samba - Jun 2024 - Online AD Backup fails with "no auth" in 4.20?

On Thu, 27 Jun 2024 17:12:38 +0100
Luis Peromarta via samba <samba at lists.samba.org> wrote:
> I can confirm that, in order to do backups from a member server, you
> need to install samba-ad-dc in the member server running > 4.20.
> 
Whilst I do have samba-ad-dc installed on my Unix domain member, I fail
to see why it would be required for 'samba-tool domain backup online'
to work.

It contains:

/etc/init.d/samba-ad-dc
/lib/systemd/system/samba-ad-dc.service
/usr/sbin/samba
/usr/sbin/samba_dnsupdate
/usr/sbin/samba_kcc
/usr/sbin/samba_spnupdate
/usr/sbin/samba_upgradedns
/usr/share/doc/samba-ad-dc/changelog.Debian.gz
/usr/share/doc/samba-ad-dc/copyright
/usr/share/lintian/overrides/samba-ad-dc
/usr/share/man/man8/samba.8.gz

I cannot see anything there that appears to be relevant.

Rowland

OK apologies, looks like I jumped the gun and installed ?samba-ad-dc? while my
system wanted "samba-ad-provision? as per the error below.

Maybe samba-ad-dc installs samba-ad-provision ?


?/usr/bin/samba-tool domain backup online
--targetdir=/root/samba-ad-backup-awing/ --server=awing -UAdministrator
INFO 2024-06-27 18:35:35,593 pid:2650
/usr/lib/python3/dist-packages/samba/join.py #1637: workgroup is MAD
INFO 2024-06-27 18:35:35,593 pid:2650
/usr/lib/python3/dist-packages/samba/join.py #1640: realm is mad.caponato.es
Calling bare provision
INFO 2024-06-27 18:35:35,606 pid:2650
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2110: Looking up
IPv4 addresses
INFO 2024-06-27 18:35:35,607 pid:2650
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2127: Looking up
IPv6 addresses
WARNING 2024-06-27 18:35:35,607 pid:2650
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2134: No IPv6
address will be assigned
ERROR(exception): uncaught exception - File
[/usr/share/samba/setup/ad-schema/AD_DS_Attributes_Windows_Server_v1903.ldf] not
found. Please install samba-ad-provision package
??File "/usr/lib/python3/dist-packages/samba/netcmd/__init__.py", line
285, in _run
?? ?return self.run(*args, **kwargs)
? ? ? ? ? ?^^^^^^^^^^^^^^^^^^^^^^^^^
??File "/usr/lib/python3/dist-packages/samba/netcmd/domain/backup.py",
line 261, in run
?? ?ctx = join_clone(logger=logger, creds=creds, lp=lp,
?? ? ? ? ?^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
??File "/usr/lib/python3/dist-packages/samba/join.py", line 1642, in
join_clone
?? ?ctx.do_join()
??File "/usr/lib/python3/dist-packages/samba/join.py", line 1696, in
do_join
?? ?ctx.join_provision()
??File "/usr/lib/python3/dist-packages/samba/join.py", line 861, in
join_provision
?? ?presult = provision(ctx.logger, system_session(), smbconf=smbconf,
?? ? ? ? ? ? ?^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
??File "/usr/lib/python3/dist-packages/samba/provision/__init__.py",
line 2288, in provision
?? ?schema = Schema(domainsid, invocationid=invocationid,
? ? ? ? ? ? ?^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
??File "/usr/lib/python3/dist-packages/samba/schema.py", line 119, in
__init__
?? ?setup_path('ad-schema/%s' % Schema.base_schemas[base_schema][0]),
?? ?^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
??File "/usr/lib/python3/dist-packages/samba/provision/common.py",
line 44, in setup_path
?? ?raise Exception("File [%s] not found. Please install samba-ad-provision
package" % path)

Would that be it ?

I recovered from a snapshot and it also works with samba-ad-provision

LP
On Jun 27, 2024 at 17:25 +0100, Rowland Penny via samba <samba at
lists.samba.org>, wrote:
> On Thu, 27 Jun 2024 17:12:38 +0100
> Luis Peromarta via samba <samba at lists.samba.org> wrote:
>
> > I can confirm that, in order to do backups from a member server, you
> > need to install samba-ad-dc in the member server running > 4.20.
> >
>
> Whilst I do have samba-ad-dc installed on my Unix domain member, I fail
> to see why it would be required for 'samba-tool domain backup
online'
> to work.
>
> It contains:
>
> /etc/init.d/samba-ad-dc
> /lib/systemd/system/samba-ad-dc.service
> /usr/sbin/samba
> /usr/sbin/samba_dnsupdate
> /usr/sbin/samba_kcc
> /usr/sbin/samba_spnupdate
> /usr/sbin/samba_upgradedns
> /usr/share/doc/samba-ad-dc/changelog.Debian.gz
> /usr/share/doc/samba-ad-dc/copyright
> /usr/share/lintian/overrides/samba-ad-dc
> /usr/share/man/man8/samba.8.gz
>
> I cannot see anything there that appears to be relevant.
>
> Rowland
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba