search for: ldbdump

...Record added successfully Thanks! > The missing ntSecurityDescriptor is a curious issue. Can you check if > it or the whole record is really missing? I'm guessing it is another > index issue, stopping us finding the record rather than the record not > being there. Look over an ldbdump of the backend DB in sam.ldb.d/ if > you have to, to confirm that. > Andrew Bartlett I haven't actually got ldbdump on the machine, and I can't see it in the Debian packages. That said, I do appear to be able to add DNS records now, so I'm assuming it was the index. If you parti...

After a mail mentionning that i cannot run the sambaundoguidindex, here the error i'm getting : root at samba:~/samba-4.8.2/source4/scripting/bin# killall samba root at samba:~/samba-4.8.2/source4/scripting/bin# ./sambaundoguididx Traceback (most recent call last): File "./sambaundoguididx", line 54, in <module> samdb.modify(modmsg) _ldb.LdbError: (32, 'ldb_wait

..., I have tested the last one with the same errors. > I suspect that the DB could be corrupted since a long time, although the AD is running ok. > > What can I do to either correct the DB or export/import the AD ? This is where is gets messy. You can dump the database with tdbdump and ldbdump, you can even do an emergency dump with ldbdump. However, that doesn't tell you what you are missing, you need to then compare a re-constructed database (rebuild each ldb file in the sam.ldb.d/ directory via ldbadd) with an older backup using ldapcmp to work out which records are missing. N...

> -----Message d'origine----- > De : Andrew Bartlett [mailto:abartlet at samba.org] > Envoyé : samedi 26 août 2017 12:40 > À : HB; samba at lists.samba.org > Objet : Re: [Samba] DC Upgrade from 4.1.7 to 4.6.7 > > On Sat, 2017-08-26 at 12:32 +0400, HB via samba wrote: > > > > > Here is the output of samba-tool dbcheck : > > # samba-tool dbcheck >

...rade from 4.7.x to 4.8.2 and > > have > issues? > > > > Most likely you will need to restore from backup or create a new DC > > if you can't run the script. > > If that isn't an option for some reason, then a dump of the database > backend files using ldbdump, and then a re-create of the files with > ldbadd might be possible, but I haven't got an automated script for > that yet (probably something we will need to do in aid of the LMDB port however). > > You would still need to do the other steps that script does, and then > finish...

...> > > > issues? > > > > > > Most likely you will need to restore from backup or create a new DC if > > > you can't run the script. > > > > If that isn't an option for some reason, then a dump of the database backend > > files using ldbdump, and then a re-create of the files with ldbadd might be > > possible, but I haven't got an automated script for that yet (probably > > something we will need to do in aid of the LMDB port however). > > > > You would still need to do the other steps that script does, and...

> > > > Stop samba 4.8.2 > > LDBDump database into a file > > Drop the old database file > > LDBadd file into a new database. > > Run sambaundoguidindex > > Start samba 4.8.2 > > Run samba-tool dbcheck --reindex > > That might work. I've not tried it myself and I would have to suggest getting...

Andrew Bartlett <abartlet <at> samba.org> writes: > > What does 'samba-tool dbcheck' say? Running "sudo samba-tool dbfix" produces the following Python error: sudo samba-tool dbcheck ERROR(<type 'exceptions.IndexError'>): uncaught exception - list index out of range File

>> Andrew Bartlett > I haven't actually got ldbdump on the machine, and I can't see it in > the Debian packages. That said, I do appear to be able to add DNS > records now, so I'm assuming it was the index. If you particularly > want me to find out then I'll try to get a dump, but as long as its > working I'm happy to...

Hi All, As a result of a company restructure and name change we need to change our AD domain. I know that we can't change the AD domain name in Samba 4, so I'm looking at the smoothest way to migrate everything from one domain to another. Is there any (properly working) way we can export users, groups and policies from one domain and import them into another? I've spent a few

...t; > I am also unable to downgrade, the source4/scripting/bin/ > sambaundoguididx > > script core dumps without producing any messages so I can't downgrade > > either (serves me right for not taking a backup first). > > This is unfortunate. My suggestion is that you use ldbdump and then > ldbadd to re-build the backend databases (the things in sam.ldb.d/ that > we generally say not to touch) and then try the script again. You may > with to manually avoid adding the index controls (@INDEXLIST) and let > Samba re-add them once you get back to 4.7. > > Thi...

...keeping passwords > more difficult (embedded in supplementalCredentials). > > Finding out exactly what changes in a Windows AD domain when you rename > it would be a good place to start. I honestly don't know how well it > will go, but you could dump the whole thing to ldif with ldbdump on the > backend files, and then do a pile of search and replace. That might at > least help pinpoint what other issues to look for. > > I hope this helps, > > Andrew Bartlett > > -- > Andrew Bartlett http://samba.org/~abartlet/ > Authentication...

Hello, Today I tried to upgrade to samba 4.8.0, the upgrade seems to have failed, and I can't seem to fix it or back out. The issue seems to be I've lost the some KRB tickets. Here's and example of the errors i get: samba-tool domain exportkeytab /tmp/test2 samba_kdc_fetch: could not find own KRBTGT in DB: dsdb_search at ../source4/dsdb/common/util.c:4641 ERROR(runtime): uncaught

On Mon, 2016-05-16 at 16:41 +0100, ash-samba at comtek.co.uk wrote: > > > Andrew Bartlett > > I haven't actually got ldbdump on the machine, and I can't see it > > in > > the Debian packages. That said, I do appear to be able to add DNS > > records now, so I'm assuming it was the index. If you particularly > > want me to find out then I'll try to get a dump, but as long as its >...

Hi Guys. Today i experienced a problem with my samba 4 AD. I have a master(AD1) and a member(AD2) in a replicated environment. I´ve just checked that my AD2 has some issues when i did this test: ---------------------------------------------------------------------------------- ldbsearch --url=/usr/local/samba/private/sam.ldb '(invocationid=*)' --cross-ncs objectguid # record 1 dn:

...stly/tedious/manual) repair involving a rebuild and putting back some of the old values. The last time I came across a DB failure like this, I blamed a DRDB setup that didn't honour 'barriers' and an unexpected power-off. The DB was only able to be partially rescued with the new 'ldbdump' tool we wrote. In that case the domain was able to hobble on for a few weeks, but was rebuilt. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.n...

...remove the index is with samba-tool dbcheck --reindex. The missing ntSecurityDescriptor is a curious issue. Can you check if it or the whole record is really missing? I'm guessing it is another index issue, stopping us finding the record rather than the record not being there. Look over an ldbdump of the backend DB in sam.ldb.d/ if you have to, to confirm that. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba

...search but might make keeping passwords more difficult (embedded in supplementalCredentials).   Finding out exactly what changes in a Windows AD domain when you rename it would be a good place to start.  I honestly don't know how well it will go, but you could dump the whole thing to ldif with ldbdump on the backend files, and then do a pile of search and replace.  That might at least help pinpoint what other issues to look for. I hope this helps, Andrew Bartlett --  Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba...

...t. However do carefully inspect your hardware, this should only happen if you have bad hardware or a VM environment that is not propagating write barriers. If you keep backups you may be able to work out when it happened and correlate with an unexpected poweroff etc. I wrote with Rusty a tool ldbdump to recover data from such databases, if you have stranded data, but returning it to the replicated state is still non-trivial. I hope this helps, Andrew Bartlett -- Andrew Bartlett https://samba.org/~abartlet/ Authentication Developer, Samba Team https://samba.org Samba Development and...

...a huge version jump. > > I am also unable to downgrade, the source4/scripting/bin/sambaundoguididx > script core dumps without producing any messages so I can't downgrade > either (serves me right for not taking a backup first). This is unfortunate. My suggestion is that you use ldbdump and then ldbadd to re-build the backend databases (the things in sam.ldb.d/ that we generally say not to touch) and then try the script again. You may with to manually avoid adding the index controls (@INDEXLIST) and let Samba re-add them once you get back to 4.7. This is the bug for a fixed Samb...