search for: fsmoroleown

...missing roles, they only have dn entries, the second line containing fsmoowner is blank: itwerks at cbadc01:~$ sudo /usr/local/samba/bin/ldbsearch -H /usr/local/samba/private/sam.ldb -b 'CN=System,DC=cb,DC=cliffbells,DC=com' -s sub '(&(objectclass=rIDManager)(cn=RID Manager$))' fSMORoleOwner # record 1 dn: CN=RID Manager$,CN=System,DC=cb,DC=cliffbells,DC=com # returned 1 records # 1 entries # 0 referrals itwerks at cbadc01:~$ !284 sudo /usr/local/samba/bin/ldbsearch --cross-ncs -H /usr/local/samba/private/sam.ldb -b "CN=Infrastructure,DC=DomainDnsZones,DC=cb,DC=cliffbells,DC=c...

...>>>>>> domaindnszonesMaster = get_fsmo_roleowner(samdb, domaindns_dn) >>>>>> File "/usr/lib/python2.7/dist-packages/samba/netcmd/fsmo.py", >>>>>> line 42, in get_fsmo_roleowner >>>>>> master_owner = res[0]["fSMORoleOwner"][0] >>>>>> >>>>>> Which concerns me. What could I do here to get me out of this >>>>>> pickle? Do I have to (re)seize FSMO responsibilities? I did run >>>>>> this on the DC that was the FSMO before all these shenaniga...

...>>>> 395, in run >>>> domaindnszonesMaster = get_fsmo_roleowner(samdb, domaindns_dn) >>>> File "/usr/lib/python2.7/dist-packages/samba/netcmd/fsmo.py", line >>>> 42, in get_fsmo_roleowner >>>> master_owner = res[0]["fSMORoleOwner"][0] >>>> >>>> Which concerns me. What could I do here to get me out of this >>>> pickle? Do I have to (re)seize FSMO responsibilities? I did run >>>> this on the DC that was the FSMO before all these shenanigans: >>>> >>&gt...

...al in this network and must remain accessible. 8) rebooted FILER and CBADC01 Currently AD is allowing users to login to computers, all shares are dead because FILER isn't providing them and I can't set it up as a Domain Member to provide the shares again because CBADC01 is missing 3 of 7 fsmoroleowner entries. I think I have empty fSMORoleOwner attributes as discussed here: https://lists.samba.org/archive/samba-technical/2016-January/111516.html Here's where I'm at: sudo /usr/local/samba/bin/samba-tool fsmo show ERROR(<type 'exceptions.KeyError'>): uncaught exception...

Sorry, I meant to include the command you sent in my last message, I had executed it while troubleshooting... :~$ sudo /usr/local/samba/bin/ldbsearch --cross-ncs -H /usr/local/samba/private/sam.ldb '(fsmoroleowner=*)' | grep 'dn:' | sed 's|dn: ||' CN=Schema,CN=Configuration,DC=cb,DC=cliffbells,DC=com CN=Partitions,CN=Configuration,DC=cb,DC=cliffbells,DC=com CN=Infrastructure,DC=DomainDnsZones,DC=cb,DC=cliffbells,DC=com CN=Infrastructure,DC=ForestDnsZones,DC=cb,DC=cliffbells,DC=com CN=R...

> On 21/12/15 17:53, George wrote: > > On Mon, Dec 14, 2015 at 5:58 PM, Rowland penny <rpenny at samba.org> wrote: > > > >> Try this: > >> > >> ldbsearch --cross-ncs -H /var/lib/samba/private/sam.ldb > >> '(fsmoroleowner=*)' | grep 'dn:' | sed 's|dn: ||' > >> > >> It should return something like this: > >> > >> CN=Schema,CN=Configuration,DC=samdom,DC=example,DC=com > >> CN=Partitions,CN=Configuration,DC=samdom,DC=example,DC=com > >> CN=Infr...

...sible. > > 8) rebooted FILER and CBADC01 > > > Currently AD is allowing users to login to computers, all shares are > dead because FILER isn't providing them and I can't set it up as a > Domain Member to provide the shares again because CBADC01 is missing 3 > of 7 fsmoroleowner entries. I think I have empty fSMORoleOwner > attributes//as discussed here: > https://lists.samba.org/archive/samba-technical/2016-January/111516.html > > > Here's where I'm at: > > sudo /usr/local/samba/bin/samba-tool fsmo show > ERROR(<type 'exceptions...

...netcmd/fsmo.py", line 395, in run >>>>> domaindnszonesMaster = get_fsmo_roleowner(samdb, domaindns_dn) >>>>> File "/usr/lib/python2.7/dist-packages/samba/netcmd/fsmo.py", line 42, in get_fsmo_roleowner >>>>> master_owner = res[0]["fSMORoleOwner"][0] >>>>> >>>>> Which concerns me. What could I do here to get me out of this pickle? Do I have to (re)seize FSMO responsibilities? I did run this on the DC that was the FSMO before all these shenanigans: >>>>> >>>>> samba-tool f...

On 23/11/15 15:51, Matthew Delfino wrote: > > On 2015.11.23, at 8:32 AM, Rowland Penny <rowlandpenny241155 at gmail.com > <mailto:rowlandpenny241155 at gmail.com>> wrote: >> OK, try again, but this time, remove the <fSMORoleOwner> from the end >> of the command, this will dump the entire AD object, I am sure you >> will find that there is no 'fSMORoleOwner' attribute. This is your >> actual problem, why do you not have this FSMO role ? >> >> You have however found a bug in the c...

This is what it returned. root at DC01:/mnt# ldbsearch --cross-ncs -H /var/lib/samba/private/sam.ldb -b "CN=Infrastructure,DC=DomainDnsZones,DC=fisherthompson,DC=local" -s base fsmoroleowner # record 1 dn: CN=Infrastructure,DC=DomainDnsZones,DC=fisherthompson,DC=local fSMORoleOwner: CN=NTDS Settings,CN=PDC,CN=Servers,CN=Default-First-Site-Name,C N=Sites,CN=Configuration,DC=fisherthompson,DC=local # returned 1 records # 1 entries # 0 referrals Looks right, right? It almost seems...

...python2.6/site-packages/samba/netcmd/fsmo.py", line 395, in run domaindnszonesMaster = get_fsmo_roleowner(samdb, domaindns_dn) File "/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/fsmo.py", line 40, in get_fsmo_roleowner scope=ldb.SCOPE_BASE, attrs=["fSMORoleOwner"]) And 'ldbsearch' verifies that DomainDnsZones is missing: # ldbsearch --cross-ncs -H /usr/local/samba/private/sam.ldb '(fsmoroleowner=*)' | grep 'dn:' dn: CN=Schema,CN=Configuration,DC=biostat,DC=washington,DC=edu dn: CN=Partitions,CN=Configuration,DC=biostat,DC=...

...--role=domaindns -UAdministrator Password for [FISHERTHOMPSON\Administrator]: ERROR: Failed to delete role 'domaindns': LDAP error 16 LDAP_NO_SUCH_ATTRIBUTE - <00002085: AtrErr: DSID-03151B93, #1: 0: 00002085: DSID-03151B93, problem 1001 (NO_ATTRIBUTE_OR_VAL), data 0, Att 90171 (fSMORoleOwner):len 286 > <> root at DC01:~# samba-tool fsmo transfer --role=forestdns -UAdministrator Password for [FISHERTHOMPSON\Administrator]: ERROR: Failed to delete role 'forestdns': LDAP error 16 LDAP_NO_SUCH_ATTRIBUTE - <00002085: AtrErr: DSID-03151B93, #1: 0: 00002085: DS...

Hi! I have two Dcs, with Samba 4.7.7, i need tranfer(dont seize) fsmo between dcs, but dont work samba-tool fsmo transfer --role=domaindns -Uadmin Password for [XXXX\admin]: ERROR: Failed to delete role 'domaindns': LDAP error 16 LDAP_NO_SUCH_ATTRIBUTE -  <attribute 'fSMORoleOwner': no matching attribute value while deleting attribute on 'CN=Infrastructure,DC=DomainDnsZones,DC=xxx,DC=xxxx,DC=com,DC=br'> <> samba-tool fsmo transfer --role=forestdns -Uadmin Password for [XXXXX\admin]: ERROR: Failed to delete role 'forestdns': LDAP error 16 LD...

