Web lists-archives.com

[Samba] Problems after failed Upgrade to Samba 4.8.0 from 4.7.5




Hello $List,

 

i have a strange Problem:

 

I have a 3 DC Setup running with 4.7.5. All DCs are Raspberry PI's.

The setup was running fine, after i tried to upgrade to 4.8.0. I reverted to
4.7.5 and have now this error:

 

UpdateRefs failed with WERR_DS_DRA_ACCESS_DENIED/NT code 0xc0002105 for
63f4e656-6590-4c1d-a362-c3b97b5e464d._msdcs.local.laurenz.ws
CN=Schema,CN=Configuration,DC=local,DC=laurenz,DC=ws

 

No Matter which DNS Backend - i prefer bind by the way..

 

What happend in Detail:

 

Compiled 4.8.0 and created a deb package

Installed this deb package on DC3 (Hostname samba03)

Starting Samba 4.8.0 on that DC and all tools (samba-tool) for example fail
with complaining about to less memory

Deinstalled samba 4.8.0 and installed 4.7.5

Run source4/scripting/bin/sambaundoguididx on DC3
Start Samba 4.7.5
 
After that the above error occurs..
 
Then demote and rejoin
Then demote and remove dead dc running on DC1 then join
Then demote and delete all db-files and rejoin
Then demote and delete all db-files and rejoin - with dns_backend=BIND_DLZ
Then demote and delete all db-files and remove dead dc running on DC1 and
rejoin - with dns_backend=BIND_DLZ
 
Setting replication Issues via Active Directory Sites and Trusts.
 
DC1,2 are in Site A, DC3 in Site B
 
The mentioned failure still exists.
 
I have no idea any more.
 
 
 

 

Harz\SAMBA03
DSA Options: 0x00000001
DSA object GUID: 63f4e656-6590-4c1d-a362-c3b97b5e464d
DSA invocationId: 2f79315b-5363-4f97-8aac-52f82a586b82

==== INBOUND NEIGHBORS ====

DC=DomainDnsZones,DC=local,DC=laurenz,DC=ws
	Zuhause\SAMBA02 via RPC
		DSA object GUID: 948e49d3-e161-46c1-a2a0-91072eb408cc
		Last attempt @ Wed Apr  4 13:45:11 2018 CEST failed, result 8453 (WERR_DS_DRA_ACCESS_DENIED)
		160 consecutive failure(s).
		Last success @ Wed Apr  4 13:45:11 2018 CEST

DC=DomainDnsZones,DC=local,DC=laurenz,DC=ws
	Zuhause\SAMBA01 via RPC
		DSA object GUID: 2f342b05-98f4-430d-8613-7fceff09f982
		Last attempt @ Wed Apr  4 13:45:12 2018 CEST was successful
		0 consecutive failure(s).
		Last success @ Wed Apr  4 13:45:12 2018 CEST

CN=Configuration,DC=local,DC=laurenz,DC=ws
	Zuhause\SAMBA02 via RPC
		DSA object GUID: 948e49d3-e161-46c1-a2a0-91072eb408cc
		Last attempt @ Wed Apr  4 13:45:13 2018 CEST failed, result 8453 (WERR_DS_DRA_ACCESS_DENIED)
		168 consecutive failure(s).
		Last success @ Wed Apr  4 13:45:13 2018 CEST

CN=Configuration,DC=local,DC=laurenz,DC=ws
	Zuhause\SAMBA01 via RPC
		DSA object GUID: 2f342b05-98f4-430d-8613-7fceff09f982
		Last attempt @ Wed Apr  4 13:45:14 2018 CEST was successful
		0 consecutive failure(s).
		Last success @ Wed Apr  4 13:45:14 2018 CEST

DC=local,DC=laurenz,DC=ws
	Zuhause\SAMBA02 via RPC
		DSA object GUID: 948e49d3-e161-46c1-a2a0-91072eb408cc
		Last attempt @ Wed Apr  4 13:45:14 2018 CEST failed, result 8453 (WERR_DS_DRA_ACCESS_DENIED)
		162 consecutive failure(s).
		Last success @ Wed Apr  4 13:45:14 2018 CEST

DC=local,DC=laurenz,DC=ws
	Zuhause\SAMBA01 via RPC
		DSA object GUID: 2f342b05-98f4-430d-8613-7fceff09f982
		Last attempt @ Wed Apr  4 13:45:15 2018 CEST was successful
		0 consecutive failure(s).
		Last success @ Wed Apr  4 13:45:15 2018 CEST

DC=ForestDnsZones,DC=local,DC=laurenz,DC=ws
	Zuhause\SAMBA02 via RPC
		DSA object GUID: 948e49d3-e161-46c1-a2a0-91072eb408cc
		Last attempt @ Wed Apr  4 13:45:12 2018 CEST failed, result 8453 (WERR_DS_DRA_ACCESS_DENIED)
		160 consecutive failure(s).
		Last success @ Wed Apr  4 13:45:12 2018 CEST

DC=ForestDnsZones,DC=local,DC=laurenz,DC=ws
	Zuhause\SAMBA01 via RPC
		DSA object GUID: 2f342b05-98f4-430d-8613-7fceff09f982
		Last attempt @ Wed Apr  4 13:45:12 2018 CEST was successful
		0 consecutive failure(s).
		Last success @ Wed Apr  4 13:45:12 2018 CEST

