Web lists-archives.com

Re: [Samba] Unable to rejoin to domain as AD DC




Ok, smb.conf, that looks pretty normal. 

Os is centos 6.6, i see python 2.6, there was something with 4.8.0 and python 2.6 
I think i found it. ( see below ). 
So you need to wait for 4.8.1 or, upgrade you centos. 

/snap
On Wed, 2018-03-14 at 16:21 +0100, Christophe Borivant via samba wrote:
> Ok, for what i understand, this is a compatibility issue with python 2.6.
> This seems to be in relation with Dict Comprehensions (https://www.python.org/dev/peps/pep-0274/).
> 
> So yet, samba 4.8 cannot run on any rhel 6 like distribution.
> 
> Was it intended ?
> 
> Christophe Borivant

I don't think it was intentional, but it is showing the increasing cost
of maintaining Samba's compatibility with a version of python first
released in 2008!

Andrew Bartlett
-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba



Greetz, 

Louis



> -----Oorspronkelijk bericht-----
> Van: Krzysztof Paszkowski [mailto:kylo@xxxxxxxx] 
> Verzonden: donderdag 29 maart 2018 15:07
> Aan: 'L.P.H. van Belle'
> Onderwerp: RE: [Samba] Unable to rejoin to domain as AD DC
> 
> Sure, here it is.
> Before my try of update everything worked fine.
> # Global parameters
> [global]
>         workgroup = DOMAIN
>         realm = domain.net.pl
>         netbios name = BACKUP
>         server role = active directory domain controller
>         dns forwarder = 8.8.8.8
>         interfaces=br0.10 lo
>         bind interfaces only=yes
>         allow dns updates = nonsecure
>         host msdfs = no
>         template shell = /bin/bash
>         template homedir = /tmp
> 
> #       rpc server port = 49152
> 
> [netlogon]
>         path = /usr/local/samba/var/locks/sysvol/DOMAIN.net.pl/scripts
>         read only = No
> 
> [sysvol]
>         path = /usr/local/samba/var/locks/sysvol
>         read only = No
> 
> 
> Regards,
> Kris
> 
> -----Original Message-----
> From: samba [mailto:samba-bounces@xxxxxxxxxxxxxxx] On Behalf 
> Of L.P.H. van Belle via samba
> Sent: Thursday, March 29, 2018 2:42 PM
> To: samba@xxxxxxxxxxxxxxx
> Cc: kylo@xxxxxxxx
> Subject: Re: [Samba] Unable to rejoin to domain as AD DC
> 
> From you log:
> STATUS=daemon failed to start: Samba detected misconfigured 
> 'server role' 
> 
> Can you post your smb.conf? 
> 
> Greetz, 
> 
> Louis
> 
> 
> > -----Oorspronkelijk bericht-----
> > Van: samba [mailto:samba-bounces@xxxxxxxxxxxxxxx] Namens Krzysztof 
> > Paszkowski via samba
> > Verzonden: donderdag 29 maart 2018 14:32
> > Aan: samba@xxxxxxxxxxxxxxx
> > Onderwerp: [Samba] Unable to rejoin to domain as AD DC
> > 
> > Hi all,
> > 
> > I was trying to upgrade samba to 4.8.0 on one of my AD DC 
> (with Centos 
> > 6.6).
> > Sadly, there was some compatibility issues (I suppose so):
> > [root@backup samba-4.8.0]# samba-tool drs showrepl ERROR(<type
> > 'exceptions.SyntaxError'>): uncaught exception - invalid syntax 
> > (ms_schema.py, line 280)
> >   File "/usr/local/samba/bin/samba-tool", line 45, in <module>
> >     retval = cmd._run("samba-tool", subcommand, *args)
> >   File
> > "/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/_
> > _init__.py",
> > line 202, in _run
> >     return self.subcommands[subcommand]._run(
> >   File
> > "/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/m
> > ain.py", line
> > 35, in __getitem__
> >     fromlist=['cmd_%s' % attr]),
> >   File
> > 
> "/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/drs.py",
> > line 37, in <module>
> >     from samba.join import join_clone
> >   File
> > 
> "/usr/local/samba/lib64/python2.6/site-packages/samba/join.py", line 
> > 29, in <module>
> >     from samba.provision import secretsdb_self_join, provision, 
> > provision_fill, FILL_DRS, FILL_SUBDOMAIN
> >   File
> > "/usr/local/samba/lib64/python2.6/site-packages/samba/provisio
> > n/__init__.py"
> > , line 77, in <module>
> >     from samba.provision.backend import (
> >   File
> > "/usr/local/samba/lib64/python2.6/site-packages/samba/provisio
> > n/backend.py",
> > line 43, in <module>
> >     from samba.schema import Schema
> >   File
> > "/usr/local/samba/lib64/python2.6/site-packages/samba/schema.py",
> > line 28, in <module>
> >     from samba.ms_schema import read_ms_schema
> > 
> > I wasn't able to do anything.
> > I was trying to downgrade, but:
> > 
> > [root@backup samba-4.8.0]# source4/scripting/bin/sambaundoguididx
> > Traceback (most recent call last):
> >   File "source4/scripting/bin/sambaundoguididx", line 15, 
> in <module>
> >     from samba.dbchecker import dbcheck
> >   File "bin/python/samba/dbchecker.py", line 32, in <module>
> >     from samba.descriptor import get_wellknown_sds, get_diff_sds
> >   File "bin/python/samba/descriptor.py", line 31, in <module>
> >     from samba.schema import get_schema_descriptor
> >   File "bin/python/samba/schema.py", line 28, in <module>
> >     from samba.ms_schema import read_ms_schema
> >   File "bin/python/samba/ms_schema.py", line 280
> >     entry = header + [x for x in entry if x[0].lower() not 
> in {'dn', 
> > 'changetype', 'objectcategory'}]
> > SyntaxError: invalid syntax
> > 
> > Make install 4.7.6 and
> > 
> > [root@backup samba-4.7.6]# tail -f /usr/local/samba/var/log.samba
> >   STATUS=daemon failed to start: Samba detected 
> misconfigured 'server 
> > role'
> > and exited. Check logs for details, error code 22
> > [2018/03/27 23:05:20.378608,  0]
> > ../source4/smbd/server.c:448(binary_smbd_main)
> >   samba version 4.7.6 started.
> >   Copyright Andrew Tridgell and the Samba Team 1992-2017
> > [2018/03/27 23:05:20.449842,  0]
> > ../source4/smbd/server.c:600(binary_smbd_main)
> >   At this time the 'samba' binary should only be used for either:
> >   'server role = active directory domain controller' or to 
> access the 
> > ntvfs file server with 'server services = +smb' or the rpc 
> proxy with 
> > 'dcerpc endpoint servers = remote'
> >   You should start smbd/nmbd/winbindd instead for domain member and 
> > standalone file server tasks
> > [2018/03/27 23:05:20.449979,  0]
> > ../lib/util/become_daemon.c:111(exit_daemon)
> >   STATUS=daemon failed to start: Samba detected 
> misconfigured 'server 
> > role'
> > and exited. Check logs for details, error code 22
> > 
> > 
> > Local demoting didn't work either, so I decided to demote it 
> > from main DC
> > and join as new one. Everything looked fine. Server vanished from
> > controllers and DNS. Unfortunately the joining process has failed:
> > 
> > Join failed - cleaning up
> > ERROR(ldb): uncaught exception - LDAP error 50
> > LDAP_INSUFFICIENT_ACCESS_RIGHTS -  <Failed to add 
> CN=BACKUP1,OU=Domain
> > Controllers,DC=luxmed,DC=net,DC=pl: Updating the 
> > UF_TRUSTED_FOR_DELEGATION
> > bit in
> >   File
> > "/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/_
> > _init__.py",
> > line 176, in _run
> >     return self.run(*args, **kwargs)
> >   File
> > "/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/d
> > omain.py",
> > line 661, in run
> >     machinepass=machinepass, use_ntvfs=use_ntvfs, 
> > dns_backend=dns_backend)
> >   File 
> > "/usr/local/samba/lib64/python2.6/site-packages/samba/join.py", line
> > 1474, in join_DC
> >     ctx.do_join()
> >   File 
> > "/usr/local/samba/lib64/python2.6/site-packages/samba/join.py", line
> > 1375, in do_join
> >     ctx.join_add_objects()
> >   File 
> > "/usr/local/samba/lib64/python2.6/site-packages/samba/join.py", line
> > 611, in join_add_objects
> >     ctx.samdb.add(rec)
> > 
> > 
> > Any help appreciated. 
> > 
> > Regards,
> > Kris
> > 
> > 
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> > 
> > 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
> 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba