search for: object_dn

...sage: $0 <ldap_object>" ??? echo "??? ldap_object?? name of a computer, user or group" ??? exit 1 fi OBJECT=$1 BASE_DN="DC=$(dnsdomainname | sed 's/\./,DC=/g')" # Use UID instead of sAMAccountName because it does not have the $ ending for computer accounts OBJECT_DN="$(ldbsearch -H /var/lib/samba/private/sam.ldb -b "${BASE_DN}" "(|(CN=${OBJECT})(UID=${OBJECT}))" 2> /dev/null | ??? grep 'dn:' | cut -d ' ' -f 2-)" #echo "Object DN: ${OBJECT_DN}" #echo "Nested group memberships:" ldbsearch -H...

I'm quite confused by this one, as I can't see how this would happen.. but after upgrading my DCs from 4.11.10 to 4.18.5, LDAP searches don't seem to work if they use the :1.2.840.113556.1.4.1941: modifier, aka LDAP_MATCHING_RULE_IN_CHAIN. (Yes, it was a fairly big version jump.. Yes, I should have upgraded much earlier.. Yes, I know 4.19.x is out now as well) Here's a search that

...raceback (most recent call last):   File "./samba_CVE-2018-1057_helper", line 139, in <module>     sd_helper.modify_sd_on_dn(msg.dn, new_desc)   File "/usr/local/samba/lib/python2.7/site-packages/samba/sd_utils.py", line 40, in modify_sd_on_dn     m.dn = Dn(self.ldb, object_dn) TypeError: argument 2 must be string, not ldb.Dn A transaction is still active in ldb context [0x2337ea0] on tdb:///usr/local/samba/private/sam.ldb I tried doing "kinit Administrator" and then repeating, but that didn't change the error. I see samba 4.8.0 was released yesterday,...

...elf.errf) File "/usr/lib/python2.7/dist-packages/samba/netcmd/ldapcmp.py", line 396, in __init__ self.attributes = self.con.get_attributes(self.dn) File "/usr/lib/python2.7/dist-packages/samba/netcmd/ldapcmp.py", line 207, in get_attributes res = self.ldb.search(base=object_dn, scope=SCOPE_BASE, attrs=["*"]) --------------------------------------------------------------------------------- samba-tool ldapcmp ldap://deb1.domain.tld ldap://deb2.domain.tld domain * Comparing [DOMAIN] context... * Objects to be compared: 39790 ERROR(ldb): uncaught exception - LDAP...

...lib/python2.7/dist-packages/samba/netcmd/ldapcmp.py", line > 396, in __init__ > self.attributes = self.con.get_attributes(self.dn) > File "/usr/lib/python2.7/dist-packages/samba/netcmd/ldapcmp.py", line > 207, in get_attributes > res = self.ldb.search(base=object_dn, scope=SCOPE_BASE, attrs=["*"]) > --------------------------------------------------------------------------------- > samba-tool ldapcmp ldap://deb1.domain.tld ldap://deb2.domain.tld domain > > * Comparing [DOMAIN] context... > > * Objects to be compared: 39790 > ERRO...

Adam, you already tried my suggestions? What do you see here: > Failed to modify SPNs on CN=SEC-CON03,CN=Computers,DC=domain,DC=com: > acl: spn validation failed for ... ^^^^^^ So read the links below and post your results The event id you showed, for now can be ignored. Inrelevant (for now). And mostlikly wil disapear when you added/fixed the "correct" spn's On

...ackages/samba/netcmd/ldapcmp.py", line >> 396, in __init__ >> self.attributes = self.con.get_attributes(self.dn) >> File "/usr/lib/python2.7/dist-packages/samba/netcmd/ldapcmp.py", line >> 207, in get_attributes >> res = self.ldb.search(base=object_dn, scope=SCOPE_BASE, attrs=["*"]) >> >> --------------------------------------------------------------------------------- >> samba-tool ldapcmp ldap://deb1.domain.tld ldap://deb2.domain.tld domain >> >> * Comparing [DOMAIN] context... >> >> * Object...

...ast): > File "./samba_CVE-2018-1057_helper", line 139, in <module> > sd_helper.modify_sd_on_dn(msg.dn, new_desc) > File > "/usr/local/samba/lib/python2.7/site-packages/samba/sd_utils.py", line > 40, in modify_sd_on_dn > m.dn = Dn(self.ldb, object_dn) > TypeError: argument 2 must be string, not ldb.Dn > A transaction is still active in ldb context [0x2337ea0] on > tdb:///usr/local/samba/private/sam.ldb > > I tried doing "kinit Administrator" and then repeating, but that > didn't change the error. > > I se...

...NFO (1) req : * req : union drsuapi_DsReplicaGetInfoRequest(case 1) req1: struct drsuapi_DsReplicaGetInfoRequest1 info_type : DRSUAPI_DS_REPLICA_INFO_NEIGHBORS (0) object_dn : NULL source_dsa_guid : 00000000-0000-0000-0000-000000000000 rpc fault: DCERPC_FAULT_CANT_PERFORM ERROR(runtime): DsReplicaGetInfo of type 0 failed - (3221356597, 'The operation cannot be performed.') File "/usr/lib/python2.7/dist-packages/s...

im not at a computer ti look some things up but im thinking.. dbdir=/usr/local/samba.PDC/dbdirwhat is the size of this dir. what is the size of the ad db dir on every server now. i think, something in the old db import causes a resyncwhen you modify something in the db  so i suggest try monitoring, disk io and cpu, look for buzzy files.  if we know the files, we know the processes using it.