CN=Schema,CN=Configuration,DC=local,DC=laurenz,DC=ws
	Zuhause\SAMBA02 via RPC
		DSA object GUID: 948e49d3-e161-46c1-a2a0-91072eb408cc
		Last attempt @ Wed Apr  4 13:45:15 2018 CEST failed, result 8453 (WERR_DS_DRA_ACCESS_DENIED)
		160 consecutive failure(s).
		Last success @ Wed Apr  4 13:45:15 2018 CEST

CN=Schema,CN=Configuration,DC=local,DC=laurenz,DC=ws
	Zuhause\SAMBA01 via RPC
		DSA object GUID: 2f342b05-98f4-430d-8613-7fceff09f982
		Last attempt @ Wed Apr  4 13:45:16 2018 CEST was successful
		0 consecutive failure(s).
		Last success @ Wed Apr  4 13:45:16 2018 CEST

==== OUTBOUND NEIGHBORS ====

DC=DomainDnsZones,DC=local,DC=laurenz,DC=ws
	Zuhause\SAMBA02 via RPC
		DSA object GUID: 948e49d3-e161-46c1-a2a0-91072eb408cc
		Last attempt @ NTTIME(0) was successful
		0 consecutive failure(s).
		Last success @ NTTIME(0)

DC=DomainDnsZones,DC=local,DC=laurenz,DC=ws
	Zuhause\SAMBA01 via RPC
		DSA object GUID: 2f342b05-98f4-430d-8613-7fceff09f982
		Last attempt @ NTTIME(0) was successful
		0 consecutive failure(s).
		Last success @ NTTIME(0)

CN=Configuration,DC=local,DC=laurenz,DC=ws
	Zuhause\SAMBA02 via RPC
		DSA object GUID: 948e49d3-e161-46c1-a2a0-91072eb408cc
		Last attempt @ NTTIME(0) was successful
		0 consecutive failure(s).
		Last success @ NTTIME(0)

CN=Configuration,DC=local,DC=laurenz,DC=ws
	Zuhause\SAMBA01 via RPC
		DSA object GUID: 2f342b05-98f4-430d-8613-7fceff09f982
		Last attempt @ NTTIME(0) was successful
		0 consecutive failure(s).
		Last success @ NTTIME(0)

DC=local,DC=laurenz,DC=ws
	Zuhause\SAMBA02 via RPC
		DSA object GUID: 948e49d3-e161-46c1-a2a0-91072eb408cc
		Last attempt @ NTTIME(0) was successful
		0 consecutive failure(s).
		Last success @ NTTIME(0)

DC=local,DC=laurenz,DC=ws
	Zuhause\SAMBA01 via RPC
		DSA object GUID: 2f342b05-98f4-430d-8613-7fceff09f982
		Last attempt @ NTTIME(0) was successful
		0 consecutive failure(s).
		Last success @ NTTIME(0)

DC=ForestDnsZones,DC=local,DC=laurenz,DC=ws
	Zuhause\SAMBA02 via RPC
		DSA object GUID: 948e49d3-e161-46c1-a2a0-91072eb408cc
		Last attempt @ NTTIME(0) was successful
		0 consecutive failure(s).
		Last success @ NTTIME(0)

DC=ForestDnsZones,DC=local,DC=laurenz,DC=ws
	Zuhause\SAMBA01 via RPC
		DSA object GUID: 2f342b05-98f4-430d-8613-7fceff09f982
		Last attempt @ NTTIME(0) was successful
		0 consecutive failure(s).
		Last success @ NTTIME(0)

CN=Schema,CN=Configuration,DC=local,DC=laurenz,DC=ws
	Zuhause\SAMBA02 via RPC
		DSA object GUID: 948e49d3-e161-46c1-a2a0-91072eb408cc
		Last attempt @ NTTIME(0) was successful
		0 consecutive failure(s).
		Last success @ NTTIME(0)

CN=Schema,CN=Configuration,DC=local,DC=laurenz,DC=ws
	Zuhause\SAMBA01 via RPC
		DSA object GUID: 2f342b05-98f4-430d-8613-7fceff09f982
		Last attempt @ NTTIME(0) was successful
		0 consecutive failure(s).
		Last success @ NTTIME(0)

==== KCC CONNECTION OBJECTS ====

Connection --
	Connection name: SAMBA01
	Enabled        : TRUE
	Server DNS name : samba01.local.laurenz.ws
	Server DN name  : CN=NTDS Settings,CN=SAMBA01,CN=Servers,CN=Zuhause,CN=Sites,CN=Configuration,DC=local,DC=laurenz,DC=ws
		TransportType: RPC
		options: 0x00000000
Warning: No NC replicated for Connection!
Connection --
	Connection name: SAMBA02
	Enabled        : TRUE
	Server DNS name : samba02.local.laurenz.ws
	Server DN name  : CN=NTDS Settings,CN=SAMBA02,CN=Servers,CN=Zuhause,CN=Sites,CN=Configuration,DC=local,DC=laurenz,DC=ws
		TransportType: RPC
		options: 0x00000000
Warning: No NC replicated for Connection!
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba