search for: set_errstr

Hello all, ? this is my first Post in a Mailing List I hope everything goes fine. ? We are running a Samba 4 DC (4.0.14, Version 4.1.4 has the same problem) as a second DC in our Windows Environment. This server is in a second site. ? So after a while Samba 4 hangs and it is not possible to talk to the server via the RPC Protocol. So all samba-tools Commands like ?samba-tool drs showrepl? run

...754 samba_dlz: defaultNamingContext: DC=<domain>,DC=corp 31-Oct-2018 13:26:56.754 samba_dlz: schemaNamingContext: CN=Schema,CN=Configuration,DC=<domain>,DC=corp   and then it starts the fail.     31-Oct-2018 13:26:56.758 samba_dlz: 31-Oct-2018 13:26:56.758 samba_dlz: ldb: ldb_asprintf/set_errstring: No such Base DN: CN=Directory Service,CN=Windows NT,CN=Services,CN=Configuration,DC=<domain>,DC=corp 31-Oct-2018 13:26:56.758 samba_dlz: ldb: ldb_trace_response: DONE 31-Oct-2018 13:26:56.758 samba_dlz: error: 32 31-Oct-2018 13:26:56.758 samba_dlz: msg: No such Base DN: CN=Directory Servi...

...ngContext: DC=<domain>,DC=corp 31-Oct-2018 > 13:26:56.754 samba_dlz: schemaNamingContext: > CN=Schema,CN=Configuration,DC=<domain>,DC=corp and then it starts the > fail. >   > 31-Oct-2018 13:26:56.758 samba_dlz: > 31-Oct-2018 13:26:56.758 samba_dlz: ldb: ldb_asprintf/set_errstring: > No such Base DN: CN=Directory Service,CN=Windows > NT,CN=Services,CN=Configuration,DC=<domain>,DC=corp Have you checked if the supposedly missing DN's are actually not there in AD ? > 31-Oct-2018 > 13:26:56.758 samba_dlz: ldb: ldb_trace_response: DONE 31-Oct-2018 &gt...

...ldb: ldb_trace_response: ENTRY dn: @MODULES @LIST: samba_secrets ldb: Destroying timer event 0x26e86f0 "ltdb_timeout" ldb: Ending timer event 0x1bc3540 "ltdb_callback" ldb: ldb_trace_request: REGISTER_CONTROL 1.2.840.113556.1.4.1413 control: <NONE> ldb: ldb_asprintf/set_errstring: unable to find module or backend to handle operation: request ldb: ldb_trace_request: SEARCH dn: <rootDSE> scope: base expr: (objectClass=*) attr: rootDomainNamingContext attr: configurationNamingContext attr: schemaNamingContext attr: defaultNamingContext control: <NONE> l...

...10, pid=32023, effective(0, 0), real(0, 0)] ../ source4/dsdb/samdb/ldb_modules/acl.c:1055(acl_modify) ldb:acl_modify: servicePrincipalName [2016/03/24 01:01:45.076866, 10, pid=32023, effective(0, 0), real(0, 0), class=ldb] ../lib/ldb-samba/ldb_wrap.c:76(ldb_wrap_debug) [...] ldb: ldb_asprintf/set_errstring: error in module acl: Constraint violation during LDB_MODIFY (19) [...] ldb: ldb_trace_next_request: (tdb)->del_transaction [2016/03/24 01:01:45.077191, 0, pid=32023, effective(0, 0), real(0, 0)] ../ source4/rpc_server/drsuapi/writespn.c:234(dcesrv_drsuapi_DsWriteAccountSpn) Failed to m...

...t;,DC=corp 31-Oct-2018 > > 13:26:56.754 samba_dlz: schemaNamingContext: > > CN=Schema,CN=Configuration,DC=<domain>,DC=corp and then it starts the > > fail. > > > > 31-Oct-2018 13:26:56.758 samba_dlz: > > 31-Oct-2018 13:26:56.758 samba_dlz: ldb: ldb_asprintf/set_errstring: > > No such Base DN: CN=Directory Service,CN=Windows > > NT,CN=Services,CN=Configuration,DC=<domain>,DC=corp > > Have you checked if the supposedly missing DN's are actually not there > in AD ? > > > > 31-Oct-2018 > > 13:26:56.758 samba_dlz: ldb:...

