search for: zamecek

Hi team, I have Samba (4.9.5) AD DC, and when trying to add second DC, join fail: # samba-tool domain join zamecek.home DC -U"SSUPS-ZAMECEK\administrator" --option='idmap_ldb:use rfc2307 = yes' --dns-backend=BIND9_DLZ Finding a writeable DC for domain 'zamecek.home' Found DC dc1.zamecek.home Password for [SSUPS-ZAMECEK\administrator]: workgroup is SSUPS-ZAMECEK realm is zamecek.home A...

...16:02, Rowland Penny via samba napsal: > On Mon, 25 Mar 2019 15:12:16 +0100 > franta via samba <samba at lists.samba.org> wrote: > >> Hi team, >> I have Samba (4.9.5) AD DC, and when trying to add second DC, join >> fail: >> >> # samba-tool domain join zamecek.home DC >> -U"SSUPS-ZAMECEK\administrator" --option='idmap_ldb:use rfc2307 = >> yes' --dns-backend=BIND9_DLZ Finding a writeable DC for domain >> 'zamecek.home' Found DC dc1.zamecek.home >> Password for [SSUPS-ZAMECEK\administrator]: >> workgr...

On Mon, 25 Mar 2019 15:12:16 +0100 franta via samba <samba at lists.samba.org> wrote: > Hi team, > I have Samba (4.9.5) AD DC, and when trying to add second DC, join > fail: > > # samba-tool domain join zamecek.home DC > -U"SSUPS-ZAMECEK\administrator" --option='idmap_ldb:use rfc2307 = > yes' --dns-backend=BIND9_DLZ Finding a writeable DC for domain > 'zamecek.home' Found DC dc1.zamecek.home > Password for [SSUPS-ZAMECEK\administrator]: > workgroup is SSUPS-ZAMECEK...

...1. If you run 'samba-tool dbcheck' on the DC you're trying to join, does it report any problems? 2. Try dumping the object it's failing on, just to see if there's anything odd with the objectClass attributes. E.g. ldbsearch -H ldap://$SERVER -b 'CN=Administrator,CN=Users,DC=zamecek,DC=home' 3. Try running the command again with an increased --debuglevel. I'm not sure it'll reveal anything more, but might be worth a shot. Thanks, Tim On 26/03/19 4:20 AM, franta via samba wrote: > Dne 2019-03-25 16:02, Rowland Penny via samba napsal: >> On Mon, 25 Mar 20...

On Wed, 27 Mar 2019 09:45:18 +0100 "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > Hai, > > > I dont think one noticed this.. > > ldbsearch -H ldap://dc4 -UAdministrator > ldbsearch -H ldap://dc1 -U Administrator > > So whats the difference when you see this responce of the command: > Invalid option -U: unknown ... >

...#39; on the DC you're trying to join, does > it report any problems? [root at dc1 samba]# samba-tool dbcheck Checking 701 objects NOTE: old (due to rename or delete) DN string component for lastKnownParent in object CN=RID Set\0ADEL:2df6a1a3-2a54-4385-ae71-5d95b1348310,CN=Deleted Objects,DC=zamecek,DC=home - CN=DC2-LYNX,OU=Domain Controllers,DC=zamecek,DC=home Not fixing old string component NOTE: old (due to rename or delete) DN string component for lastKnownParent in object CN=RID Set\0ADEL:d77e5f7f-cf78-40da-a895-466ea39cf88a,CN=Deleted Objects,DC=zamecek,DC=home - CN=DC2-LYNX,OU=Domain Co...

...iki): > > > > [root at dc1 samba]# samba-tool dbcheck > > Checking 701 objects > > NOTE: old (due to rename or delete) DN string component for > > lastKnownParent in object CN=RID > > Set\0ADEL:2df6a1a3-2a54-4385-ae71-5d95b1348310,CN=Deleted > > Objects,DC=zamecek,DC=home - CN=DC2-LYNX,OU=Domain > > Controllers,DC=zamecek,DC=home Not fixing old string component > > You can ignore lines like that, the '\0ADEL' means it is a deleted > object and will eventually go away. > > > > > 2. Try dumping the object it's fa...

......', > according to Samba Wiki): > > [root at dc1 samba]# samba-tool dbcheck > Checking 701 objects > NOTE: old (due to rename or delete) DN string component for > lastKnownParent in object CN=RID > Set\0ADEL:2df6a1a3-2a54-4385-ae71-5d95b1348310,CN=Deleted > Objects,DC=zamecek,DC=home - CN=DC2-LYNX,OU=Domain > Controllers,DC=zamecek,DC=home Not fixing old string component You can ignore lines like that, the '\0ADEL' means it is a deleted object and will eventually go away. > > 2. Try dumping the object it's failing on, just to see if there's...

...ministrator' > > I just wonder where '-U' went ? > > Rowland > I have been looking at the 'Administrator' object that the OP posted. The failure in his original post was this: ERROR(ldb): uncaught exception - descriptor_modify on CN=Administrator,CN=Users,DC=zamecek,DC=home failed: operations error at ../source4/dsdb/samdb/ldb_modules/descriptor.c:819 lines 816 - 820 in descriptor.c are these: objectclass = dsdb_get_last_structural_class(schema, objectclass_element); if (objectclass == NULL) { return ldb_operr(ldb); } So, it looks like (to m...