...Comparing [DNSDOMAIN] context... * Objects to be compared: 188 Comparing: 'CN=Infrastructure,DC=DomainDnsZones,DC=fisherthompson,DC=local' [ldap://dc01] 'CN=Infrastructure,DC=DomainDnsZones,DC=fisherthompson,DC=local' [ldap://pdc] Attributes found only in ldap://dc01: fSMORoleOwner Difference in attribute values: whenChanged => ['20160622133653.0Z'] ['20160621205006.0Z'] FAILED Comparing: 'CN=MicrosoftDNS,DC=DomainDnsZones,DC=fisherthompson,DC=local' [ldap://dc01] 'CN=MicrosoftDNS,DC=DomainDnsZones,DC=fisherthompson,DC=local...

On 2015.11.23, at 8:32 AM, Rowland Penny <rowlandpenny241155 at gmail.com> wrote: > OK, try again, but this time, remove the <fSMORoleOwner> from the end of the command, this will dump the entire AD object, I am sure you will find that there is no 'fSMORoleOwner' attribute. This is your actual problem, why do you not have this FSMO role ? > > You have however found a bug in the code, it should print an error message...

...exception - 'No such element' File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 175, in _run return self.run(*args, **kwargs) File "/usr/lib/python2.7/dist-packages/samba/netcmd/fsmo.py", line 207, in run self.namingMaster = res[0]["fSMORoleOwner"][0] What can I do, to get all roles back to work? Stefan -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iEYEARECAAYFAlRaVl4ACgkQ2JOGcNAHDTaL2wCfaV5HRlJ0a0zrN8AjcUFzUiht magAoJuXSAs+jaWA9vtUs4sSjC/XSjPd =rb4w -----END PGP SIGNATURE-----

.../index.php/Backup_and_Recovery. Now, I'm trying to restore the backup to a new server. I've performed the restore procedures but I'm getting the following errors when I try to start samba4 on the new server: Calling DNS name update script Failed to find object (null) for attribute fsmoRoleOwner - Cannot find DN (null) to get attribute fsmoRoleOwner for reference dn: Unsupported critical extension 1.2.840.113556.1.4.529 Failed to find if we are the PDC for this ldb: Searching for fSMORoleOwner in (null) failed: Cannot find DN (null) to get attribute fsmoRoleOwner for reference dn: Unsupp...

...9;No such element' File "/usr/lib64/python2.6/site-packages/samba/netcmd/__init__.py", line 175, in _run return self.run(*args, **kwargs) File "/usr/lib64/python2.6/site-packages/samba/netcmd/fsmo.py", line 197, in run self.infrastructureMaster = res[0]["fSMORoleOwner"][0] # samba-tool fsmo seize --role=naming -d 9 <removed generic debug info> schema_fsmo_init: we are master[yes] updates allowed[no] schema_fsmo_init: we are master[yes] updates allowed[no] Attempting transfer... imessaging: cleaning up /var/lib/samba/private/smbd.tmp/msg/msg.24602...

...t;, >> line 395, in run >> domaindnszonesMaster = get_fsmo_roleowner(samdb, domaindns_dn) >> File >> "/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/fsmo.py", >> line 40, in get_fsmo_roleowner >> scope=ldb.SCOPE_BASE, attrs=["fSMORoleOwner"]) >> >> And 'ldbsearch' verifies that DomainDnsZones is missing: >> >> # ldbsearch --cross-ncs -H /usr/local/samba/private/sam.ldb >> '(fsmoroleowner=*)' | grep 'dn:' >> dn: CN=Schema,CN=Configuration,DC=biostat,DC=washington,DC=ed...

...trator > Password for [FISHERTHOMPSON\Administrator]: > ERROR: Failed to delete role 'domaindns': LDAP error 16 > LDAP_NO_SUCH_ATTRIBUTE - <00002085: AtrErr: DSID-03151B93, #1: > 0: 00002085: DSID-03151B93, problem 1001 (NO_ATTRIBUTE_OR_VAL), > data 0, Att 90171 (fSMORoleOwner):len 286 >> <> > root at DC01:~# samba-tool fsmo transfer --role=forestdns -UAdministrator > Password for [FISHERTHOMPSON\Administrator]: > ERROR: Failed to delete role 'forestdns': LDAP error 16 > LDAP_NO_SUCH_ATTRIBUTE - <00002085: AtrErr: DSID-03151B93, #1:...