Hello Marc I changed the rights back to 600 and root:root to sam.ldb and i think the rights of sam.ldb.d directory are correct. -rw------- 1 root root 16M Apr 2 17:29 CN=CONFIGURATION,DC=MY,DC=DOMAIN,DC=DE.ldb -rw------- 1 root root 10M Apr 2 17:29 CN=SCHEMA,CN=CONFIGURATION,DC=MY,DC=DOMAIN,DC=DE.ldb -rw-rw---- 2 root bind 26M Apr 2 17:28 DC=DOMAINDNSZONES,DC=MY,DC=DOMAIN,DC=DE.ldb

...b: ldb_trace_response: ENTRY dn: @MODULES @LIST: samba_secrets ldb: Destroying timer event 0x81c1c5e0 "ltdb_timeout" ldb: Ending timer event 0x81c1c520 "ltdb_callback" ldb: ldb_trace_request: REGISTER_CONTROL 1.2.840.113556.1.4.1413 control: <NONE> ldb: ldb_asprintf/set_errstring: unable to find module or backend to handle operation: request ldb: ldb_trace_request: SEARCH dn: <rootDSE> scope: base expr: (objectClass=*) attr: rootDomainNamingContext attr: configurationNamingContext attr: schemaNamingContext attr: defaultNamingContext control: <NONE> l...

...lists.samba.org> wrote: > Hallo Marc > > I change the loglevel to 10 > > > database > "dlopen /usr/lib/x86_64-linux-gnu/samba/bind9/dlz_bind9_9.so -d 10"; > > and i get following errors: > > 02-Apr-2017 18:47:44.389 samba_dlz: ldb: ldb_asprintf/set_errstring: > No such Base DN: > DC=client008.my.domain.de,CN=MicrosoftDNS,DC=ForestDnsZones,DC=my,DC=domain,DC=de > 02-Apr-2017 18:47:44.389 samba_dlz: ldb: ldb_trace_response: DONE > 02-Apr-2017 18:47:44.389 samba_dlz: error: 32 > 02-Apr-2017 18:47:44.389 samba_dlz: msg: No such Base DN:...

We're evaluating joining another samba domain controller in read-only mode. With a default provisioning, when running the samba-tool domain RODC, it fails with the following error: ldb: ldb_trace_request: (tdb)->search ldb: ldb_asprintf/set_errstring: NULL Base DN invalid for a base search ldb_wrap open of hklm.ldb ldb: start ldb transaction (nesting: 0) ldb: ldb_trace_request: (tdb)->start_transaction ldb: start ldb transaction error: (null) ldb: ldb_trace_request: ADD dn: @ATTRIBUTES changetype: add key: CASE_INSENSITIVE value: CASE_INS...

...l.c:1055(acl_modify) > > > > ldb:acl_modify: servicePrincipalName > > > > [2016/03/24 01:01:45.076866, 10, pid=32023, effective(0, 0), real(0, 0), > > class=ldb] ../lib/ldb-samba/ldb_wrap.c:76(ldb_wrap_debug) > > [...] > > > > ldb: ldb_asprintf/set_errstring: error in module acl: Constraint > > > > violation > > during LDB_MODIFY (19) > > [...] > > > > ldb: ldb_trace_next_request: (tdb)->del_transaction > > > > [2016/03/24 01:01:45.077191, 0, pid=32023, effective(0, 0), real(0, 0)] > > ....

Hallo Marc I change the loglevel to 10 database "dlopen /usr/lib/x86_64-linux-gnu/samba/bind9/dlz_bind9_9.so -d 10"; and i get following errors: 02-Apr-2017 18:47:44.389 samba_dlz: ldb: ldb_asprintf/set_errstring: No such Base DN: DC=client008.my.domain.de,CN=MicrosoftDNS,DC=ForestDnsZones,DC=my,DC=domain,DC=de 02-Apr-2017 18:47:44.389 samba_dlz: ldb: ldb_trace_response: DONE 02-Apr-2017 18:47:44.389 samba_dlz: error: 32 02-Apr-2017 18:47:44.389 samba_dlz: msg: No such Base DN: DC=client008.my.domain....

...n_ex: could not open file /usr/local/samba/private/sam.ldb.d/CN=SCHEMA,CN=CONFIGURATION,DC=SAMBA,DC=FOO,DC=EDU,DC=HK.ldb: Permission denied [2013/11/19 12:00:05.530236, 10, pid=13968, effective(6000, 3085), real(6000, 0), class=ldb] ../lib/ldb-samba/ldb_wrap.c:71(ldb_wrap_debug) ldb: ldb_asprintf/set_errstring: Unable to open tdb '/usr/local/samba/private/sam.ldb.d/CN=SCHEMA,CN=CONFIGURATION,DC=SAMBA,DC=FOO,DC=EDU,DC=HK.ldb' [2013/11/19 12:00:05.530248, 1, pid=13968, effective(6000, 3085), real(6000, 0), class=ldb] ../lib/ldb-samba/ldb_wrap.c:71(ldb_wrap_debug) ldb: Unable to open tdb '...

...ng timer event 0x1d0cd60 "ltdb_timeout" tevent: Ending timer event 0x1d0ccb0 "ltdb_callback" ldb: no modules required by the db ldb: No modules specified for this database ldb: ldb_trace_request: REGISTER_CONTROL 1.2.840.113556.1.4.1413 control: <NONE> ldb: ldb_asprintf/set_errstring: unable to find module or backend to handle operation: request ldb: ldb_trace_request: SEARCH dn: <rootDSE> scope: base expr: (objectClass=*) attr: rootDomainNamingContext attr: configurationNamingContext attr: schemaNamingContext attr: defaultNamingContext control: <NO...

...allo Marc >> >> I change the loglevel to 10 >> >> >> database >> "dlopen /usr/lib/x86_64-linux-gnu/samba/bind9/dlz_bind9_9.so -d 10"; >> >> and i get following errors: >> >> 02-Apr-2017 18:47:44.389 samba_dlz: ldb: ldb_asprintf/set_errstring: >> No such Base DN: >> DC=client008.my.domain.de,CN=MicrosoftDNS,DC=ForestDnsZones,DC=my,DC=domain,DC=de >> 02-Apr-2017 18:47:44.389 samba_dlz: ldb: ldb_trace_response: DONE >> 02-Apr-2017 18:47:44.389 samba_dlz: error: 32 >> 02-Apr-2017 18:47:44.389 samba_dlz: msg...

...915, 10, pid=4165, effective(0, 0), real(0, 0), class=ldb] ../lib/ldb-samba/ldb_wrap.c:71(ldb_wrap_debug) ldb: ldb_trace_response: DONE error: 0 [2014/02/05 15:28:48.545976, 10, pid=4165, effective(0, 0), real(0, 0), class=ldb] ../lib/ldb-samba/ldb_wrap.c:71(ldb_wrap_debug) ldb: ldb_asprintf/set_errstring: subtree_rename: Cannot move CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ontdekkingsreis,DC=andolan to CN=NTDS Settings,CN=AD,CN=Servers,CN=Ontdekkingsreis,CN=Sites,CN=Configuration,DC=ontdekkingsreis,DC=andolan in config partition [2014/02/05 15:28:...

..., 0)] > ../ > source4/dsdb/samdb/ldb_modules/acl.c:1055(acl_modify) > ldb:acl_modify: servicePrincipalName > > [2016/03/24 01:01:45.076866, 10, pid=32023, effective(0, 0), real(0, 0), > class=ldb] ../lib/ldb-samba/ldb_wrap.c:76(ldb_wrap_debug) > [...] > ldb: ldb_asprintf/set_errstring: error in module acl: Constraint > violation > during LDB_MODIFY (19) > [...] > ldb: ldb_trace_next_request: (tdb)->del_transaction > [2016/03/24 01:01:45.077191, 0, pid=32023, effective(0, 0), real(0, 0)] > ../ > source4/rpc_server/drsuapi/writespn.c:234(dcesrv_drsuap...

...gt; > ldb:acl_modify: servicePrincipalName > > > > > > [2016/03/24 01:01:45.076866, 10, pid=32023, effective(0, 0), real(0, > 0), > > > class=ldb] ../lib/ldb-samba/ldb_wrap.c:76(ldb_wrap_debug) > > > [...] > > > > > > ldb: ldb_asprintf/set_errstring: error in module acl: Constraint > > > > > > violation > > > during LDB_MODIFY (19) > > > [...] > > > > > > ldb: ldb_trace_next_request: (tdb)->del_transaction > > > > > > [2016/03/24 01:01:45.077191, 0, pid=32023, eff...

Sorry my bad, thanks for spotting it. Should that explains also the failure to grab the mutex? Andrea Il 3/12/2019 12:14 PM, Rowland Penny via samba ha scritto: > On Tue, 12 Mar 2019 12:01:08 +0100 > Andrea Cucciarre' <acucciarre at cloudian.com> wrote: > >> The OS is OmniOS, the DC is Windows Server (not sure about the >> release), and below the smb.conf.

Hi all, SPN = servicePrincipalName A simple search returning all servicePrincipalName declared in your AD: ldbsearch -H $sam serviceprincipalname=* serviceprincipalname An extract from result concerning a lambda client: # record 41 dn: CN=win-client345,OU=Machines,DC=ad,DC=domain,DC=tld servicePrincipalName: HOST/MB38W746-0009 servicePrincipalName: HOST/MB38W746-0009.ad.domain.tld