samba - Jun 2024 - Failed to bind to uuid NT_STATUS_LOGON_FAILURE

On Thu, 6 Jun 2024 10:49:23 +0300
Omnis ludis - games via samba <samba at lists.samba.org> wrote:
> I added a private directory, but this did not fix the problem, and
> for some reason the other path still appears
> testparm -v | grep private
> Load smb config files from /opt/samba/etc/smb.conf
> Loaded services file OK.
> Weak crypto is allowed by GnuTLS (e.g. NTLM as a compatibility
> fallback)
> 
> Server role: ROLE_ACTIVE_DIRECTORY_DC
> 
> Press enter to see a dump of your service definitions
> 
>         private dir = /opt/samba/private
> 
> its code scripts again
> __docformat__ = "restructuredText"
> 
> 
> import optparse
> import sys
> # Allow to run from s4 source directory (without installing samba)
> sys.path.insert(0, "bin/python")
> 
> import samba.getopt as options
> from samba.credentials import DONT_USE_KERBEROS
> from samba.auth import system_session
> from samba import param
> from samba.provision import find_provision_key_parameters
> from samba.upgradehelpers import (get_paths,
>                                   get_ldbs,
>                                  update_machine_account_password)
> 
> parser = optparse.OptionParser("chgtdcpass [options]")
> sambaopts = options.SambaOptions(parser)
> parser.add_option_group(sambaopts)
> parser.add_option_group(options.VersionOptions(parser))
> credopts = options.CredentialsOptions(parser)
> parser.add_option_group(credopts)
> 
> opts = parser.parse_args()[0]
> 
> lp = sambaopts.get_loadparm()
> smbconf = lp.configfile
> creds = credopts.get_credentials(lp)
> creds.set_kerberos_state(DONT_USE_KERBEROS)
> 
> 
> if __name__ == '__main__':
>     paths = get_paths(param, smbconf=smbconf)
>     session = system_session()
> 
>     ldbs = get_ldbs(paths, creds, session, lp)
>     ldbs.startTransactions()
> 
>     names = find_provision_key_parameters(ldbs.sam, ldbs.secrets,
> ldbs.idmap,
>                                             paths, lp, smbconf)
> 
>     update_machine_account_password(ldbs.sam, ldbs.secrets, names)
>     ldbs.groupedCommit()
> 
> and error:
> ./chgtdcpass --configfile=/opt/samba/etc/smb.conf
> module samba_dsdb initialization failed : No such object
> Unable to load modules for /var/lib/samba/private/sam.ldb:
> dsdb_module_search_dn: did not find base dn @ROOTDSE (0 results)
> Traceback (most recent call last):
>   File "./chgtdcpass", line 58, in <module>
>     ldbs = get_ldbs(paths, creds, session, lp)
>   File
"/usr/lib64/python3.8/site-packages/samba/upgradehelpers.py",
As you seem to have possibly compiled Samba into /opt and the path
above appears to be a standard package path, I wonder if you are using
the correct chgtdcpass ?
What is your $PATH ?
Does it start with /opt/samba/bin/:/opt/samba/sbin/ ?
Is the python path correct ?

Rowland

here's the nuance, I just had to put this script in the samba folder,
because after assembly I do not find it in the samba folders, although this
script is in the source code, maybe I forgot to specify some keys before
assembly, but I would like to understand how in this in the script, just
hardcode the paths to the directories
my path
PATH=/opt/samba/bin/:/opt/samba/sbin/:/sbin:/bin:/usr/sbin:/usr/bin

??, 6 ???. 2024??. ? 11:24, Rowland Penny via samba <samba at
lists.samba.org>:
> On Thu, 6 Jun 2024 10:49:23 +0300
> Omnis ludis - games via samba <samba at lists.samba.org> wrote:
>
> > I added a private directory, but this did not fix the problem, and
> > for some reason the other path still appears
> > testparm -v | grep private
> > Load smb config files from /opt/samba/etc/smb.conf
> > Loaded services file OK.
> > Weak crypto is allowed by GnuTLS (e.g. NTLM as a compatibility
> > fallback)
> >
> > Server role: ROLE_ACTIVE_DIRECTORY_DC
> >
> > Press enter to see a dump of your service definitions
> >
> >         private dir = /opt/samba/private
> >
> > its code scripts again
> > __docformat__ = "restructuredText"
> >
> >
> > import optparse
> > import sys
> > # Allow to run from s4 source directory (without installing samba)
> > sys.path.insert(0, "bin/python")
> >
> > import samba.getopt as options
> > from samba.credentials import DONT_USE_KERBEROS
> > from samba.auth import system_session
> > from samba import param
> > from samba.provision import find_provision_key_parameters
> > from samba.upgradehelpers import (get_paths,
> >                                   get_ldbs,
> >                                  update_machine_account_password)
> >
> > parser = optparse.OptionParser("chgtdcpass [options]")
> > sambaopts = options.SambaOptions(parser)
> > parser.add_option_group(sambaopts)
> > parser.add_option_group(options.VersionOptions(parser))
> > credopts = options.CredentialsOptions(parser)
> > parser.add_option_group(credopts)
> >
> > opts = parser.parse_args()[0]
> >
> > lp = sambaopts.get_loadparm()
> > smbconf = lp.configfile
> > creds = credopts.get_credentials(lp)
> > creds.set_kerberos_state(DONT_USE_KERBEROS)
> >
> >
> > if __name__ == '__main__':
> >     paths = get_paths(param, smbconf=smbconf)
> >     session = system_session()
> >
> >     ldbs = get_ldbs(paths, creds, session, lp)
> >     ldbs.startTransactions()
> >
> >     names = find_provision_key_parameters(ldbs.sam, ldbs.secrets,
> > ldbs.idmap,
> >                                             paths, lp, smbconf)
> >
> >     update_machine_account_password(ldbs.sam, ldbs.secrets, names)
> >     ldbs.groupedCommit()
> >
> > and error:
> > ./chgtdcpass --configfile=/opt/samba/etc/smb.conf
> > module samba_dsdb initialization failed : No such object
> > Unable to load modules for /var/lib/samba/private/sam.ldb:
> > dsdb_module_search_dn: did not find base dn @ROOTDSE (0 results)
> > Traceback (most recent call last):
> >   File "./chgtdcpass", line 58, in <module>
> >     ldbs = get_ldbs(paths, creds, session, lp)
> >   File
"/usr/lib64/python3.8/site-packages/samba/upgradehelpers.py",
>
> As you seem to have possibly compiled Samba into /opt and the path
> above appears to be a standard package path, I wonder if you are using
> the correct chgtdcpass ?
> What is your $PATH ?
> Does it start with /opt/samba/bin/:/opt/samba/sbin/ ?
> Is the python path correct ?
>
> Rowland
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>