since 2001) https://samba.org
> Samba Team Lead                https://catalyst.net.nz/services/samba
> Catalyst.Net Ltd
>
> Proudly developing Samba for Catalyst.Net Ltd - a Catalyst IT group company
>
> Samba Development and Support: https://catalyst.net.nz/services/samba
>
> Catalyst IT - Expert Open Source Solutions
>

On Thu, 6 Jun 2024 10:49:23 +0300
Omnis ludis - games via samba <samba at lists.samba.org> wrote:
> I added a private directory, but this did not fix the problem, and
> for some reason the other path still appears
> testparm -v | grep private
> Load smb config files from /opt/samba/etc/smb.conf
> Loaded services file OK.
> Weak crypto is allowed by GnuTLS (e.g. NTLM as a compatibility
> fallback)
> 
> Server role: ROLE_ACTIVE_DIRECTORY_DC
> 
> Press enter to see a dump of your service definitions
> 
>         private dir = /opt/samba/private
> 
> its code scripts again
> __docformat__ = "restructuredText"
> 
> 
> import optparse
> import sys
> # Allow to run from s4 source directory (without installing samba)
> sys.path.insert(0, "bin/python")
> 
> import samba.getopt as options
> from samba.credentials import DONT_USE_KERBEROS
> from samba.auth import system_session
> from samba import param
> from samba.provision import find_provision_key_parameters
> from samba.upgradehelpers import (get_paths,
>                                   get_ldbs,
>                                  update_machine_account_password)
> 
> parser = optparse.OptionParser("chgtdcpass [options]")
> sambaopts = options.SambaOptions(parser)
> parser.add_option_group(sambaopts)
> parser.add_option_group(options.VersionOptions(parser))
> credopts = options.CredentialsOptions(parser)
> parser.add_option_group(credopts)
> 
> opts = parser.parse_args()[0]
> 
> lp = sambaopts.get_loadparm()
> smbconf = lp.configfile
> creds = credopts.get_credentials(lp)
> creds.set_kerberos_state(DONT_USE_KERBEROS)
> 
> 
> if __name__ == '__main__':
>     paths = get_paths(param, smbconf=smbconf)
>     session = system_session()
> 
>     ldbs = get_ldbs(paths, creds, session, lp)
>     ldbs.startTransactions()
> 
>     names = find_provision_key_parameters(ldbs.sam, ldbs.secrets,
> ldbs.idmap,
>                                             paths, lp, smbconf)
> 
>     update_machine_account_password(ldbs.sam, ldbs.secrets, names)
>     ldbs.groupedCommit()
> 
> and error:
> ./chgtdcpass --configfile=/opt/samba/etc/smb.conf
> module samba_dsdb initialization failed : No such object
> Unable to load modules for /var/lib/samba/private/sam.ldb:
> dsdb_module_search_dn: did not find base dn @ROOTDSE (0 results)
> Traceback (most recent call last):
>   File "./chgtdcpass", line 58, in <module>
>     ldbs = get_ldbs(paths, creds, session, lp)
>   File
"/usr/lib64/python3.8/site-packages/samba/upgradehelpers.py",
As you seem to have possibly compiled Samba into /opt and the path
above appears to be a standard package path, I wonder if you are using
the correct chgtdcpass ?
What is your $PATH ?
Does it start with /opt/samba/bin/:/opt/samba/sbin/ ?
Is the python path correct ?

Rowland